Hodokeru (operator: Yuki Yamashita; hereinafter "we," "us," or "our") establishes this Privacy Policy (this "Policy") regarding the handling of users' personal information in the iOS application "Najimi 〜Contact Notes〜" (the "App") as follows.
1. Information We Collect
The App collects and stores the following information. Where each type of information is stored differs by category, as set out in Section 5.
- Account information: email address and password (used for authentication; passwords are managed in encrypted form, and we never store them in plain text)
- Contact information entered by the user: name, phonetic reading (furigana), phone number, email address, address, postal code, birthday, company name, department, job title, URL, and notes
- Call records: the content of call notes manually entered by the user
- Information imported from the device's contacts: only with the user's permission, the App imports contacts stored on the device (name, phonetic reading, phone number, email address, and similar fields)
- App settings: the user's preferences for notifications and display
- Connection preferences: the user's per-person settings for how they stay in touch with each registered person (phone, messages, and similar means)
In addition, only if the user purchases the paid plan "Najimi Pro," we handle the following information for the purpose of managing the user's purchase status.
- Purchase information: information about the purchased plan and its billing status (purchases are processed through Apple's App Store, and we never receive payment details such as credit card numbers)
2. How the Device's Contacts Are Handled
The App reads the contacts stored on the device only when the user has explicitly granted permission. As a general rule, contacts that are read are stored only on the device.
However, for a person the user has chosen to register in the App, that person's name and phonetic reading are stored on our servers. This is required in order to identify whom a given record refers to (see Section 5).
The App also provides a feature that writes information about a person registered in the App back to the device's contacts. This export takes place only when the user performs the operation for each individual person.
Permission to access contacts can be withdrawn at any time from the iOS Settings app. The user can also delete imported contact information at any time through operations within the App.
3. Information We Do Not Collect
The App does not collect the following information.
- The App itself does not automatically obtain the phone numbers of incoming or outgoing calls (it does not use any mechanism that reads the iOS call state).
- The App does not access location data or photos.
Note that the phone number of an incoming call may be passed to the App only if the user has voluntarily set up the iOS Shortcuts feature. This phone number is used solely for the purpose of matching and displaying a registered contact, and the App does not store it.
4. Purposes of Use
We use the collected information for the following purposes.
- To provide the App's features (contact management, and saving and displaying call records)
- To deliver notifications from the App, where the user has enabled them
- To authenticate users and manage accounts
- To verify the purchase status of the paid plan and provide the corresponding features
- To review and analyze purchase and billing information for the paid plan through the aggregation features of the purchase management service (Section 6), in order to operate and improve the service
5. Where Information Is Stored
Information handled by the App is stored either on our servers or on the user's device, depending on the type of information.
Stored on our servers (Supabase)
- Records and notes written by the user, contact information entered by the user, and connection preferences
- The name and phonetic reading of a person the user has chosen to register in the App (this is required in order to identify whom a given record refers to)
- Account information
- App settings
Stored only on the user's device and never transmitted to our servers
- All other information imported from the device's contacts (phone numbers, email addresses, and similar fields)
A copy of server data stored on the user's device
- So that records can be viewed without a network connection, the App stores a copy of the user's information held on our servers on the user's device. This copy is used only for display, search, and the preparation of notifications on the device, and is erased from the device when the user signs out or deletes their account.
Our servers use the cloud database service "Supabase," and data is stored on servers located in Japan (Tokyo region). All communication takes place over encrypted connections, and stored data is also held in encrypted form.
In addition, text entered by the user (names, phonetic readings, phone numbers, addresses, notes, the contents of records, and other free-form content written by the user) is encrypted on the user's device before it is sent to our servers. The key needed to decrypt this text is stored on our servers only in a form that can be unlocked with the user's password or with the recovery code issued by the App; we do not hold the password, the recovery code, or the key itself. As a result, we are unable to view the contents of this text. If the user loses both the password and the recovery code, we are unable to restore this information.
Other information (the account email address, the dates of records, categories, and settings such as favorites) is administrative data that does not contain user-written content, and is not subject to encryption on the device. As the operator, we are technically able to access this information; however, we do not view it except where necessary, such as when responding to a technical problem.
6. Provision to Third Parties
We do not sell, provide, or share users' personal information with any third party, except in the following cases.
- Entrusting data storage to the cloud service described in Section 5
- Providing a user ID (an identifier used within the App to identify the user) and purchase information to the purchase management service RevenueCat, Inc. for the purpose of managing paid plan purchases
The App does not use any third-party tracking tools for advertising or behavioral analytics purposes.
7. Crash Reports
To identify issues and improve quality, the App may use the standard crash reporting feature provided by Apple. This operates through Apple's own mechanism and does not involve us providing information to any third party.
8. Data Retention and Deletion
Collected information is retained for as long as the user's account exists.
Contact information and call records can be individually deleted at any time through operations within the App. Users can also delete their account at any time from the settings screen in the App.
When an account is deleted, all of the user's information stored on our servers (as described in Section 5) is deleted.
Information stored only on the device is managed separately from our servers. It can be deleted through the App's option to remove imported contacts, and it is also erased if the App is deleted from the device.
The copy of server data described in Section 5 is erased from the device when the user signs out or deletes their account, and is also removed by deleting the App from the device.
9. Children's Privacy
The App is not directed at any specific age group; however, it is not designed with use by children in mind.
10. Changes to This Policy
We may revise this Policy as necessary. In the event of material changes, we will notify users through the App or by other appropriate means.
11. Contact
For inquiries regarding this Policy, or requests regarding the disclosure, correction, or deletion of your information, please contact us at the address below.
Contact: [email protected]
Hodokeru (Operator: Yuki Yamashita)