Privacy Policy

1. Information handled on the device

The App processes the following information on the user's device to provide its features and does not send it to servers managed by the Operator. This information can be deleted through in-App controls, device settings, or by deleting the App. If you copy a memo, the selected text is placed on the system clipboard. How that destination handles the text is governed by the device settings.

• Memo text, creation times, and update times
• Display settings such as text size, spiral radius, and text color
• The device clipboard used when the user copies memo text

2. Information handled through external services

The App does not send memo data to the Operator's servers. The following information may be handled through external services.

• The sender's email address, display name, message, and information included in attachments received through email inquiries
• Category, message, public app ID, submission ID, time received, and handling status collected through anonymous feedback

3. External services and international processing

The Operator uses the external services listed below. These providers may process information in the United States or other countries outside Japan. The Operator reviews their contractual terms and privacy safeguards and requires protections necessary under applicable law and this policy. Except where required by law, the Operator does not provide information to third parties beyond what is necessary for the stated purposes. You may request information about international processing and relevant safeguards through the contact channel in section 11.

• Google (inquiry email): inquiry handling (https://policies.google.com/privacy)
• Cloudflare (Pages, Workers, D1, and Turnstile): delivery of related pages, feedback storage, and automated-submission protection (https://www.cloudflare.com/privacypolicy/)
• Slack: new-feedback notifications (https://slack.com/privacy-policy)

4. Purposes of use

• To provide and operate the App and related services
• To create, display, search, edit, copy, and delete memos on the device
• To handle feedback and inquiries

5. Feedback that does not request direct identifiers

The Service's feedback form does not request a name, address, phone number, or email address as an input field, but it receives the information listed below. If you enter personal information about yourself or another person in the free-text field, the Operator, Cloudflare, and Slack as the notification provider will also process that information. Do not enter personal information.

• Feedback category and message
• A public app ID identifying the applicable App
• A submission ID used to prevent duplicate submissions
• Time received and handling status

6. Memo text and other sensitive information

Do not include memo text or other sensitive information in anonymous feedback or email inquiries. If you send that information by mistake, the Operator, Cloudflare, and Slack as the notification provider may also process it.

7. Feedback storage, automated-submission protection, and retention

Anonymous feedback is stored in Cloudflare D1. Submission information, including the message, is sent to Slack to notify the Operator of a new submission. The Operator uses Cloudflare Turnstile to prevent automated submissions. Turnstile processes browser-environment and other signals necessary for fraud detection, and its verification token is sent to Cloudflare's Siteverify API. The Operator does not send the feedback message or other form fields to the Siteverify API and does not store Turnstile tokens or verification results in its database.

Information concerning feedback and email inquiries is retained for as long as necessary to respond and fulfill the other stated purposes. Information that is no longer needed is periodically deleted. However, information needed to meet legal obligations or handle disputes is retained for as long as necessary for those purposes. Information and backups retained by external providers are also subject to their respective retention and deletion policies.

8. Children

The Service is not directed to children under 13. If the Operator learns that it has obtained personal information from a child under 13, the Operator will promptly delete information that it can identify, unless retention is required by law. A parent or guardian may contact the Operator using the channel in section 11.

9. Security, user rights, and request procedure

The Operator applies access controls, permission management, and other necessary and appropriate safeguards. Subject to applicable law, users may request access to, correction of, restriction of, deletion of, or cessation of third-party disclosure of information about themselves. Submit a request through the channel in section 11 and provide information necessary to identify the relevant data. The Operator will verify the requester's identity and respond in accordance with applicable law. If the Operator cannot fulfill the request, it will explain the reason. The Operator will give advance notice of any applicable fee.

In-App memos, display settings, and text copied to the clipboard can be deleted through available in-App controls, device settings, or by deleting the App. Because the website feedback form does not request direct identifiers, the Operator may be unable to identify the requester or locate the relevant submission.

10. Changes to this policy

The Operator may update this policy when the Service, external services, or applicable law changes. Material changes will be announced in the App or on related pages with reasonable advance notice. The Operator will obtain consent where applicable law requires it.

11. Operator information and contact

For questions or requests concerning this policy, international processing, safeguards, or user rights, email isajiappdev@gmail.com. The Operator will, upon a data subject's request and without undue delay, provide the Operator's legal name and address and, if the Operator is a corporation, the name of its representative, to the extent disclosure is required by law.