Effective: August 22, 2026
Baro Japanese Dictionary and its developer process only the minimum information needed to show a handwriting dictionary over other apps. Questions and deletion requests can be sent through the developer contact on the Google Play listing.
Accessibility features are used only after the user selects Accessibility button mode, accepts the in-app disclosure, and enables the service in Android Settings. The service opens and closes the panel, inserts a query only when requested, and supports automatic readable text colors.
Only when the displayed query is held does the app read the last selected text field, selection, and cursor position to insert the query. While automatic text style is active, the app can capture the screen behind the open panel and analyze brightness, color, and pattern. Screen pixels and text-field content are processed only in device memory. They are not saved, transmitted, or shared and are discarded when no longer needed. Protected screen capture restrictions are not bypassed.
Bubble button mode does not call Accessibility event, window, node, screen capture, or input control features. Holding the query copies it to the Android clipboard. Android and other apps control access to clipboard content.
Google ML Kit processes handwriting strokes and OCR assisted rereading images on the device. The app does not send handwriting images or recognition candidates to the developer. Korean and English dictionary searches use downloaded local databases.
Up to 25 recent queries per dictionary language can be stored in app-only storage with readings, up to three definition summaries, and associated strokes. These records are excluded from Android cloud backup and device transfer and are deleted when app storage is cleared or the app is uninstalled.
A report is sent to Firebase Cloud Firestore only after the user holds the microphone button and explicitly taps Send report. With a definition open, it contains the displayed headword, written forms, readings, meanings, selected issue type, optional details, app version, dictionary version, UI language, report time, and a SHA-256 fingerprint calculated from the dictionary content.
With no result open, the form instead sends an app-wide category, required details typed by the user, app version, UI language, and report time. The app does not automatically attach the current query or other context the user did not type.
Recent searches, handwriting strokes, OCR content, audio, screen content, text-field content, user ID, and the Premium-reminder device reference described below are not added to either report type. Do not enter personal information in report details.
Reports are used only to review and correct dictionary or app problems. They are deleted after review and no later than 12 months after submission.
The default Firestore database is configured in nam5, a United States multi-region, rather than a single worldwide region. Reports and Premium-reminder first-seen records submitted from outside the United States can be transferred to, stored in, and processed in the United States.
Every dictionary feature remains available in the free version. No Premium reminder appears for 14 days after the first launch. After that, a reminder appears on every third handwriting-panel opening. Only an actual closed-to-open transition is counted.
The app locally stores the first-open time, device-record consent state, panel-opening count for the reminder schedule, and cached purchase state. This local state is excluded from Android cloud backup and device transfer. Queries, definitions, the time of each opening, and screen content are not recorded for this decision.
To prevent reinstall or cleared app data from restarting the 14-day period, the app derives a purpose-specific SHA-256 hash from the app-scoped ANDROID_ID. After the app automatically applies the device-matched language on first launch, a separate disclosure first explains the data and purpose. The hash is not read or sent to Firestore until the user taps Agree and continue, and the user can choose Exit app instead. If Google Play confirms an existing Premium purchase, the app closes or skips this disclosure and does not start device-reference synchronization. The raw Android ID is not stored in app files, logs, or the server. Firebase Cloud Firestore uses the 64-character hash as a document key and stores only a schema version and the first server-seen time. The document does not contain queries, definitions, handwriting, panel-opening counts, or purchase state.
If the server recognizes an existing device after the free period, the next panel opening shows one reminder and the every-third-opening schedule then resumes. A factory reset, another Android user, another device, a signing-key change, or no network connection can prevent recognition. The server record is retained while needed to prevent reminder resets. The in-app privacy screen displays the full selectable device reference, which can be included in a deletion request sent through the Google Play developer contact.
Premium is a one-time, non-consumable Google Play purchase. Google Play processes the account, price, payment method, and transaction. The app temporarily receives the product ID, purchase state, and purchase token to grant and acknowledge the purchase but does not store payment details or the token in its own files or on a developer server.
The selected dictionary pack is delivered by Google Play Asset Delivery. Google Play can process the device, Play account, network, and download status needed for delivery. After download, queries and results are not sent to Google Play or the developer to use the pack.
The microphone is used only while the user has started voice search, and the app does not store audio. The speech recognition provider configured on Android can process audio and recognition results on its servers under its own policy.
Google ML Kit does not send the content of entered handwriting, OCR images, or recognition results to Google. For diagnostics and usage analysis it can collect the device manufacturer, model and OS, app package and version, per-install identifiers, API configuration, input and output sizes, processing time and performance, execution and error information, and configured languages.
Firebase Crashlytics diagnoses crashes and application not responding errors. When a failure occurs it can automatically send stack traces, exception class and message, relevant app state, app and device metadata, failure time, a Crashlytics installation UUID, Firebase installation ID, and session information. Firebase Sessions processes quality metrics such as the app package, OS, SDK and network connection type, device manufacturer and model, and foreground session start time.
The developer does not add queries, recent searches, handwriting, OCR, screen content, or text-field content as Crashlytics user IDs, custom keys, or logs. Firebase states that Crashlytics stack traces and associated identifiers are kept for 90 days before deletion starts.
Firebase App Check helps reduce forged app access to Firestore. In production it processes a Google Play Integrity token and Firebase user agent. The user agent can include the OS, device name, model, brand and form factor, installer, and Firebase SDKs and versions. Firebase Installations creates a per-installation ID. That ID can change after reinstall, so the Premium-reminder record uses the separate app-scoped Android ID hash described above.
The Firebase Analytics SDK is not included. Searches, screen navigation, feature use, purchase conversion, and user properties are not sent as behavioral analytics events. Crashlytics is a failure diagnostic service and is separate from behavioral Analytics.
This policy and the license page are served by Firebase Hosting. Hosting processes visitor IP addresses to provide the service and detect abuse and, according to Firebase, can retain them for a few months.
Firebase encrypts information in transit with HTTPS and encrypts Firestore and Crashlytics data at rest. Access to reports, Premium-reminder records, and the Firebase project is limited to developers who need it. The developer does not collect or sell screen content, text-field content, handwriting, audio, recent searches, or the panel-opening count used for the free use notice.
Firebase processing follows the Google Privacy Policy, Firebase privacy and security information, and Firebase Android data disclosure.
