Privacy Policy
Effective: 11 June 2026 · Revised: 14 September 2026
Mukashi is an English reading service for children and their families. We collect as little as possible, and we treat what we do collect with care. We operate from Japan, and because families outside Japan can use Mukashi, we follow Japan's Act on the Protection of Personal Information, the EU GDPR, and the US Children's Online Privacy Protection Act.
1. What we collect
- A parent's or teacher's email address, password and name
- A child's name or nickname, and their PIN, which is stored encrypted
- A child's date of birth, if you give it. It is used for one thing: so Hoshi can notice their birthday. Mukashi works without it
- Reading progress: books read, stars earned, words found, quiz answers, gifts received
- For schools: which class a child is in, and notes their teacher writes
- Subscription status, passed to us by Stripe. Card numbers never touch our servers
- Your email address, if you sign up for the newsletter
2. Why we use it, and on what basis
- Providing the service (accounts, reading records, reporting progress to you): to perform our contract with you
- Payment and billing: to perform the contract, and to meet our legal obligations
- Answering your questions and improving Mukashi: our legitimate interests
- The newsletter: your consent, which you can withdraw at any time
We never use any of it for advertising.
3. Advertising and tracking
There is no advertising in Mukashi. There is no ad tracking. We never sell data to anyone.
We do measure how Mukashi is used, so that we can make it better. This is called product analytics. We use PostHog, on servers in the European Union. It records which pages are opened, and a small number of actions, such as turning narration on or finishing a tour. It never records a picture of your screen, and it never follows you to other websites. A parent or teacher is counted by their account number, never by their name or email address. A child is never identified at all.
4. Children's information
Mukashi has no social features. A child cannot publish anything, and nothing a child makes is shared with anyone.
Recording a child's voice. Mukashi can record a child saying a word, so they can hear themselves and a family can keep it. Those recordings never reach us. They are saved on the device the child used and nowhere else. We cannot hear them, we cannot retrieve them, and no copy exists on our servers or anyone else's. Nothing is checked, scored or marked. A grown-up can save the recordings to that device or delete them at any time, and because they live only on the device, they are lost if it is reset or its browser data is cleared. The microphone is used only while a child is recording, and only after the browser has asked your permission.
A child's activity is visible to the parent who manages the account. Where a school uses Mukashi, their class teacher can see it too: progress, the words they have found, and the notes that teacher writes.
We collect information about children under 13 on the basis of a parent's consent. That consent is given at signup, where the parent confirms they are the child's parent or guardian and agrees to these documents, and we keep a record of it. Consent can be withdrawn at any time, and we will delete the child's information when it is.
5. Schools
When a school uses Mukashi, the school decides what happens to its pupils' information and we handle it on the school's instructions. For schools where GDPR applies, we will enter into a data processing agreement. Write to hello@mukashi.world.
6. Where it is kept, and who else handles it
Our database and application servers are in Japan (Tokyo). These companies handle information on our behalf, each for one job:
- Supabase (database, sign-in): Japan (Tokyo)
- Vercel (hosting, file delivery): processing in Japan (Tokyo); files are delivered through servers in many countries
- Stripe (payments): United States and Ireland. Card details do not pass through Mukashi
- Resend (email): United States. Adult email addresses only
- Cloudflare (blocking automated signups): servers in many countries
- Sentry (error reports): Germany. Technical fault details only. Names, email addresses and account identifiers are removed on the device before a report is sent, and we never record a picture of the screen
- PostHog (product analytics): European Union. How Mukashi is used. No names or email addresses
Where information leaves Japan, our contracts with these companies carry the safeguards required to protect it.
7. How long we keep it
Reading records are kept for 24 months after you last use Mukashi, so a returning family finds them waiting and a child can carry on where they left off. We count from whichever is latest: the end of your subscription, your last sign-in, or the moment you ask us to keep them below.
We always warn you before deleting anything. We write to your registered email 30 days, 14 days, 7 days, 3 days and 1 day before the date. One tap on the button in that letter keeps the records for another 24 months. No password, no subscription, nothing to buy. If you do nothing, we delete them on the date we told you.
If you ask us to delete your information, we act within 30 days. Newsletter details are kept until you unsubscribe.
8. Your rights
For your information and your child's, you can ask us for:
- Access, to see what we hold
- Correction
- Deletion
- Restriction of how we use it
- A portable copy, in a format you can take elsewhere
- Objection to a particular use, and withdrawal of consent
Write to hello@mukashi.world and we will act promptly.
9. Cookies and local storage
The website stores functional preferences in your browser, such as your language choice. It also stores one analytics cookie on mukashi.world, so that a visit to the website and a visit to the app can be counted as one visit rather than two. That cookie holds a random number and nothing else. No advertising cookies.
Voice recordings are also kept in the browser's own storage on your device. They are never uploaded. Clearing your browser's data for Mukashi deletes them.
10. Contact and complaints
Questions about this policy go to hello@mukashi.world. You can also complain to Japan's Personal Information Protection Commission, or, if you live in Europe, to your country's supervisory authority.
11. Changes
If this policy changes, we will post the new version here. Important changes will also be sent to your registered email.