Privacy Policy

Daisuke Tamura (the “Operator”) keeps the information handled by the iOS application “HITUKI Planner” (the “App”) to the minimum necessary, states the purposes of use clearly, and handles it securely.

The App has no user accounts, no advertising, no tracking for advertising purposes, and no access to your contacts. Your main plan and record data is stored on your device and is not synchronized to the Operator’s server.

The App stores on your device the plans, records, things to keep in mind, notes, themes, and photos you enter, the original transcripts of voice input, notification and recurrence settings, display settings, the fixed weather region, the display state of Plus features, and similar data.

This data is used to provide the App’s features, editing, search, widget display, scheduling of notifications, and safe migration of existing data. HITUKI Planner currently does not synchronize through CloudKit. With the Home Screen and Lock Screen widgets, only the minimum plan information needed for display and Plus availability are shared through an App Group; photos, detailed notes, transcripts, location, weather, and AI information are not shared.

When you first use voice input, the App explains on screen what will be sent and asks for your consent. If you do not consent, you can still use keyboard input and the other features.

• Speech is converted to text by Apple’s speech recognition. The App does not persistently store the audio file.
• The recognized text for one entry, the entry type, reference date, language, calendar, time zone, and a request ID are sent over an encrypted connection to HITUKI Planner’s relay server.
• To organize the text, the relay server sends that content to Vertex AI (Gemini) on Google Cloud.
• Photos, other entries, the list of themes, past records, location information, and weather information are not sent to the AI.
• The relay server does not save the text content in usage history or structured logs. It records only operational metadata that contains no content, such as the request ID, type, outcome, and processing time.

Google Cloud states that it does not use data sent to Vertex AI to train or fine-tune AI models without the permission or instruction of the user or the Operator. However, data may be processed and retained to a limited extent under Google Cloud’s terms, for example to detect abuse.

To apply usage limits for voice AI and prevent abuse, the App generates a random installation identifier. It is not linked to your name, email address, or Apple Account. The relay server stores the date, feature name, and usage count associated with this identifier.

Daily usage counts are, as a rule, deleted within 40 days of the date they were recorded. Temporary IP address processing and operational logs used to protect the service follow the retention settings of Cloudflare and other processors and are managed so that they are not kept longer than necessary.

The App uses Apple’s StoreKit and RevenueCat to purchase and restore HITUKI Plus and to check subscription status. Apple and RevenueCat process the product, transaction, trial, renewal, refund, cancellation, entitlement state, an anonymous App User ID generated by RevenueCat, and similar data.

The Operator does not receive credit card numbers, bank account numbers, or Apple Account passwords. Purchase information is used to provide purchase features, determine entitlements, restore purchases, respond to inquiries, prevent fraud, and meet legal obligations, and is retained under Apple’s and RevenueCat’s policies and applicable law.

Only when you choose to set the weather region from your current location does the App, with your permission, access your location once while the App is in use. The current location is used to select the prefecture or municipality to fix as the region; the App does not track you continuously. You can also set the region by searching for a place name without using location.

When fetching a forecast, the App sends the coordinates of the fixed region to Apple Weather. Apple states that locations sent to provide forecasts are not associated with your identity and are not used to track you between requests. The Operator’s server does not receive location or weather data.

Notifications are scheduled on your device; their text and times are not sent to the Operator’s server. Photos are stored in the App’s area on your device and are not sent to the AI, the relay server, or RevenueCat.

The App does not use third-party advertising SDKs, tracking by advertising identifier, behavioral advertising, or contacts access. It also does not currently use its own behavioral analytics service. Diagnostic and usage information that Apple collects to operate iOS and the App Store is governed by your Apple settings and Apple’s privacy policy.

• To provide the App’s features, including saving, display, search, notifications, weather, widgets, purchases, restoration, and voice AI.
• To apply usage limits, prevent abuse, maintain security and stability, and investigate failures.
• To respond to inquiries and to purchase and data-deletion requests from users.
• To comply with laws, Apple’s review and contractual requirements, and to protect rights.

The App uses the following services to the extent necessary to provide its features. Each company may process data at locations including those outside Japan. The Operator reviews each company’s contracts, privacy policies, and security measures, and handles data only within the necessary scope.

• Apple: App Store, StoreKit, speech recognition, location, WeatherKit, notifications, and OS features (Privacy Policy)
• RevenueCat: purchase and subscription entitlement management (Privacy Policy)
• Cloudflare: HITUKI Planner’s relay server, encrypted connections, and usage-count management (Privacy Policy)
• Google Cloud: text organization with Vertex AI (Cloud Privacy Notice)

The Operator requires these processors to provide protection equal to or greater than this Policy and applicable law.

• On-device data: retained until you delete an item or delete the App. Where it remains in a device backup, Apple’s backup settings apply.
• Audio files: not persistently stored by the App.
• Text sent to the AI: not stored as content by the relay server. Limited retention on Google Cloud follows that company’s contracts and policies.
• Anonymous daily usage counts: deleted within 40 days as a rule.
• Purchase history: retained under Apple’s and RevenueCat’s policies for as long as needed to provide entitlements, restore purchases, handle refunds and disputes, and meet legal obligations.

Because no account is created, the Operator normally cannot identify an individual user from on-device data. If you would like related information on the server to be confirmed or deleted, please contact the address below. We may ask for the minimum information needed to confirm your identity and the information concerned. Information that must be retained by law or to prevent abuse may not be deletable immediately.

• Voice AI: you can stop sending data by not using voice input. You can also revoke the microphone and speech recognition permissions in iOS Settings.
• Location: you can revoke the permission at any time in iOS Settings. Fixing a region by searching for a place name remains available.
• Weather display: can be turned off in the App’s settings.
• Notifications: can be stopped in iOS Settings or in the item settings within the App.
• On-device data: can be deleted by deleting individual items or by deleting the App.
• Purchases: subscriptions can be canceled in iOS Settings. After cancellation, Plus remains available until the end of the paid period.

The Operator takes reasonable measures to prevent leakage, loss, alteration, and unauthorized access to information, including encrypted HTTPS connections, minimizing the data sent, keeping secret keys out of the App, server logs that contain no content, access controls, usage limits, and reviewing the security of third-party services.

The App is not a service that intentionally collects personal information from children. Users of an age for which the law requires parental consent should review this Policy and the voice AI explanation together with a parent or guardian.

This Policy may be updated in response to changes in features, laws, or third-party services. Material changes will be announced on this page or in the App. The last-updated date at the top identifies the latest version.

For inquiries about this Policy, data handling, withdrawal of consent, or confirming or deleting related information on the server, please contact:
Controller: Daisuke Tamura
Email: tonboapps@gmail.com