§// Legal

Privacy Policy

Last updated June 20, 2026

CORREZIANLABS (“we”) operates InputGarden, a Japanese immersion learning app for desktop and Android. This policy explains the personal data we process, why, and the rights you have under the GDPR. It is not legal advice.

01 // Data controller

The data controller is CORREZIANLABS (SAS (société par actions simplifiée)), 24 rue Henri Coineau, 87500 Saint-Yrieix-la-Perche, France. For any question about your data, contact contact@correzianlabs.com.

02 // What we collect

  • Account — your email, name and authentication identifiers, managed by our auth provider Clerk.
  • Billing — subscription status and a customer reference, via Clerk Billing and Stripe. Card details are handled directly by Stripe; we never see or store them.
  • Learning content — the cards, decks and media artifacts (subtitles, screenshots, deliberately captured or imported photos, selected photo crops, and audio clips) you create or sync, stored in your per-account database and object storage (Cloudflare R2).
  • AI usage — metadata about AI autofill requests (token counts, timestamps, plan tier) used to enforce limits and show your usage. The text you submit for lookup or autofill is sent to our AI provider to generate the response.

03 // Processors & sub-processors

We rely on a small set of providers, each bound by their own terms:

  • Clerk — authentication & billing orchestration.
  • Stripe — payment processing.
  • Cloudflare — Workers (API) and R2 (storage).
  • Turso — per-account database hosting.
  • Mistral — AI text processing for lookup & autofill.
  • Google Gemini — optional cloud OCR enhancement when on-device photo OCR is empty or weak.
  • Vercel — hosting of this website.

04 // Legal basis & retention

We process account and billing data to perform our contract with you, usage data on the basis of our legitimate interest in preventing abuse, and we keep data only as long as your account is active or as required by law. Deleting your account removes your synced content from our active systems.

05 // Android app permissions

The InputGarden Android app requests a few sensitive permissions, each tied to an explicit action you take:

  • Accessibility service & screen capture (media projection) — only when you tap the floating lookup bubble, the app reads or captures the current app window so it can run on-device optical character recognition (ML Kit) on the Japanese text shown there. The capture is processed locally and is not recorded, stored, or transmitted; only the word(s) you choose to look up are sent for a definition.
  • Camera and imported photos — used when you deliberately take or choose a still image for on-device OCR. Live preview frames are not retained. Deliberate stills are saved to Capture history and synced as account media by default. You can disable retention for future captures with Keep photo history or Private capture; existing history remains until you delete it. On-device OCR runs first; if its result is empty or weak, the frozen still may be sent to the authenticated cloud OCR service (Google Gemini) for an enhancement pass. A selected crop can also be retained with a card you choose to create. Selected text is sent to the AI provider only after you choose Look up, Translate, or Card.
  • Display over other apps — draws the floating lookup bubble so you can look words up in any app.
  • AnkiDroid database access — optional; only if you have AnkiDroid installed, so mined words can be written straight into your Anki collection.

You enable the accessibility service manually in system settings after an in-app disclosure, and can disable any of these permissions at any time.

06 // Your rights

Under the GDPR you may access, correct, export or delete your data, and object to or restrict certain processing. You can manage your profile and delete your account from your account page, or email contact@correzianlabs.com.

Privacy Policy · InputGarden