The operator of "Nui Biyori" (the "App") respects your privacy and handles your information appropriately in accordance with this Policy.
1. Information We Collect
- Account information: email address, username, display name, profile picture, bio, profile links
- Posted content: photos, captions, tags, comments, likes, bookmarks, follow relationships
- Plushie and closet information: photos, names, and notes for registered plushies and accessories
- Outing spots: places you register (name and location), places you attach to posts, and places you save
- Report and block information: used for moderation
- Technical information: login times, device type, OS version, information used to recognize devices (see below)
Your current location is used, with your device's permission, only when you tap an option such as "Show my area" on the outings map. It is used only to move the map to where you are, and is never stored on or sent to the operator's servers. The only locations stored on our servers are places you register yourself (outing spots). Information recorded in photos such as where they were taken (Exif) is not kept, because it is removed when the photo is converted during upload. We also do not collect information not listed here, such as your contacts or your activity in other apps.
Information used to recognize devices is used only to prevent suspended accounts from being recreated on the same device. On Android we store the device's number (Android ID), and on iPhone the app-specific number (IDFV), in a form that cannot be turned back into the original. We also use Apple's DeviceCheck and Google's Play Integrity API to place a small "suspended device" mark, on Apple's and Google's side, only on devices of suspended accounts. This mark is just a few bits, and the operator cannot learn the device's number or its owner from it.
2. How We Use Information
- Providing the App's features (showing posts, likes, follows, etc.)
- Sending notifications
- Personalizing the recommended feed
- Detecting and responding to misuse and violating content (including preventing suspended accounts from being recreated)
- Statistical analysis to improve the service
"Personalizing the recommended feed" means ordering posts based on your activity inside the App, such as likes and follows. We do not track your activity outside the App.
We do not use posted content such as photos as training data for machine learning models, including generative AI, and we do not send or provide it to external AI services for purposes such as image generation. Such uses are not included in "statistical analysis to improve the service" above.
3. Sharing with Third Parties
Except as required by law, we do not provide your personal information to third parties without your consent. However, we entrust data to the following service providers:
- Authentication: Clerk Inc. (management of email addresses, passwords, etc.)
- Database: Convex Inc. (storage of posts, profiles, and other data)
- Image storage: Cloudflare, Inc. (storage and delivery of posted photos, profile pictures, etc.)
- Push notifications: Expo (delivery of notifications, using your device's push token)
- Billing: RevenueCat, Inc. (management of subscription purchase status)
- Usage analytics: PostHog Inc. (screen views and feature usage. We do not send the contents of posted photos or text)
- Maps: Apple Inc. (iPhone) / Google LLC (Android) (to display the map on the outings map)
- Sign-in providers: Apple Inc. / Google LLC (only if you choose to sign in with Apple or Google)
- Fraud prevention: Apple Inc. (DeviceCheck, iPhone) / Google LLC (Play Integrity API, Android) (to hold the marks on devices of suspended accounts)
This means we entrust data to companies that are needed to run the App, such as for login and data storage. We will never sell your personal information to third parties for advertising or any other purpose.
4. Data Retention
We keep your data while your account is active. When you delete your account, all related data (profile, posts, comments, images, etc.) is promptly deleted. Some data may remain in backups for up to 30 days for legal compliance.
Data briefly remains in backups after deletion so we can recover from unexpected failures and comply with the law. This data is not used in normal operations and is completely erased after that period.
To prevent recreation, information used to recognize the devices of suspended accounts is kept even after the account is deleted. The marks on Apple's and Google's side are removed when a suspension is lifted (Google's marks are also deleted automatically 3 years after they were last used). Device information for accounts that are not suspended is deleted together with the account.
5. Deleting Your Account
You can delete your account and related data at any time from "Delete account" in the App's settings. Deleted data cannot be restored.
If you can't do this from the App, for example because you have already deleted the App, you can request deletion by email from the Account deletion page (in Japanese).
6. Use by Children
The App is not intended for use by children under 13. Children under 13 should use the App only with the consent and supervision of a parent or guardian.
7. Changes to This Policy
This Policy may be changed without notice. If there are important changes, we will let you know through in-app notices or other means.
8. Contact
For questions about this Policy, please contact the operator.