Privacy Policy

The App is a tool for recording your relationships with people and making use of them with AI. The App adopts a local-first design that keeps “your data in your own hands.” This policy explains what information the App handles and how.

01Basic policy

The App does not store your data on any provider-side server. The information you record is stored on your device and in your own Apple account's iCloud (CloudKit), and is synced under your own responsibility and control. The provider cannot access this data.

02Provider and storage model

• Provider: Takeru Sakuma / Contact: kukuri@bamgrove.net
• Storage: Local storage on your device and your iCloud (CloudKit, provided by Apple). No proprietary server operated by the provider is used.
• Authentication: The App does not maintain its own account registration. Syncing relies on your Apple ID (iCloud). Handling of your Apple account is governed by Apple's privacy policy.

03Information we handle

The App handles only information you enter or import. This mainly includes the following.

• Person information: name, birthday, contacts (phone, email, address), social/URL, relationships, desired contact frequency
• Fact cards (properties): attributes you freely register such as preferences, dislikes, allergies, hobbies, and family composition. Each piece of information carries its basis, confidence, and status (AI-estimated / confirmed / manually entered)
• Events, relationships, groups, anniversaries, candidates, tags: the history and structure of your relationships that you record
• Imported data: contacts (basic information only, when you grant permission), conversation logs (text such as LINE exports), and shared photos, maps, and links

The App does not perform tracking for the provider's analytics purposes, nor collect advertising identifiers.

Website access logs

The website that hosts this policy is delivered on Firebase Hosting (Google LLC), and access date/time, IP address, user agent, and similar may be recorded as part of delivery. These are used solely for delivery and security maintenance, and are not associated with your person data in the App. This site does not place analytics tags or advertising tags.

04Purposes of use

• Displaying recorded people and relationships, and generating timelines and relationship maps
• Detecting people you have been out of touch with, and reminders for anniversaries and occasions
• AI suggestions based on your accumulated data (restaurants, gifts, conversation topics, etc.) and avoiding duplicates
• Extracting candidate attributes from conversation logs (reflected after your confirmation)

All such processing targets the data on your device and iCloud, and is performed for your convenience.

05Special-care personal information

You may record content that could constitute special-care personal information under Japan's Act on the Protection of Personal Information, such as information about allergies or health. The App does not isolate these into a special category; it handles them through the same mechanism as ordinary fact cards, on the following premises.

• Including such information, storage is limited to your device and iCloud, and the provider does not obtain it
• For processing that may transmit data to external AI (third-party LLMs, etc.), we request your explicit consent for transmitting sensitive information (Section 6)
• You can revoke it at any time via the deletion and correction flows (Section 9)

06Use of AI and external transmission

The App adopts a two-tier model of “process on-device first, and escalate only the remainder externally, in stages.”

On-device AI (default)

Light processing such as structuring imported text and shaping reflections is completed within the device by Apple's on-device model. In this case, the input is not transmitted outside the device.

Escalation to external models

Only for processing that cannot be completed on-device—such as extracting from long conversation logs, suggestions that involve external search, or cross-cutting questions—data may be sent to an external model. For destinations, we prioritize Apple's Private Cloud Compute with an emphasis on privacy protection.

• External transmission is limited to the portions determined to be too long, low in confidence, or to require advanced reasoning (controlled by thresholds)
• We may provide a setting to optionally use a higher-performance third-party LLM. This is disabled by default, and enabling it requires your consent. Because data leaves the device, individual confirmation is required for transmissions that include sensitive information
• On devices that do not support Apple Intelligence, some processing may fall back to external models

07External service integration

To obtain up-to-date candidates such as restaurants and places, the App may integrate with external map and place-search APIs (such as Google Maps-family APIs). The terms necessary for the search (place names, categories, etc.) are sent to those services. Handling by these services is governed by each service's privacy policy. What is sent for integration is limited to information necessary for the search; your person data itself is not transmitted.

The main external services the App may use, and their privacy policies, are as follows.

• Map and place search (Google Maps Platform / Google LLC): Google Privacy Policy
• Website delivery (Firebase Hosting / Google LLC): Firebase Privacy and Security
• Sync and on-device/cloud processing (Apple: iCloud and Private Cloud Compute): Apple Privacy Policy

08Provision to third parties abroad (cross-border transfer)

The external models in Section 6 (third-party LLMs, etc.) and the map/place-search APIs in Section 7 may include operators located outside Japan (such as Google LLC in the United States). The information transmitted is limited to the minimum specified in each section (search terms, text to be processed, etc.), but because this may constitute provision of personal data to a third party in a foreign country, the following apply.

• Use of a third-party LLM is disabled by default; enabling it and transmitting sensitive information requires your consent, including that a transfer abroad occurs
• Information on the destination country, that country's personal information protection regime, and the protective measures taken by the destination will be made available by reasonable means. Handling by each service is governed by that service's privacy policy
• The provider does not intermediate these transmissions; they are performed for yourself, based on your settings and operations

09Provision to third parties

Because the provider does not retain your data, the provider does not provide it to third parties. The external processing in Sections 6, 7, and 8 consists of transmissions for yourself, based on your operations and settings.

10Your rights and requests for disclosure

The App treats transparency, correction, and deletion as equal in standing to its features. From within the App, you can do the following at any time.

• Export: write out all recorded data
• Delete: deletion by person or by item, and deletion of all data
• AI confirmation: information estimated by AI is presented as candidates and is not finalized until you adopt, edit, or reject it

On the other hand, for information the provider actually receives through inquiry handling and the like (your name, email address, content of the inquiry, etc.), you may, as retained personal data, request notification of the purpose of use, disclosure, correction, suspension of use, deletion, and so on. Please contact the desk in Section 15. After verifying your identity, we will respond without delay in accordance with law. There is no fee for these requests.

11Security management

Data is stored on your device and iCloud, and relies on the protection mechanisms of your Apple account and OS (device lock, iCloud encryption, etc.). We recommend keeping your device and Apple account secure (passcode, two-factor authentication, etc.). For inquiry information received by the provider, we take necessary and appropriate security measures such as access restrictions.

12Handling of third parties' information

By nature, the App records information about “other people.” At times this includes sensitive information such as health. When recording and using it, please show consideration for the people involved and comply with applicable laws. The App supports this through its export, correction, and deletion mechanisms.

13Children's information

The App is intended for general users. Use by those below the age established in your region, and the recording of information about those below that age, must follow the responsibility of a guardian and applicable law.

14Revisions

This policy may be revised in response to feature additions or changes in law. Significant changes will be announced in the App or on the web.

15Contact and complaints

For inquiries about this policy, and complaints or consultations regarding the handling of personal information, please contact the following.

• Provider: Takeru Sakuma
• Contact: kukuri@bamgrove.net

Regarding the handling of personal information, you may also consult the Personal Information Protection Commission of Japan (https://www.ppc.go.jp/en/).

---

Related: Terms of Service