日本語

Oshicho Privacy Policy

Last updated: September 4, 2026

This is a reference translation. The Japanese version is the authoritative text; if there is any discrepancy between the two, the Japanese version prevails.

Oshicho (the "operator", "we", or "us") sets out below how we handle user information in the app "Oshicho — A budget book for oshi-katsu" (the "App").

1. Information We Collect

Information you enter

• Records such as the person or character you support (your "oshi"), expenses, budgets, plans, and entries (for example, ticket lotteries)
• Images you register as an oshi icon (metadata such as location information is automatically removed on upload)
• Your email address when you link an account (optional; when you link with an Apple or Google account, the identifiers provided by that service)
• The content of feedback you send and a reply email address (optional)

Information collected automatically

• A user identifier issued by the system during anonymous use (a random ID; it is not tied to your name or similar information)
• App usage (event information such as screens viewed and features used, device type, OS version, and the like) — via analytics (Firebase Analytics, below)
• Diagnostic information for bugs and crashes (device type and OS version at the time, error details, and technical logs) — for quality improvement (Firebase Crashlytics, below); this does not include information that directly identifies an individual, such as your name
• Purchase status of paid plans (purchase history and subscription status; payment information such as credit card numbers is processed by Apple / Google and is not collected by the operator)

2. Purposes of Use

We use the information collected for the following purposes.

1. Providing and maintaining the App (storing, syncing, and transferring data)
2. Managing the purchase status of paid plans
3. Improving the App, addressing bugs, and considering new features
4. Responding to inquiries
5. Responding to conduct that violates the Terms of Service
6. Creating and using statistics processed so that individuals cannot be identified, within the scope of the purposes above

We do not use the personal information we collect for advertising, and we do not sell it to third parties.

3. Use of External Services

For the purposes above, the App uses the following external services to process and store data. Information is sent to each service only to the extent necessary to provide it.

Service	Provider	Where data is handled	Purpose
Supabase	Supabase, Inc.	Japan (Tokyo region)	Data storage and authentication
Firebase Analytics	Google LLC	United States	Usage analysis
Firebase Crashlytics	Google LLC	United States	Bug and crash diagnostics
RevenueCat	RevenueCat, Inc.	United States	Purchase status management
App Store / Google Play	Apple Inc. / Google LLC	United States	Payment processing

Transfers to third parties outside Japan

As set out above, we provide data to businesses that qualify as "third parties in a foreign country" under Japan's Act on the Protection of Personal Information. By beginning to use the App, you consent to those transfers, having reviewed the following.

(1) Countries to which data is transferred

United States

(2) The personal data protection regime of that country

The United States has no comprehensive federal statute on the protection of personal information. It is regulated instead by sector-specific federal laws and state laws (such as the California Consumer Privacy Act), together with enforcement under Section 5 of the Federal Trade Commission Act. Please also refer to the surveys of foreign regimes published by Japan's Personal Information Protection Commission: https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku

(3) Measures taken by the recipients to protect personal information

Each service provider takes measures such as entering into a data processing agreement (DPA), encrypting data in transit and at rest, applying access controls, and obtaining third-party information security certifications. Please see each provider's privacy policy for details.

Where provision to an external service is an entrustment of processing on our behalf, we still provide the information above and obtain consent whenever the recipient is located outside Japan.

4. Provision to Third Parties

Except as required by law, the operator does not provide personal information to third parties without the user's consent (excluding the entrustment-type provision to the external services in the preceding section).

5. Data Storage and Deletion

1. Record data is stored until the account is deleted.
2. When you delete your account from the in-app settings, the record data, images, and account information stored in Supabase are deleted and cannot be recovered. The handling of usage analytics data, bug diagnostic information, and purchase history is as described in items 4 and 5 of this section and under the terms of each store and service (purchase history may be retained by the stores and others as required for accounting and tax purposes).
3. If you delete the App while using it anonymously, that account can no longer be accessed. We may delete the data of accounts that have not been accessed for a certain period.
4. Usage analytics data is deleted after the retention period configured with Google (currently 14 months). Bug and crash diagnostic information is deleted approximately 90 days after collection.
5. After deletion is complete, data may remain in backups for up to 30 days.
6. The content of inquiries is deleted approximately one year after we finish responding.

6. Security Management

To prevent unauthorized access to, or leakage of, the information collected, the operator takes the following safety measures.

• Basic policy: we maintain and publish this Policy.
• Organizational measures: we define who handles personal data and the scope of that handling, and maintain a reporting process for any leakage or similar incident.
• Personnel measures: personal data is handled only after confirming the applicable handling requirements.
• Physical measures: devices used to handle personal data have screen locks and disk encryption enabled.
• Technical measures: we encrypt data in transit (TLS) and at rest, and apply per-account access control (row level security).
• Understanding the external environment: we implement these measures with an understanding of the personal data protection regimes of the countries listed in Section 3, where personal data is handled.

7. Regarding Persons Under 13

The App is not intended for persons under 13 years of age. Persons under 13 may not use the App. We do not knowingly collect personal information from persons under 13, and if we learn that we have, we will delete it promptly.

If you are a minor, please use the App with the consent of a parent or guardian (a legal representative such as a person with parental authority).

8. Requests for Disclosure, Correction, Deletion, etc.

Under the Act on the Protection of Personal Information, users may request disclosure, correction, suspension of use, or deletion of their own personal information held by the operator. You can view, correct, and delete your record data at any time within the App; for other requests, please contact us through the "Feedback" feature in the App or at the email address below. We will respond in accordance with the law after verifying your identity.

9. For California Residents

Where the California Consumer Privacy Act (CCPA / CPRA) applies, California residents may request disclosure of the categories of personal information we have collected and the purposes for which we use it, and may request deletion or correction of that information.

We do not sell personal information for monetary or other valuable consideration, and we do not share it for cross-context behavioral advertising. The same was true for the preceding 12 months.

We will not treat you unfairly for exercising these rights. Please send requests to the contact in Section 11.

10. Changes to This Policy

If we change this Policy, we will determine the revised content and the date it takes effect, and will notify you by means such as in-app notices before that date.

11. Contact

For inquiries regarding this Policy, please use the "Feedback" feature in the App or contact us at:

• Email: info@oshicho.app

---

Operator: Oshicho

Address and telephone number: disclosed without delay upon request (please contact info@oshicho.app)