What Banamoji stores, why it is used, and how you can manage it.
Last updated:
About this policy
This policy explains the current Banamoji typing app, its optional cloud saves, keyboard shop and guides. The operator and contact details shown below identify the service contact. Local practice works without enabling a cloud save.
Practice data on your device
The app stores nicknames, selected profiles, lesson and romaji completions, recent session results, missed-key counts, bananas, outfits, companion care and display settings in your browser. A recent local backup and cached app settings may also be kept. Use a nickname rather than a full name. Custom practice passages are processed in the browser; the app does not include the full passage or your full keystroke history in a cloud profile.
Optional accounts and cloud saves
When you choose cloud saving, the service stores a hosting-provided account identifier, your selected profile and its practice records, save revisions, update times and duplicate-save identifiers. The owner can view a cloud account’s nickname, status and stored profile, export it, pause cloud saving or remove the cloud record. Other device-local profiles are not remotely accessible through the dashboard. The player database does not store your email address; the sign-in gateway may process identity information to authenticate requests.
Optional public leaderboard
Ranked tests require an active cloud account. Starting one stores a generated challenge passage, category and start time, with at most one pending test per account. Publishing is optional: the final typed text is sent to calculate the score and is not retained in the score table. Your best score in each keyboard category is stored with your account identifier, generated Bana alias, accuracy and submission time. Only the alias, score and date are public. The owner can remove scores. Remove your scores in Leaderboard or delete your cloud account to remove stored ranking data. Country information supplied by hosting selects Japanese in Japan and English elsewhere on a first visit; your explicit language selection overrides it. The app does not request GPS or store country in a player profile.
Purposes of use
We use these records to run practice sessions, show progress and finger guidance, unlock lessons and games, provide virtual rewards and companion care, remember preferences, restore your chosen profile, prevent duplicate or conflicting saves, maintain service security and respond to enquiries. We do not use your practice records for behavioural advertising or sell them. If you contact the operator by email, the information you send is used to handle that enquiry and related security or legal obligations.
Service providers and external websites
Banamoji currently uses Sites hosting and its sign-in gateway, with Cloudflare Workers and D1 for app delivery and stored cloud records. Hosting and authentication providers may process connection, device, network, security and account information under their own terms and privacy notices. Processing is not promised to remain in one country. The app does not add third-party analytics or advertising tracking scripts. Product images may load from an external image host, which receives the connection information needed to deliver that image; image requests use a no-referrer setting. Retailer links lead to separate websites whose privacy and cookie practices apply after you follow them.
Storage, retention and deletion
Device-local data remains until you delete a profile or clear the site’s browser data. Signing out does not erase local records. Export a backup before clearing data if you want to keep it. Cloud profiles currently have no automatic expiry: they remain until deleted by the account holder or owner, or the service is discontinued. Use Sign in → Delete cloud save to remove the active cloud record; local copies and exported files remain until you remove them separately. Stopping sync does not delete an existing cloud save. Recent session results are capped at 300 per profile. Owner configuration audit records and provider logs are separate from practice profiles and may be retained for security, operational or legal reasons. Provider backups may follow their own deletion schedules.
Children and shared devices
Children should practise with a parent, guardian or teacher’s guidance and use a non-identifying nickname. Do not enter a child’s full name, school, contact details or sensitive information in profiles or practice text. Cloud sign-in is subject to the identity provider’s eligibility rules; this app does not provide a separate verified parental-consent service. Adults should manage any permitted cloud account used for a child’s practice. On shared devices, sign out and remove local profiles when needed. Please contact the operator if you believe a child’s personal information has been uploaded inappropriately.
Your requests and security
You can inspect and export local progress in Settings, stop cloud syncing, and delete your cloud save through the account panel. For requests about access, correction, deletion or use of information held by the operator, contact the address below. We may need proportionate information to verify that a request relates to your account; do not send passwords or sign-in codes. Requests are handled subject to applicable law and the information the service actually holds. The service uses owner authorization, same-origin write checks, input validation and revision checks. No online service or device storage can guarantee complete security or recovery.
Updates
Changes to this policy will be published on this page with a revised date. Review it when enabling a new feature or changing how you use the app. Both language versions describe the same service; contact the operator if you notice a translation discrepancy.
Contact conversations and website updates
When you use Contact, we store your subject, messages, replies and timestamps so the operator can respond privately. If signed in, the conversation is linked to your account identity. Guest access uses a secret link; its access token is saved in your browser and only a hash is stored on the server. Keep the link private. Message limits use a temporary hashed network/account identifier to reduce spam. Website updates are public; read states and guest conversation links are stored locally. Replies are delivered on the website, not by email. Clearing browser storage removes guest access unless you saved the private link. Contact the operator through your conversation to request deletion of its contents.
Operator & contact
Use the contact form to send a private enquiry. Account export and deletion controls are available in the app.