YURAGI Privacy Policy

Article 1 (Information Obtained)

The Operator obtains the following information in connection with the Service, including information obtained and processed through external services.

(1) Information about inquiries

Email address, sender name, the content of inquiries, attachments and other information provided by Users.

(2) Information about purchases and subscriptions

Identifiers used to manage subscriptions, purchase records, the validity, expiry and renewal status of subscriptions, whether a free trial has been applied, and other information necessary to manage purchases and subscriptions.

This information is obtained and processed through app stores and an in-app purchase management service. The Operator does not receive store login credentials or payment information such as credit card numbers.

(3) Information about devices and communications

IP address, device and app identifiers, device type, OS and app versions, language and country or region settings, the date and time of communications, the results of entitlement checks, and other technical information necessary to provide and maintain the Service.

When audio and other content is delivered, information such as the IP address is sent to the delivery provider, as a necessary part of how network communication works.

(4) Information about sales and transactions

Sales and transaction reports provided by app stores. In addition to aggregate information, these reports may include order numbers, transaction dates and times, products, the purchaser's country or region, postal code and device information.

(5) Scope of information obtained

The Service has no account registration feature, and the app does not ask for your name, email address, date of birth or similar information in order to use it.

The app also does not request access to location, contacts, photos, the camera or the microphone. It does not obtain advertising identifiers and does not include any tools for usage analytics or crash reporting.

Identifiers, technical information and similar information may not identify a specific individual on their own. However, where such information constitutes personal information, for example because it can be collated with other information, the Operator handles it as personal information.

Article 2 (Purposes of Use)

The Operator uses User Information for the following purposes:

1. To provide the Service, including delivering content, confirming purchases and subscriptions, and managing entitlements.
2. To determine eligibility for the free trial and to provide information about it.
3. To respond to inquiries, confirmations regarding purchases and subscriptions, refund requests and similar matters.
4. To prevent, investigate and respond to unauthorized use and acts that violate the Terms of Use.
5. To investigate failures, ensure security, and maintain and operate the Service.
6. To manage sales and accounting and to comply with legal obligations.

If the Operator changes the purposes of use, it will do so only within a scope reasonably recognized as related to the purposes before the change, and will notify individuals of, or publish, the changed purposes. If the Operator uses personal information beyond this scope, it will obtain the individual's consent in advance, except where permitted by law.

Article 3 (Use of External Services; Entrustment)

To the extent necessary to achieve the purposes of use, the Operator may use external services for purposes such as purchase management, content delivery, system operation and data storage, and may entrust the handling of User Information to them.

The main entrusted parties and the purposes are as follows:

1. RevenueCat: management of in-app purchases and subscriptions, and determination of free trial eligibility.
2. Amazon Web Services: content delivery, system operation, and storage of communication records and similar information.

When the Operator entrusts the handling of User Information, it selects appropriate entrusted parties and supervises them as necessary and appropriate.

The Operator does not send Users' names or email addresses to RevenueCat, including when responding to inquiries.

For Google Workspace, which is used to receive and store inquiry emails, see Article 5.

Article 4 (Provision to Third Parties)

The Operator does not provide personal data to third parties without the individual's prior consent, except in the following cases:

1. Where the provision is based on laws and regulations.
2. Where the provision is necessary to protect a person's life, body or property and it is difficult to obtain the individual's consent.
3. Where the provision is especially necessary to improve public health or to promote the sound growth of children and it is difficult to obtain the individual's consent.
4. Where it is necessary to cooperate with a national government organ, a local government, or a person entrusted by either of them in performing affairs prescribed by laws and regulations, and obtaining the individual's consent is likely to impede the performance of those affairs.

Under the APPI, provision in connection with entrustment to the extent necessary to achieve the purposes of use, or in connection with business succession due to a merger or other reasons, may not constitute provision to a third party. However, provision to a third party in a foreign country is governed separately by Article 5.

If the Operator provides personally referable information to a third party and the recipient is expected to obtain it as personal data, the Operator will confirm that the individual has consented and will follow any other procedures required by law.

The handling of information on external websites linked from the Service is governed by the policies of each website.

Article 5 (Handling of Information in Foreign Countries)

The Operator currently does not provide personal data to any third party in a foreign country.

Inquiry emails are received and stored in Google Workspace, which is provided by Google Asia Pacific Pte. Ltd. in Singapore. Emails may be stored in facilities in Singapore, the United States and other countries where Google stores data. Because Google does not handle the content of the emails under its contract, this does not constitute provision of personal data (including entrustment). The security control measures in these countries are as described in Article 7.

If the Operator provides personal data to a third party in a foreign country in the future, it will follow the necessary procedures under the APPI, such as obtaining the individual's prior consent, and will revise this Policy. Where the individual's consent is required by law, the Operator will not treat the mere publication or revision of this Policy as consent.

Article 6 (Requests for Disclosure and Other Actions)

In accordance with the law, Users may make the following requests regarding their own retained personal data held by the Operator:

1. Notification of the purposes of use.
2. Disclosure of the retained personal data and of records of provision to third parties.
3. Correction, addition or deletion of the content.
4. Suspension of use, erasure, and suspension of provision to third parties.

Please send requests by email to the contact in Article 11. After confirming that the requester is the individual or a duly authorized agent, the Operator will respond without delay in accordance with the law.

To verify identity and identify the information concerned, the Operator may ask you to present purchase records or other necessary materials. For a request made by an agent, the Operator may ask for materials that confirm the agent's authority.

Disclosure is made by the method specified by the individual. However, if disclosure by that method would involve considerable expense or would otherwise be difficult, the Operator will respond in accordance with the law.

The fee for notification of the purposes of use and for disclosure is 1,500 yen (tax included) per request. The payment method will be explained in advance. No fee is charged for other requests.

If the Operator cannot comply with all or part of a request, it will inform you of that fact and the reasons, in accordance with the law.

Deleting the app alone does not delete information held by the Operator or by external services. The contact also accepts requests to delete information that does not constitute retained personal data, and the Operator will respond taking into account whether the information concerned can be identified, any statutory retention obligations and other circumstances.

Article 7 (Security Control Measures)

To prevent leakage, loss, damage, unauthorized access and similar incidents involving User Information, the Operator takes necessary and appropriate security control measures according to the nature of the information handled and the risks involved.

1. Basic policy: The Operator has established this Policy to set out its basic policy on the proper handling of User Information.
2. Organizational and personnel measures: The representative is the person responsible, and the persons who handle information and their access rights are limited to the extent necessary. The Operator also informs those who handle information of the proper handling methods.
3. Physical measures: The Operator takes measures to prevent unauthorized use, theft and loss of devices and other equipment used to handle User Information.
4. Technical measures: The Operator works to prevent unauthorized access, information leakage and similar incidents through encryption of communications, access control, protection of credentials, software updates and similar measures.
5. Understanding the external environment: As described in Article 5, inquiry emails may be stored in Singapore, the United States and other countries where Google stores data. The Operator takes the necessary security control measures after understanding the personal information protection systems of these countries based on the country-by-country information published by the Personal Information Protection Commission (Japan) (https://www.ppc.go.jp/enforcement/infoprovision/laws/, in Japanese).

For details of the security control measures, please contact the contact in Article 11. The Operator will provide information in accordance with the law, except for matters that could hinder the secure management of information.

Article 8 (Retention Periods; Statistical Data)

The Operator retains User Information for the period necessary to achieve the purposes of use. Information that no longer needs to be retained is deleted or erased by appropriate means, unless retention is required by law.

The main retention periods are as follows:

1. Communication records relating to entitlement checks: 180 days. They are deleted automatically after this period.
2. Information about purchases and subscriptions: the period necessary for subscription management, responding to unauthorized use, and responding to inquiries.
3. Information about inquiries: the period necessary to respond to inquiries and for related follow-up.
4. Information about sales and accounting: the retention period prescribed by applicable laws.

For information stored in external services, the Operator also requests deletion and takes other necessary actions, taking into account how the information is actually handled and any legal obligations.

Within the scope of the purposes of use set out in this Policy, the Operator may create and use aggregate information from information it has already obtained, after removing any link to specific individuals. If the Operator obtains new information for usage analysis or statistics, it will revise this Policy or follow other necessary procedures, depending on the nature of that information.

Article 9 (Information on Devices; Cookies and Similar Technologies)

The app stores on the User's device the playback settings, favorites, sound combinations created by the User, content caches and other information necessary for the app to work. These settings and playback states are not sent to the Operator's servers.

Identifiers and subscription information stored on the device by the purchase management service are communicated to and synchronized with external services in accordance with the handling set out in Articles 1 and 3.

Information on the device is deleted when the app is deleted. However, depending on the device and OS settings, it may be included in backups and restored.

The Service's website uses only one cookie, which remembers the display language chosen by the User (name: lang; value: a language code; retention period: 1 year). This cookie does not contain any information that identifies Users, or any information for advertising or usage analytics. The website also does not use usage analytics tools. When content for the website and the app is delivered, the IP address and other information are sent to the delivery provider, but the Operator does not store these delivery access logs. However, for communications for entitlement checks and other communications for providing and maintaining the Service, the Operator may record the information described in Article 1 (3), and the retention period for that information is as described in Article 8.

Article 10 (Revisions to This Policy)

The Operator may revise this Policy at any time as necessary, including due to amendments to laws or changes to the Service.

When revising this Policy, the Operator will make the revised content and its effective date known within the Service or on this website, and the revised Policy applies from the effective date. Revisions that are disadvantageous to Users will be made known before the effective date. Where the individual's consent is required by law, the Operator will obtain it separately.

Article 11 (Contact)

Inquiries and complaints about this Policy and the handling of User Information, as well as requests for disclosure and other actions, are accepted at the following contact.

Name of business operator: Figment (an unincorporated association)
Address and name of representative: Provided without delay upon request to the contact below.
Contact: support@yuragi.jp

Information provided in connection with inquiries is handled in accordance with this Policy.

The Operator is not a member of any accredited personal information protection organization.

Article 12 (Language)

This Policy is written in Japanese as the original, and versions in other languages are translations for reference only. If there is any difference between the Japanese version and a translation, the Japanese version prevails.