プライバシーポリシー

1. Who we are

Kaguya is provided by Kakuno LLC (Kakuno合同会社) (“we” or “us”), represented by Daichi Hamazaki. Our address is 2F-C Shibuya Dogenzaka Tokyu Building, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan. We are responsible for the personal information described in this policy. Send questions or complaints about how we handle it to support@kaguya.space.

2. Information we collect

• Account information: your email address, your sign-in methods, and records of each sign-in, including its IP address and device details.
• Your content: what you save in Kaguya (such as text, photos, recordings, files, and links), what you search for, and what Kaguya creates from these, such as tags, summaries, and Kaguya’s messages.
• What you write to us when you contact us.
• Subscription information: your subscription status and purchases, which we receive from the app store you buy from through RevenueCat. We never receive your payment card details.
• Technical information: device identifiers, IP address, usage information (such as which features you use and how quickly the app opens), and crash reports (which include details such as your device model and app version).

You need an email address or another sign-in method to create an account. What you save in Kaguya is up to you. Your content may include sensitive information, such as about your health or beliefs; AI features process it only with the explicit permission you give when you allow them.

Kaguya shows no third-party ads and does not track you across other companies’ apps or websites. Our website uses no advertising or analytics cookies; it may store one cookie that remembers the language you choose.

3. How we use your information

We use your information to provide Kaguya and the AI features you choose to turn on, to keep Kaguya secure and working, to improve it, to answer you when you contact us, and to meet our legal obligations.

Under the EU General Data Protection Regulation (GDPR) and similar laws, our legal bases are: our contract with you, to provide Kaguya; your consent, for AI features; our legitimate interests, to keep Kaguya secure, to improve it, and to answer you; and our legal obligations.

We do not sell your personal information, use it to show you ads, or use your content to train AI models.

4. AI features

AI features are optional. They stay off until you allow them, and you can turn them off at any time in Account > AI.

While AI features are on, Kaguya sends your content, including your photos and the text in your photos, recordings, and files, to its AI providers: Cloudflare, OpenAI, and Google. They use it only to provide AI features: sorting and connecting your notes, suggesting to-dos, writing short summaries and messages, and searching by meaning. They process it on our behalf, and our agreements with them do not allow them to use it to train their models. Some keep it for a limited time, only to detect misuse, and then delete it.

Notes in the Private room are never used by AI features, so it is the place for anything you do not want AI to read, such as passwords. A note you move there is not used from then on, but what was already sent cannot be taken back. Kaguya is not a password manager.

Turning AI features off stops anything new from being sent. Results already created, such as tags and summaries, stay in Kaguya. Content already sent, or being sent at that moment, cannot be taken back.

AI results can be wrong or incomplete. AI features organize your own notes; they make no decisions about you that have legal or similarly significant effects.

5. Who receives your information

We share personal information only with the service providers below, for the purposes listed; when the law requires it or to protect someone’s safety; or with a company that takes over Kaguya, which must keep the protections of this policy. We add a provider to this list before it receives personal information.

• Cloudflare (United States): hosting, storage, email, including our support mailbox, and AI features.
• OpenAI (United States): AI features.
• Google (United States): AI features, and Sign in with Google, if you use it.
• Apple (United States): Sign in with Apple, if you use it; App Store purchases; notifications, whose text passes through Apple’s push notification service; and crash reports from people who share analytics with developers.
• RevenueCat (United States): subscriptions and purchase statistics.
• Sentry (United States): crash reports.

Apple and Google also handle what you give them directly, such as when you sign in with them or buy through the App Store, under their own privacy policies.

When you save a link, our servers read the page’s title, description, and image address from that site, and your device loads the image and the site’s icon from the addresses the page gives. Those sites receive your device’s IP address, as they do when you open the link.

6. Where your information is stored

The notes you save are stored in a Cloudflare data center near where you first used Kaguya. Your account information, and the photos, recordings, and files you save, are stored in Cloudflare’s Asia-Pacific region. Cloudflare chooses the exact data centers, so we cannot name the country in advance. Our other service providers handle data mainly in the United States. Each device you use Kaguya on keeps a copy of your content so that Kaguya works offline.

Japan, where we are based, is recognized by the European Commission and the United Kingdom as protecting personal data adequately. For transfers to other countries, we rely on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses, as the law requires. The service providers that handle data for us do so only on our instructions and are bound by contract to protect it at least as well as this policy describes. You can ask us about these safeguards.

7. How long we keep your information

We keep your account information, your content, and your searches while you have your account, unless you delete them sooner. Backup copies of deleted data expire within 30 days. Sign-in records are deleted when you sign out, and in any case with your account. Usage information and crash reports are kept for up to 3 months. We keep what you write to us for as long as we need it to answer you and to keep a record of our support.

A file you upload to import notes from another service, and our working copy of it, are deleted when the import ends or 7 days after you upload it, whichever comes first. The names of the conversations you imported are kept with the import.

You can export your notes, with their photos, recordings, and files, at any time. When you delete your account, we delete your data within 30 days, and backup copies expire within a further 30 days. After that, we keep only a minimal record of the deletion and the purchase records we need for billing and that the law requires.

8. Security

We protect personal information with organizational, staff, physical, and technical measures:

• Only the people who need it to run Kaguya can access it, and they are bound to confidentiality.
• It is encrypted while it travels and where it is stored.
• Our service providers protect their data centers and are bound by contract to protect your data.

In choosing these measures, we have taken into account the data protection laws of the countries where your data is handled, including the United States. You can ask us for more about them. Kaguya is not end-to-end encrypted.

9. Your rights

You can ask us for access to your personal information, or ask us to correct, delete, or export it, to tell you how we use it and with whom we have shared it, to restrict our use of it, or to object to uses based on our legitimate interests. You can withdraw your consent at any time, without affecting what was done before. Write to support@kaguya.space; we may need to confirm that the request comes from you. Requests are free.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you can also complain to your data protection authority. If you are in the United Kingdom, you can complain to us first, and we will acknowledge your complaint within 30 days. If you are in Japan, you can make these requests under the Act on the Protection of Personal Information, including about our records of the personal information we have provided to third parties. If you are in California or another US state with a privacy law, you have the rights that law gives you; we do not sell your personal information or share it for cross-context behavioral advertising, and we will not treat you differently for using your rights.

Kaguya does not track you across other companies’ apps or websites, so it works the same whether or not your browser sends a Do Not Track signal.

10. Age requirement

Kaguya is only for people aged 18 or over. If we learn that an account belongs to someone younger, we may close it and delete its data.

11. Changes to this policy

When we update this policy, we post the new version here with its effective date. Before a significant change takes effect, we will tell you in the app or by email. Before AI features send a kind of content this policy does not describe, or send anything to a provider not named here, we will ask for your permission again.