Privacy Policy
Effective date:13 October 2026
In short
- Junie is run by a sole trader in the Czech Republic, who is responsible for your data (details below).
- We keep your Google sign-in details, the words you save with the subtitle line each came from, and your study history, so the app can work.
- When you click a word, that word and the subtitle lines around it go to OpenAI to generate the explanation. Nothing that identifies you is sent with it.
- We don't sell your data, show ads, run analytics or tracking, or use your data to train AI models.
- You can delete your account and everything linked to it yourself, at any time, in the web app.
Who is responsible for your data
The controller of your personal data is Vít Vintrlík, a sole trader registered in the Czech Republic, IČO 18049257, registered address Nové sady 988/2, 602 00 Brno, trading asJunie ("we", "us").
Contact for anything in this policy, including requests to use your rights:[email protected], or by post to the address above. We have not appointed a data protection officer.
This policy covers the Junie browser extension, the web app athttps://app.learnwithjunie.com, the mobile app, and this website.
What we process, why, and for how long
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Your account: email address, whether your sign-in provider has verified it, your name, your Google account ID, your plan and its renewal date, and when you finished onboarding | To create your account and sign you in | Contract (Art. 6(1)(b) GDPR) | Until you delete your account |
| Words you save: the word and its reading, its explanation, the subtitle line it appeared in and that line's translation, the show, platform and episode, and when you saved it | To build your decks | Contract | Until you delete your account. Removing a single card hides it; it is erased when you delete your account. |
| Study history: your decks, each card's progress, when you saved each card, when it was shown to you in a review session, and each review answer (knew it or still learning), each with its time | To decide which cards to show you next and to show your progress | Contract | Until you delete your account |
| Episode lookups: when you open an episode with a subtitle feature switched on (AI explanations are on by default), the show and episode titles and IDs, air date, the display language of your streaming site, and the timing (not the text) of the episode's subtitles | To find and line up Japanese subtitles for that episode | Contract | Not stored with your account. We keep the episode's identity as shared reference data that is not linked to anyone. |
| Word explanations: the word you click, its subtitle line, up to two lines before it, the next line where available, the official English subtitle lines on screen with it where available, and the show title | To generate the explanation you asked for | Contract | Not stored by us unless you save the word. OpenAI keeps requests for up to 30 days for abuse monitoring. |
| Pronunciation audio: the word or sentence to be spoken | To play the pronunciation | Contract | The audio and the text it speaks are kept in a shared cache that is not linked to anyone |
| Usage records: for each explanation or audio clip, whether it succeeded, which provider and model served it, how much it used, and when | To apply the usage allowance in our Terms, and to control the cost of the AI features and stop abuse | Contract; legitimate interest (Art. 6(1)(f)) for cost and abuse control | Until you delete your account |
| Subscription: your Paddle customer ID, your subscription's ID and status, when we last checked it with Paddle, and the ID of a checkout you opened but have not finished | To switch the Full plan on and off | Contract | Until you delete your account |
| Sign-in sessions: a session ID and its secret token, which app you signed in from, and when the session was created, last extended and expires | To keep you signed in securely | Contract | A session stops working within 30 days of its last use. The record is deleted when you sign out of that session or delete your account. |
| Technical logs: error messages, which can contain your account ID (never your email), and our hosting provider's request logs, which contain IP addresses and browser details; and your IP address when you sign in, used to limit repeated sign-in attempts | To keep Junie running and secure and to fix faults | Legitimate interest | Deleted automatically after 30 days. The sign-in IP address is held only in our server's memory, never in the database, and is gone when the server restarts. |
| Backups: a continuously updated copy of our database, which holds everything above that we store | To restore Junie and your data after an incident | Legitimate interest, and our duty to keep your data secure (Art. 32 GDPR) | Up to 5 weeks. Data you delete stays in backups until they expire. Backups are only ever used to recover from an incident, and if we ever restore one, we first delete again every account deleted since that backup was made. |
| Deletion records: when you delete your account, its account ID and the time you deleted it, and nothing else | So that if we ever restore a backup, we can delete your account again before the restored copy is used | Legal obligation (Art. 6(1)(c)), to keep your erasure under Art. 17 GDPR effective | 5 weeks, the longest a backup can still hold your account; if we restore a backup in that time, 5 weeks from the restore. A deletion you make in the app is also noted in our server logs, which are deleted after 30 days. |
| Messages you send us | To answer you and handle your request | Contract; legal obligation (Art. 6(1)(c)) when you use a data protection right | 3 years after our last reply |
Our legitimate interests are: protecting Junie and its users from attacks and misuse, keeping the cost of the AI features under control, and finding and fixing faults. You can ask us for the assessment we made of these interests against yours.
We may also keep data we would otherwise delete for as long as we need it to establish or defend a legal claim, on the basis of our legitimate interest in doing so.
Where the data comes from
Your account details come from your Google account when you sign in with it. Your subscription's ID and status come from Paddle. Everything else comes from your use ofJunie.
Do you have to give it to us?
You need a Google account to create a Junie account; without one you cannot save words or review them. You can read this website without an account.
Your right to object
Where we rely on our legitimate interests, you have the right to object at any time, on grounds relating to your particular situation. Write to [email protected]. We will then stop, unless we have compelling legitimate grounds that override your interests, or we need the data to establish or defend a legal claim.
The browser extension
The extension works only on netflix.com and crunchyroll.com. On those sites it reads the subtitle track, the episode and show details, and the site's display language so it can make subtitle words clickable. It cannot read other sites, your other tabs, or your browsing history.
Data leaves your browser in these situations only:
- when you sign in or sign out: the sign-in with our server, and ending your session;
- when you open an episode with a subtitle feature switched on: the episode lookup described above;
- when you click a word: the word and its subtitle lines, to get the explanation and audio;
- when you save a word: the word, its explanation and its line, to add it to your deck.
Junie's use of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements. Our use of data collected by the extension adheres to theChrome Web Store User Data Policy, including the Limited Use requirements. We use the data only to provide Junie's features described here.
Cookies and storage on your device
We use no advertising, analytics or tracking cookies, so there is no cookie banner. Everything below is needed for a feature you asked for, which the law allows without consent (Art. 5(3) of the ePrivacy Directive and § 89(3) of Czech Act No. 127/2005 Sb.). You can remove any of it by signing out, clearing your browser data, or uninstalling the extension or app.
| Name | Where | Purpose | How long |
|---|---|---|---|
__Secure-better-auth.session_token | Cookie set by our server, used by the web app | Keeps you signed in | 30 days |
__Secure-better-auth.state | Cookie set by our server during sign-in | Protects the sign-in against forgery | 5 minutes |
sessionSize, showEnglish | Web app, browser local storage | Remember your review session size and whether translations are shown | Until you clear your browser data |
return-destination | Web app, browser session storage | Returns you to the page you were on after signing in | Until you close the tab |
| Paddle checkout | Set by Paddle's checkout, which this website loads only on its payment page, when you open checkout | Takes your payment; Paddle decides what it stores, and itsprivacy notice applies | As Paddle's privacy notice describes |
| Extension settings | Extension storage | Your language, whether AI explanations, romaji and kanji readings are switched on, and which subtitle track you last picked in the streaming site's own menu | Until you uninstall the extension |
| Sign-in token | Extension storage; the phone's secure storage in the mobile app | Keeps you signed in | Until you sign out, or the session expires |
To know which language to request show titles in, the extension also reads the display language setting Netflix and Crunchyroll keep in your browser. It does not change it.
Who receives your data
We share data only with the providers below, and only what each needs. Processors act on our instructions under a data processing agreement and may not use the data for their own purposes.
| Recipient | Role | What it receives |
|---|---|---|
| OpenAI Ireland Ltd (Dublin, Ireland) | Processor: generates word explanations | The explanation request described above, with no account identifier |
| Google Cloud EMEA Limited (Dublin, Ireland) | Processor: generates pronunciation audio | The text to be spoken, with no account identifier |
| Railway Corporation (San Francisco, USA) | Processor: hosts our server and database | All the data in this policy that we store |
| Cloudflare, Inc. (San Francisco, USA) | Processor: delivers this website and the web app, and runs our domain's DNS | Your IP address and technical request data |
| Paddle.com Market Limited (London, UK) and Paddle.com Inc. (USA) | Independent controller: sells the Full plan as our reseller and merchant of record | Your account email and an account reference when you open checkout. Everything you enter in Paddle's checkout goes to Paddle directly, and Paddle's ownprivacy notice applies. Paddle tells us whether your subscription is active. |
| Google Ireland Limited (Dublin, Ireland) | Independent controller: Sign in with Google | Your sign-in to Junie; Google's ownprivacy policy applies |
Paddle keeps its own customer record after you delete your Junie account. Ask Paddle at paddle.net about that record.
To identify episodes and find subtitles, our server also queries TMDB, AniList and Jimaku with show titles and a display language. Those requests come from our server and contain nothing about you.
We disclose data to public authorities only when the law requires us to. We do not sell your data or share it for advertising.
Transfers outside the European Economic Area
Some recipients process data in the United States:
- Railway, Cloudflare and Google are certified under the EU-U.S. Data Privacy Framework, which the European Commission found adequate in Decision (EU) 2023/1795 (Art. 45 GDPR). Their agreements with us also include the EU Standard Contractual Clauses (Decision (EU) 2021/914) as a fallback.
- OpenAI Ireland Ltd passes data to OpenAI's companies and subprocessors in the United States under the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
- Our server, our database and its backups are hosted in Railway's EU West region (Amsterdam, the Netherlands). Railway operates its service largely from the United States.
- Paddle's UK and US companies receive your purchase data under Paddle's own Standard Contractual Clauses, as its privacy notice describes.
You can ask us for a copy of the safeguards that apply by writing to[email protected].
AI features
Word explanations are generated by an AI model from OpenAI; pronunciation audio is generated by Google Cloud Text-to-Speech. Neither receives your name, email or account ID. OpenAI does not use our requests to train its models and keeps them for up to 30 days for abuse monitoring. Google does not log the text or the audio and does not use it to train its models.
We make no decisions about you by automated means that have legal or similarly significant effects. Choosing which cards to show you next is automated, but it only affects your study order.
Your rights
You have the right to:
- access your data and get a copy of it;
- correct data that is wrong;
- erase your data (you can delete your account yourself in the web app's Settings, see Delete your account);
- restrict how we use your data: while we check data you say is inaccurate; when our use is unlawful but you want the data kept rather than erased; when we no longer need the data but you need it for a legal claim; or while we check an objection you made;
- receive the data you gave us in a machine-readable format, or have it sent to another service (portability);
- object to processing based on our legitimate interests, as described above.
Write to [email protected] from the email address on your account. We answer within one month; if a request is complex we can extend this by two more months and will tell you why. Using your rights is free.
You can also complain to a data protection authority, in the country where you live or work, or where you think the problem happened. In the Czech Republic that is the Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7,uoou.gov.cz.
Children
Users under 18 need the permission of a parent or guardian to use Junie.
Security
All connections use HTTPS. Signing out ends the session on the device where you sign out; your other devices stay signed in.
Changes to this policy
If we change this policy in a way that matters to you, for example a new purpose or a new recipient, we will tell you by email or in the app before the change takes effect. The effective date at the top shows the current version.