Privacy Policy

Last updated: July 5, 2026

This Privacy Policy explains how HIBIKI ("we", "us"), operated by Hibiki, handles information when you use the Service. We aim to collect as little as possible.

1. Information we collect

• Account: your email address and display name, via our authentication provider (Supabase).
• Payments: processed by Paddle (Merchant of Record). We do not receive or store your card details; we keep only records of your plan, page balance, and transaction references.
• Usage: number of pages processed, your plan/tier, and timestamps — used to enforce quotas and fair-use.
• Content you upload: the images and text you process. See Section 3 — these are not stored on our servers.
• Optional survey: if you answer our survey, your genre choice and free-text response (submitted anonymously).
• Technical: basic request logs (e.g. IP address) needed for security and to operate the Service.
• Abuse prevention: at sign-up we derive a device identifier from your browser's characteristics, used solely to prevent multi-account abuse of the free tier.

2. How we use information

• To provide and operate the Service (translate and return your pages).
• To manage your account, billing, plans, and page quotas.
• To prevent abuse, fraud, and illegal use, and to keep the Service secure.
• To respond to your support requests and valid legal requests.

We do not sell your personal information.

3. Your uploaded content stays on your device

The images you upload and the translated results are stored in your own browser (IndexedDB), and are automatically deleted after 7 days. We do not persistently store copies of your uploaded images on our servers; while a job runs, content may be held briefly in server memory (e.g. to process it or to let you recover a finished result) and is discarded automatically. To produce a translation, your content is processed transiently by our translation pipeline and by a third-party AI translation provider (such as DeepSeek); it is used only to generate your result and is not retained by us for any other purpose.

4. Service providers

We rely on a small set of processors to run the Service:

• Cloudflare — hosting and content delivery.
• Supabase — authentication and database (account, usage, plan).
• Paddle — payment processing (Merchant of Record).
• AI translation provider(s) (e.g. DeepSeek) — to translate text transiently during processing.

These providers process data on our behalf under their own terms.

5. Cookies and local storage

We use a strictly necessary session cookie to keep you signed in, and your browser's local storage to remember preferences (e.g. theme) and to hold your in-progress pages as described above. We do not use advertising cookies.

6. Data retention & deleting your account

• Account and usage records: kept while your account exists, then deleted on request or after account closure (subject to legal/accounting obligations).
• Uploaded images and results: stored only on your device, deleted after 7 days.
• Payment records: retained by Paddle and by us as required for accounting/tax.

You can delete your account yourself from Settings → Delete account. Deletion starts a 30-day grace period: your account is locked and any active subscription is canceled immediately, but you can sign back in during those 30 days to restore your account and data. After 30 days, your account and personal data are permanently erased. We keep only the minimal financial records the law requires for accounting and tax (transaction amount, date and identifier), stripped of any link to you — never your images, which only ever existed in your own browser.

7. Your rights

Depending on where you live (e.g. under GDPR or CCPA), you may have the right to access, correct, delete, or export your personal data, or to object to certain processing. To exercise these rights, email support@hibikitl.com. You can also clear your local content at any time by clearing your browser storage.

8. Children

The Service is not directed to children. You must be at least 13 years old (16 in the European Economic Area) to use it. We do not knowingly collect data from children under these ages.

9. Security

We use reasonable technical and organizational measures to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International transfers

Your data may be processed in countries other than yours by us or our providers. Where required, we rely on appropriate safeguards for such transfers.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the current version.

Questions? support@hibikitl.com