Handling of personal information in the school edition

This document is written for school and board-of-education staff. It sets out the personal information handled by the school edition of Typing Musou (classes, assignments, the gradebook, Google Classroom integration, and related features), in the order such matters are usually raised during a cloud-service review. Information handled by Joho Musou (typingmusou.com/joho), the learning feature for spreadsheets, document writing, presentations, and the like that is used together with the school edition, is also covered in each section.

Last updated: October 18, 2026

1. Status of this document

This document supplements our Privacy Policy (the 'main policy') with a fuller account of the school edition. It does not replace the main policy and should be read alongside it. Where this document and the main policy differ in respect of the school edition, this document prevails. Matters not covered here are governed by the main policy. The conditions of use for the school edition are set out in Article 10 of the Terms of Service.

2. Operator

The personal information handler for this Service ('we') is as follows.

Operatorタイピング無双
Representative横山誠
Contact / complaintssupport@typingmusou.com

The registered address (the representative's own address, as this is a sole proprietorship) will be provided promptly in writing on request — via the contact above or the contact page linked below — and is stated in the service agreement and quotation when a contract is concluded.

3. Our standing and the division of roles

The division of roles between your school and us in the school edition is shown in the table below. Within it, the personal information handled falls into two categories with different standings. This distinction determines which party receives requests for disclosure, correction, and deletion (the two items below the table).

MatterYour schoolUs
Explanation and consent for guardians and studentsExplaining to guardians and obtaining any necessary consent. Letting students know, before they join a class, what teachers and classmates will be able to seeProviding materials you can use for the explanation (§14)
Accounts (IDs)Issuing and suspending students' and teachers' Google accounts (Google Workspace), and settings such as two-step verificationWe hold no passwords and rely on Google for authentication. Students can also join with a class code alone, without a Google account
Joining classes and rostersKeeping class codes from anyone not enrolled. Keeping rosters and roster numbers accurateProviding the joining mechanism and preventing unauthorized joining
Teacher permissionsAsking us to add or remove teachers, and confirming teachers who register with an address other than the school's. School admins can also remove teachers from the school themselvesRegistering teachers, approving requests made with an invite code, assigning school admins, and removing teachers from the school. Records of these operations (§12)
AssessmentFinal decisions on, and explanation of, assessmentCalculating scores and completion status that support assessment
Devices, school network, and Google WorkspaceConfiguration and management (including filtering)Providing the information needed for configuration, such as the hosts to allow
Running the Service—Operating and monitoring the servers, addressing vulnerabilities, and storing and backing up data
IncidentsIncidents on your school's devices or accounts. Contacting guardians and students. Reporting to the Personal Information Protection Commission about information entrusted to us by your schoolInvestigating, containing, and preventing recurrence of incidents on the Service. A first notice within 24 hours and the information you need for your report (§13)
Providing recordsRequesting them to the extent neededProviding the access and operation records relating to your school that are still within their retention period (§13)
Return and deletion of dataExporting CSV files. Requesting deletionProviding CSV files within 30 days of a request (§11). Deleting on request and keeping a record of the deletion (§10)
Requests for disclosure and the likeReceiving requests from students and guardians (§16)Passing on to your school any such request that reaches us

The table summarizes the division of roles. The details are governed by the relevant sections of this document and Article 10 of the Terms of Service.

  • Information entrusted to us by the school (we act as processor) — rosters, enrolment records, roster numbers, in-class display names, assignment completion status, submissions, grading records, teacher comments, notices students send their class teacher about the lesson-time battle restriction, and contract information. For these, your school (or its founding body) is the personal information handler and we handle them under entrustment. We do not use them beyond your instructions and the scope of the service agreement, do not repurpose them, and exclude them from the creation of anonymously processed information.
  • Information handled between the student and us (we are the handler) — the Service account, username, gameplay records from battles and the dojo, keystroke records, Joho Musou learning records, and the like. These arise from the student's use of the Service as an individual user, and we continue to handle them on our own responsibility after the student joins a class. The school edition shows part of this record to teachers for the purpose of instruction (Joho Musou learning records are not shown to teachers; see §7). However, these records of a student who has ever joined a class are never used for research, for creating anonymously processed information, or for provision to third parties (see §5).

4. Categories of personal information handled

The categories handled by the school edition are set out below, grouped by how they are obtained. They include the parts of the records belonging to a student's own account (§3) that the school edition shows to teachers. Keystroke records and Joho Musou records, which the school edition does not use and never shows to teachers, are listed separately in the last three rows of the table. The Google Classroom items arise only where a teacher performs the connection; where no connection is made, none of them is collected.

How it is obtainedCategoriesPurpose
Entered by the student when joining a classRoster number; display name used only inside the classOrdering the roster, identifying the student on the progress board, matching against the school roster
Generated automatically from the student's playAssignment completion status and timestamps, whether completed by the due date, a record of each individual practice run (kind of practice, speed, accuracy, timestamp, difficulty of the practice opponent), the number of practice runs and battles (not who the opponents were or what happened in the battles), best dojo records (best speed and rank in the 60-second challenge, best accuracy in accuracy practice, the stage reached in the home-position dojo), rating, when the student joined the class, when the student last played, per-key attempt and miss counts, and whether the anti-cheat checks reactedAutomatic assessment of assignments, progress aggregation, growth records, class and school rankings, weak-key analysis, review by teachers (an anti-cheat reaction is shown only as a 'Needs review' mark; see §7)
Entered by the studentThe text of submissions and a snapshot of weak keys at the time of submissionReviewing and giving guidance on submitted work
When a student tells the class teacher about the lesson-time battle restrictionThe reason, chosen from three ('It's break time now', 'There's no school today', 'A teacher said it's OK'; there is no free-text field), the lesson concerned (date and period), and when it was sentReview by the class teacher and the decision whether to lift the restriction
Entered by the teacherAssignment details (title, a short message from the teacher, target, repetition, due date, and which students it is for), score overrides, exemptions, which teacher acted, individual comments and returns, class settings (class name, year group, school year, lesson timetable, the lesson-time battle restriction and the periods when it does not apply), and class-teacher assignments (including a record of who added them)Posting assignments, recording assessment, individual guidance, running the class
When a student signs in with a Google account on the school's domainA hint as to which school the student belongs to (the domain used to sign in)Suggesting the school when joining a class; never used to establish membership
The Google Classroom roster (only where a teacher connects it)Student and teacher names, school email addresses, Google Classroom user identifiers, course name and identifierMatching the Google Classroom roster against enrolment in the Service; setting up the teachers responsible for a class
A teacher roster entrusted to us at contract timeTeacher names, work email addresses, assignments (year group, subject, etc.)Linking a teacher to their school and classes at sign-in
When a teacher registers with a school (by an invitation-code request that we approve, or by matching the contract-time roster)The school, the role (teacher or school administrator), how the teacher registered, whether the teacher has chosen not to use Google Classroom, pending invitation-code requests, and records of teachers removed from the school and of declined requests (the account, the work e-mail address, the date and time, and the operator who did it)Linking the teacher to the school and classes, deciding permissions, showing guidance about the integration, preventing a removed teacher from registering again
When a teacher connects Google ClassroomThe email address and identifier of the consenting Google account, the access grant issued by Google (refresh token), and the identifiers of assignments posted to Classroom and of each student's submissionPosting assignments, returning grades, syncing rosters
When a teacher signs in and confirms their identity with a passkey (when signing in with an account other than the school's Google Workspace account, or when the school has not registered its domain)The Google Workspace domain of the Google account used to sign in (kept only in the cookie on the signed-in device, never stored in our database), the passkey's public key and identifier, the passkey's name, when it was registered and last used, and whether it is syncedDeciding whether a passkey check is needed; confirming the teacher's identity (protection against impersonation)
Contract and billing administrationSchool name, type of school, prefecture, the domain of the school's Google accounts, the name and contact email address of the school's representative, contract status and expiry, billing and payment records, operator action history and sales notesConcluding, performing, and administering the agreement; evidence for deletion requests
Inquiries from schools and teachers (the contact form, the support email address, and the LINE Official Account for teachers)The content of the inquiry and our replies, contact details (the account and its email address where signed in, the sender's email address, or the LINE user identifier, display name, and profile image), any attached image, and the browser type (for the form)Answering inquiries, checking reported faults, keeping a record of how each was handled
Generated automatically from the student's play (not used by the school edition)Typing-speed statistics (the mean and variance of the interval between keystrokes, per key and per pair of consecutive keys), per-key totals for each practice run (attempts, misses, keystroke intervals), and a record of each missed keystroke (the key expected, the key pressed, the previous key pressed, the character being typed, and the time since the start of the word)Showing the student their own weak keys (in the monthly report, which uses attempt and miss counts only). Never used for research (see §5). Never shown to teachers (see §7)
Generated automatically when a student studies in Joho Musou (not used by the school edition)A record of each lesson or test (start and finish times, stars, number of correct answers in tests, study time, number of attempts); how each attempt went (for each step or question: whether it was reached and answered correctly, the number of mistakes, how many hint levels were opened, whether the demonstration or the answer was shown, the time spent, the choices picked in word checks and the feedback messages shown — both limited to text written in the lesson materials —, the step at which an unfinished attempt stopped, the general type of device used such as Chromebook, iPad, or Windows, and the user category when the attempt started: a general user, or a student or teacher of a school); the days on which the student studied; and the in-game currency awardedShowing the student their own learning record and carrying it over to other devices, awarding in-game currency, showing the daily goal and study streak, and tallying to improve the lesson materials (to find and fix confusing materials). Never shown to teachers (see §7). Never used for research (see §5)
When a student uses their own records in Joho Musou spreadsheet lessonsThe student's own Typing Musou records (dates and times, practice menus, WPM, accuracy, time spent, and frequently missed keys). Nothing new is stored on our servers; the records are kept in the browser on the student's device for up to 30 daysShowing them on the student's own screen as a learning table. Never shown to anyone else, teachers included (see §7)

For information collected across the Service generally (Google account information, access logs, analytics data, and so on), please refer to Article 2 of the main policy. The 'currently connected / what they are practising now' display on the class teacher's screen lives only in the server's transient memory and is never stored (see §7). Where a student has not set an in-class display name, the roster and rankings show that student's in-game username instead (see §7). The Service does not collect special care-required personal information (medical history, disability status, or entries in a student's cumulative guidance record other than grades). In Joho Musou, text typed by students, and the contents of spreadsheets, documents, and slides built in the practice apps together with any photos placed in them, are never sent to our servers, and we do not collect them (they are kept only in the browser on the device; see §10). For word-check choices and feedback messages, only text identical to that written in the lesson materials is sent. Joho Musou does not use the microphone or the camera.

5. Purposes of use

Within the school edition, the categories above are used only for the following purposes (the keystroke records and Joho Musou records in the last three rows of the §4 table are not used by the school edition; the purposes for which the Joho Musou records are used are those set out in the §4 table). How the records belonging to a student's own account (§3) are handled outside the school edition is governed by the main policy. However, the records of any student account that has ever joined a class, including play and keystroke records and Joho Musou learning records, are never used for research, for creating anonymously processed information, or for provision to third parties (Article 6 of the main policy). This continues to apply after the student leaves the class. We do not use them for serving advertising, measuring advertising performance, or profiling, and we do not sell them to third parties.

  • Running classes (including the lesson-time battle restriction); distributing and automatically assessing assignments; aggregating and displaying progress; producing growth records; displaying class and school rankings; analysing weak keys
  • Supporting teachers in instruction and assessment (including producing the gradebook, CSV exports, and reviewing anti-cheat reactions)
  • Where a teacher performs the connection: posting assignments to Google Classroom, returning grades, retrieving submission states, and posting announcements to the class
  • Concluding, performing, and administering the agreement with the school or its founding body (including contract status and billing administration)
  • Incident response, abuse investigation, and answering inquiries
  • Making every Joho Musou lesson available to students who belong to a class of a school under contract, and to that school's teachers (Joho Musou refers only to whether the account belongs to a class of a school under contract or is a teacher at such a school; it does not refer to the school's name, the class, or roster information)

6. Processors, external services, and storage locations

Information entrusted to us by schools is stored in Japan. The providers we use are as follows. For providers marked as processors, we confirm the contents of the terms of service and data handling arrangements each provider sets before entrusting data. Providers marked as not our processors handle information on their own responsibility under their own terms and privacy policies. We do not provide rosters, roster numbers, in-class display names, submissions, grades, or teacher comments entrusted to us by schools to providers that are not our processors, with one exception: Anthropic, PBC (Claude), which the Operator may have handle this information in the course of development, maintenance, and related work (§8). Google Classroom is a transmission to the environment your school administers.

ProviderRelationship to usRoleInformation handledStorage location
Us (self-operated)UsOperating the application and databaseAll categories in §4 of this documentJapan
Oracle Corporation Japan (Oracle Cloud Infrastructure)ProcessorProviding server infrastructure; we operate PostgreSQL ourselves on itAs above (as the location of the database we operate)Japan (Tokyo region)
Google LLC (Google account authentication)Not our processor (Google handles the information on its own responsibility; at sign-in, Google provides information to us)Sign-in authenticationAccount identifier, email address, display nameUnited States
Google LLC (Google Classroom API)Not our processor (handled in your Google Workspace under the agreement between your school and Google)Roster import, assignment posting, grade return, posting to the class (only where a teacher connects it)Course name, roster names and email addresses, assignment content, grades, posts to the class (a how-to material and a weekly summary for the class as a whole, containing no student names)United States (the Google Workspace your school administers)
Google LLC (Google Analytics 4)ProcessorAccess analytics (separate properties for Typing Musou and Joho Musou)Page views, browser cookie IDs, and the like (see §9)United States
Microsoft Corporation (Microsoft Clarity)Not our processor (Microsoft handles the information on its own responsibility and may also use it to improve its own services and for advertising)Interaction analytics (Typing Musou only; not used in Joho Musou)As above (see §9)United States
OpenAI, L.L.C.Processor (content sent is used to train the company's models)Username screening only (see §8)Only the entered username textUnited States
Cloudflare, Inc.ProcessorRelaying and protecting all traffic to and from the Service (faster delivery, blocking attacks)Traffic content (IP address, pages accessed, data sent and received)United States (relayed through points of presence in many locations, including Japan)
Zoho (Zoho Mail)ProcessorSending, receiving, and storing email to the support address (support@typingmusou.com)The content of inquiries and contact detailsJapan
LY Corporation (LINE Official Account)Not our processor (LY Corporation handles the information under its own terms)Exchanging messages through the contact channel for teachersThe content of inquiries and contact detailsJapan
Anthropic, PBC (Claude)Not our processor (used through the Operator's personal account on an individual plan, with no data processing agreement; Anthropic handles the information under its own terms. Used with a setting under which inputs are not used for training, but content Anthropic selects for safety review may be used for training)Assisting the Operator's work: developing the Service (including investigating and fixing bugs), maintenance and operation, handling requests from schools, answering inquiries, reviewing inappropriate usernames, and dealing with abuse (see §8)Information needed for the task. This may include rosters, roster numbers, in-class display names, assignment completion status, submissions, grades, and teacher comments entrusted to us by schoolsUnited States

The information required by Article 28 of Japan's Act on the Protection of Personal Information in respect of transfers to third parties located outside Japan (the personal-data-protection regime in the destination country and the safeguards taken by the recipient) is set out in Article 5 of the main policy.

7. Who can see what

This is the most important point in the school edition. Because the Service runs on the same account as the game, part of the record of practice a student does outside school is shown to teachers, as described below. Please be sure to cover this when informing students in advance; the Service also displays the same point on its class-join screen, immediately above the join button.

InformationClass teacherTeachers at the schoolOther students in the classStudents in other classes at the schoolOutside the school edition
Roster numberView and editViewViewNot shownNot shown
In-class display name (or the in-game username, if unset)View and editViewViewRankings onlyNot shown
Assignment completion, submissions, scores and exemptionsView and editViewNot shownNot shownNot shown
Teacher comments and returnsView and editViewNot shownNot shownNot shown
Weak-key analysisViewViewNot shownNot shownNot shown
Typing-speed statistics and the record of each missed keystrokeNot shownNot shownNot shownNot shownNot shown
Joho Musou learning records (per-lesson records, attempt details, study days), and the student's own Typing Musou records used in spreadsheet lessonsNot shownNot shownNot shownNot shownNot shown
Growth record, recent practice list, number of practice runs and battles, best dojo records, and when the student last played (includes practice outside school)ViewViewNot shownNot shownNot shown
Whether the anti-cheat checks reacted (the 'Needs review' mark)ViewViewNot shownNot shownNot shown
Rankings (position by rating and similar)ViewViewViewViewNot shown
Whether the student is currently connected, and what they are practisingViewSchool administrators onlyNot shownNot shownNot shown
Notices from students (about the lesson-time battle restriction)ViewSchool administrators onlyNot shownNot shownNot shown
Names and school email addresses from the Classroom rosterViewSchool administrators onlyNot shownNot shownNot shown
Teacher names and work email addressesViewViewNot shownNot shownNot shown

Only the class teachers — including any year-group lead or subject teacher added as a class teacher — and school administrators (so that a class can be handed over when no class teacher is available) may add or change records; viewing is open to teachers at the same school. Students can, however, correct their own roster number and in-class display name. 'Outside the school edition' means screens outside the school features, such as battles, leaderboards, and public profiles.

  • About the name shown — rosters and rankings show the in-class display name where one exists, and otherwise the student's in-game username. The student enters the in-class display name when joining, and both the student and a teacher can rewrite it at any time. Where a student joins from a Google Classroom roster, the name on that roster becomes the initial in-class display name and is shown to other students in the class and in the school-wide ranking (to students in other classes at the school); a teacher can change it. A name unsuitable for the classroom can be corrected by a teacher.
  • About the growth record and the practice list — the growth record compares the average of the first ten sessions with the average of the most recent ten, drawing on every practice record on the account. Teachers are additionally shown the last twenty practice runs individually (kind of practice, speed, accuracy, timestamp). Both include records from before the student joined the class and practice done at home or at the weekend. Teachers are not shown who the student played against or the content of those matches, but the timing and the degree of improvement include activity outside school. The Service displays the date range of each window on screen, so teachers can take that into account.
  • About rankings — the scope can be switched between the class, the whole school, and class-versus-class, and students and teachers see the same thing. Because the school-wide ranking is visible to students in other classes, it shows only the name (in-class display name or in-game username) and the position; roster numbers are never shown there. The default metric is the Service's rating, a figure that moves through ranked matches, and a teacher can switch it to practice volume or 60-second challenge records. The choice of scope and metric affects what students should be told, so please review it.
  • About the 'what they are doing now' display — to support supervision during a lesson, the class teacher's screen shows whether each student in the class is connected and what kind of practice they are currently doing. This information lives only in the server's transient memory and is never written to the database, so it cannot be looked up afterwards as a history and is not included in CSV exports. Only the class teachers (and school administrators) can see it; teachers of other classes cannot.
  • About the 'Needs review' mark — if the Service's anti-cheat checks (which look at whether the speed, accuracy, and evenness of keystrokes are plausible for a human typist) reacted to a student's play during the period on display, a 'Needs review' mark is shown on the teacher's progress screen. Only whether there was a reaction is shown, not what was detected. The school edition never automatically revokes an assignment's completion because of this mark; the judgement is left to the teacher, and any revocation is done by the teacher.
  • About the lesson-time battle restriction — where a teacher has set the class to stop battles during lessons, a student who thinks the restriction is being applied in error can notify the class teacher by choosing one of three reasons. There is no free-text field, so nothing a student has written appears on the teacher's screen. Only the class teachers and school administrators can see these notices. If the student deletes their account, the notices they sent are deleted.
  • How we check this stays inside the school edition — roster numbers, in-class display names, names and school email addresses imported from a Classroom roster, Google Classroom user identifiers, and teachers' names and work email addresses are never emitted outside the school edition. During development, we run an automated test that checks these items do not appear in code outside the school edition.
  • About Joho Musou records — Joho Musou learning records, and the student's own Typing Musou records used in spreadsheet lessons, are shown only on the student's own screen. They are not shown to teachers (class teachers and school administrators included) or to other students in the class or at the school, and they do not appear on the school-edition screens (progress, gradebook, CSV exports, and so on). To the extent necessary to improve the lesson materials, respond to abuse, and answer inquiries, our operator views, through the Joho Musou admin screen, tallies by lesson and by step (the rate of correct answers, how often hints or answers were shown, the steps where attempts stopped, and so on, sometimes broken down into general users, school students, and teachers) and each user's learning status (username, email address, days of use, lessons taken and stars earned, recent attempt details, and in-game currency awarded). Anything built in the practice apps never reaches us, so our operator cannot see it either. Note that on a shared device, such as one at school, practice-app work and in-progress records kept in the device's browser may be visible to others who use the same device.

8. Sending information to external AI services

The only case in which the Service, as part of its automated processing, sends information to an external AI service is the screening of usernames (the display name shown within the Service). Learning records (including Joho Musou learning records), assignment completion status, the text of submissions, grades entered by teachers, comments, keystroke data, and roster names and email addresses are not sent to any external AI service by the Service's processing. Separately, the AI assistant tool the Operator uses in its own work may be given information entrusted to us by schools (see "The Operator's use of an AI assistant tool" below).

  • When it is sent — only when a student sets or changes their username. Nothing is sent unless they change it, and a name already set is never sent afterwards.
  • What is sent — only the entered username text. Account identifiers, email addresses, IP addresses, school name, class name, and grades are not sent. The recipient cannot tell who entered the name.
  • How the recipient handles it — we use the OpenAI, L.L.C. API under terms whereby the content sent is used to improve and train that company's models. This is stated in Article 8 of the main policy and Article 5 of the Terms of Service. Please advise students not to include their real name, address, or other personal information in a username.
  • About models running inside the Service — opponent CPU behaviour and abuse detection use models we operate within the Service. No information is sent externally for that processing.
  • The Operator's use of an AI assistant tool — the Operator uses an AI assistant tool (Claude, provided by Anthropic, PBC) for all development of the Service. As a result, in the course of developing the Service (including investigating and fixing bugs), maintaining and operating it, handling requests from schools (deleting or returning data, providing CSV files, and the like), answering inquiries, reviewing inappropriate usernames, and dealing with abuse, the Operator may, to the extent necessary, have this tool handle information entrusted to us by schools (rosters, roster numbers, in-class display names, assignment completion status, submissions, grades, teacher comments, names and email addresses from Google Classroom rosters, and the like).
  • Conditions under which the tool is used — the tool is used through the Operator's personal account (an individual plan), and there is no data processing agreement (DPA) with Anthropic, PBC. Anthropic, PBC is therefore not our processor and handles the information on its own responsibility under its own terms and privacy policy (§6). Content given to the tool is processed on servers in the United States. We use a setting under which inputs are not used for model training; regardless of that setting, content that Anthropic selects for safety review may be used for training under its terms and may be retained for longer than usual. Information entrusted to us by schools continues to be stored in our database in Japan.
  • Please check before applying — because the Operator uses this tool for all development, we cannot provide the school edition in a way that keeps information entrusted to us by schools away from the tool. If your school's rules do not allow this handling, please talk to us before applying.

9. Access analytics

We use Google Analytics 4 and Microsoft Clarity to improve our screens. These operate when the Service is used from school devices as well. What is collected is browser identifiers and interaction data; names, roster numbers, grades, and the text of submissions are never sent. The cookies used are named in Article 2 of the main policy.

  • Google Analytics 4 — measures page views, in-app navigation, and custom events (battle start and end, dojo, sign-in, and so on). IP addresses are anonymized by Google and are not retained in a form we can inspect.
  • Microsoft Clarity — records session replays of mouse, scroll, and tap interaction, and heatmaps. On the school-edition screens, both the text inside form inputs (including the text of submissions) and the text rendered on screen (names, roster numbers, scores) are masked on the device before anything is sent. What reaches Microsoft is the page structure with its text obscured, plus the interaction trail. Information collected by Clarity is handled by Microsoft Corporation on its own responsibility, not as our processor, and Microsoft may also use it to improve its own services and for advertising (§6).
  • Joho Musou pages — on the pages of the learning feature Joho Musou (/joho), page views, in-app navigation, and interaction events are measured in a property separate from Typing Musou's (a different Google Analytics 4 property), together with the account's internal identifier and broad attributes (whether it is a guest account, and whether it belongs to a school student or teacher). Usernames, stars, scores, pass/fail results, answers, and anything built in the practice apps are not sent. Microsoft Clarity is not used.
  • How to disable it — blocking traffic to `clarity.ms` and `google-analytics.com` through your device management will stop this measurement. Browser tracking prevention (including the default settings in Edge and Safari) also blocks it in most cases. If your policy cannot accommodate this measurement, please contact us before adoption.

10. Retention, termination, and deletion

We keep students' accounts and school data clearly separated. Termination of the agreement with a school does not affect a student's own account.

  • While enrolled — school data is retained for the term of the agreement and for as long as you require it. Classes are archived at the change of school year, but records are not removed (CSV exports for past years remain available).
  • If the agreement is cancelled — we do not delete data. What stops appearing is the school screens only; students' accounts, in-game currency, rating, and gameplay records are entirely unaffected. If you sign up again, everything returns as it was. You can tell families that cancelling does not affect their children's accounts.
  • Deletion on request — except for the roster rows of people who have left the roster (below), only on an explicit request from your school or its founding body do we delete that school's school-edition data (classes, enrolment records, roster numbers, in-class display names, rosters imported from Classroom, assignments, submissions, grading records, teacher comments, and notices about the lesson-time battle restriction). We confirm the scope and record counts with you before carrying it out. When a student transfers out or in similar cases, we can also, on your request, delete only that one student's school-edition data (their enrolment records in all of your school's classes, roster number, in-class display name, rows imported from a Classroom roster, assignment progress and grading records, submissions, teacher comments, and notices about the lesson-time battle restriction). A student who is still on a Classroom roster is deleted after you remove them from Classroom (otherwise the next sync would bring the enrolment back). In every case we do not touch students' accounts or gameplay records (including Joho Musou learning records).
  • Roster rows of people who have left the roster — for students and teachers who have left the Google Classroom roster, and for teachers who have been removed from the teacher list supplied at contract time, we automatically erase the roster row (name and school email address) 90 days after they left. If they return to the roster within 90 days, nothing is erased. Enrolment records, progress, submissions, and grading records are not touched. If a teacher removed from the contract-time teacher list is still registered as a teacher at your school, we keep that row so the oversight can be noticed.
  • Evidence of deletion — the deletion is recorded in our audit log together with the date, scope, and record counts. That record is designed to survive the removal of the school's own rows, so it can be supplied directly as the basis for a completion report.
  • What remains with us after deletion — billing and payment records (school name, invoice number, amount, issue/due/payment dates, and our own notes) are retained as our accounting records for the period required by tax and other legislation. They contain no student personal information.
  • If a student deletes their own account — the in-class display name, the hint as to which school they belong to, and any notices they sent about the lesson-time battle restriction are erased. The enrolment record, roster number, submissions, and grading records remain, because they are also the teacher's records; deleting them would remove the enrolment itself from the roster and gradebook, leaving no way to tell who had left. The roster entry is then shown as a deleted user. Rows imported from a Classroom roster (name and school email address) are a copy of the Classroom roster rather than information belonging to the account, so they are not removed by account deletion; they are, however, within the scope of a deletion request from your school (see 'Deletion on request' above).
  • Joho Musou learning records — Joho Musou learning records are kept for as long as the account exists and are erased when the student deletes their account. They are treated in the same way as gameplay records from battles and the dojo and the keystroke records collected for research, and are not erased after a fixed period. Because they belong to the student's account, they are not erased by cancelling the agreement with the school or by a deletion request from your school (see 'Deletion on request' above). The student's own Typing Musou records used in spreadsheet lessons are kept in the device's browser for up to 30 days only. Things kept only in the device's browser, such as work built in the practice apps, can be erased by clearing the browser's site data; deleting the account does not erase them automatically.
  • Teacher passkeys — kept until the teacher removes them, we remove them after confirming with your school, or the teacher deletes their account. We keep only the public key, the name and the dates. Because they belong to the teacher's account, they are not removed by ending the contract or by a deletion request from your school ("Deletion on request" above).
  • Server logs — retained for up to 90 days.

11. Returning your data

Teachers can export rosters, progress, and the gradebook in CSV format while enrolled and at termination. CSV files are written in UTF-8 with a byte-order mark, so they open directly in the Japanese edition of Excel. On request at termination we will supply your school's data in CSV format within 30 days of the request, free of charge. If we end provision of the school edition, we will notify the contact person at each contracted school by email, with the termination date set at the end of a school year (31 March) falling at least 6 months after the notice, and records will remain viewable and exportable as CSV for 90 days after the termination date. Even where these periods must be shortened for unavoidable reasons, such as the enactment, amendment, or repeal of laws or regulations, or natural disasters, we will provide at least 30 days for CSV export (Terms of Service, Article 10).

12. Security measures

The measures we take are as follows. If you need us to complete an information-security self-assessment form, please request it via the contact page.

  • Encryption in transit — all traffic is encrypted with HTTPS.
  • Protection at rest — the access grant for Google Classroom (refresh token) is stored encrypted with AES-256-GCM. The Service stores no passwords; authentication is delegated to Google accounts.
  • Teacher identity checks — teachers sign in with a Google account. Teachers who sign in with the school's Google Workspace account are covered by the two-step verification your school has configured. Teachers who sign in with any other account (such as a personal Gmail account), and teachers at schools that have not registered their domain with us, must also confirm their identity with a passkey on their device (fingerprint, face or PIN) in addition to Google sign-in. The passkey's private key never leaves the teacher's device; we keep only the public key. A check lasts 30 days and ends on sign-out. If a teacher can no longer use their passkey, we remove it after confirming with your school.
  • Access control — only the class teachers and school administrators (so that a class can be handed over when no class teacher is available) may add or change class records. Students can correct their own roster number and in-class display name. Viewing is limited to teachers at the same school and never spans schools. While a contract is suspended, viewing is permitted and creation of new records is stopped.
  • Separation of privilege — all reads and writes to Google Classroom are performed as the teacher's account. Students are never asked for additional permissions, and we never access Classroom using a student's Google account.
  • Audit records — operator actions on school data (importing or reverting a roster, removing a teacher or changing a teacher's role, approving or declining an invitation-code request, removing a teacher's passkeys, updating school details, executing a deletion) are recorded with the actor, timestamp, and content. Changes of contract status are recorded likewise.
  • Checking that school information stays out of the game — during development, an automated test checks that roster numbers, in-class display names, roster names and school email addresses, and teachers' names and work email addresses do not appear in code outside the school edition.
  • Checking that Joho Musou does not send what children type — of the attempt details Joho Musou sends, word-check choices and feedback messages pass only when identical to text written in the lesson materials, and an automated test checks this during development. The server also caps the length and number of such texts.
  • Microphone, camera, and location — Joho Musou does not use the microphone, the camera, or location. Its pages also send the browser a setting (Permissions-Policy) stating that these features are not used.
  • Log retention — server logs are kept for up to 90 days and used only for incident response and abuse investigation.
  • Supervision of personnel — the Service is developed and operated by a single person, and the application and database are operated by the Operator personally. The Operator is the only person who handles school data. Server infrastructure, access analytics (Google Analytics 4), username screening, traffic relaying, and the email inquiry channel are entrusted to the processors listed in §6. Sign-in authentication, interaction analytics (Microsoft Clarity), the LINE channel for teachers, and assistance with the Operator's work use the external services listed in §6 that are not our processors.
  • Understanding the external environment — information entrusted to us by schools is stored in Japan. As set out in §6, authentication, access analytics, username screening, traffic relaying, assistance with the Operator's work, and communication with Google Classroom involve providers located in the United States; we have informed ourselves of the personal-data-protection regime in the United States and exercise the necessary and appropriate supervision over our processors. An outline of that regime is given in Article 5 of the main policy.

13. Response to an incident

If personal data is leaked, lost, or damaged, or we identify a risk of that, we will give your designated staff (or, where a memorandum has been signed, the contact named in it) a first report within 24 hours of becoming aware of it, and will promptly investigate the facts. Anything not yet known at the time of the first report will be passed on as soon as it is established. Where the situation requires a report to Japan's Personal Information Protection Commission and notification of data subjects under Article 26 of the Act on the Protection of Personal Information, we will promptly notify you as processor and supply the information you need for your report. At your request, we will provide the access and operation records relating to your school that are still within their retention period, to the extent needed for the investigation. We will also act to contain the harm, determine the cause, implement measures to prevent recurrence, and report the outcome. Routine communication about outages and maintenance is provided via the contact page and in-service announcements.

14. Children's privacy

As a service supplied to educational institutions, we state the following.

  • No advertising — the Service displays no advertising of any kind. We do not use the information we collect for behavioural or other advertising purposes, nor provide it to third parties for such purposes.
  • No purchases by students — in-game currency is virtual, cannot be exchanged for cash, and cannot be bought with real money. No path exists by which a student can make a payment. Fees for the school edition are paid by your school under its agreement with us.
  • Guardian consent — where the Service is used through a school, explanation to guardians and the collection of any consent required are carried out by your school, which stands in a position to decide on the use of educational tools on the guardian's behalf. We handle information on your instructions, on the basis that you have obtained guardian consent or are authorised to consent on the guardian's behalf. If you need material to use when explaining the Service to guardians, please contact us.
  • Our position under COPPA (US Children's Online Privacy Protection Act) — we do not intend to collect personal information directly from children under 13 without the consent of a parent or of the school. Where the Service is used through a school, we act as an agent of the school and handle information only for the educational purposes the school specifies. Guardians may request review of a child's information, cessation of further collection, and deletion, through the school the child attends.
  • Our position under FERPA (US Family Educational Rights and Privacy Act) — the learning and assessment records entrusted to us by a school are treated as education records under the school's control. We do not use them contrary to the school's instructions, do not disclose them to third parties without the school's authorisation, and on termination will delete or return them at the school's request.

15. Handling of information received from Google APIs (Limited Use)

Where a teacher connects Google Classroom, the Service obtains information through Google APIs. Typing Musou's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • Permissions requested — the Classroom permissions are roster import (read courses, read rosters, read roster email addresses), assignment posting and grade return (student coursework, topics), and posting to the class (announcements, materials — this last group is optional, and the other features work without it): seven in total, and we request nothing beyond these. Alongside them we request the same basic permissions as Google sign-in (openid and viewing the email address), so that we can establish which Google account gave consent. The individual permission names and the setup procedure are listed in 'Setting up the Google Classroom integration (for school admins)'.
  • How the information is used — solely for the purposes in §5 of this document: matching rosters, posting assignments, returning grades, and displaying submission states. It is never used for advertising and is never sold or transferred to third parties. Human review occurs only where necessary, such as incident response at your request.
  • Disconnecting — a teacher may disconnect at any time. After disconnection the Service does not access Google Classroom, and the stored access grant is deleted.
  • Students give no consent — because all reads and writes to Classroom are performed as the teacher's account, students are never asked for additional permissions. Students need only an ordinary Google sign-in, and can alternatively join with a six-character class code without using a Google account at all.

16. Where to direct requests

For the information entrusted to us by your school in the school edition (rosters, enrolment records, submissions, grading records, and so on), your school is the personal information handler. Requests from students and guardians for disclosure, correction, cessation of use, or deletion should, in principle, be received by your school. Where such a request reaches us directly, we refer it to your school and act on your instructions. For information belonging to the student's own account (profile, gameplay records, and so on), we accept requests directly under Article 9 of the main policy. Requests from your school to us for disclosure, correction, or deletion of the information we hold are accepted at any time via the contact page.

17. Changes to this document

We may change this document in response to changes in the law, changes of processor, or the addition of features. The revised text is published on this page, with the date of last update shown at the top. Where we change the categories of personal information handled, the purposes of use, the processors, or the retention periods, we will as a rule notify the designated staff at schools under contract by email at least 30 days before the change takes effect. If your school does not agree to a change, you may terminate the agreement.

18. Confidentiality

We keep confidential any information about your school, its students, and its staff that we learn in providing the school edition. Except where required by law and for the minimum necessary provision to the companies listed in §6 (including the AI assistant tool in §8), we do not disclose such information to any third party without your school's prior consent, and we do not allow it to leak. This obligation continues after your school's use of the school edition ends. Where confidentiality, liability for damages, and related matters need to be agreed in writing, we have a standard memorandum on the handling of personal information; please request it via the contact page. We are also glad to sign using your school's or founding body's own form.

19. Contact

For questions about this document, please use the contact page.