1. Covered Apps

This policy applies to the following apps.

Apps not listed above are governed by their own separate privacy policies.

2. Data You Enter

• Your data is stored on your device.
• In the password manager apps (パスワード管理, Simple Password), stored data is encrypted with AES-256 and the encryption keys are held in the device's secure storage (Android Keystore / iOS Keychain).
• We have no access to your encryption keys or your stored data and cannot recover its contents.
• Where biometric unlock (fingerprint / face) is used, biometric data is processed solely by the operating system and is never accessible to the Apps or to us.
• Uninstalling an App deletes its data from your device.

3. Information We Collect

The Apps use the following third-party services for advertising, quality improvement and billing. These services automatically collect information that does not directly identify you.

Advertising (Google AdMob)

• Advertising ID (AAID / IDFA)
• Device information (model, OS version, screen size, language)
• Approximate location derived from IP address
• Ad impression and interaction data

You can reset or disable your Advertising ID under Android Settings > Privacy > Ads, or iOS Settings > Privacy & Security > Tracking. Purchasing the premium version removes ads.

Usage analytics (Firebase Analytics)

• Screen views and feature usage events (never the contents you enter)
• Device model, OS version, app version, language, country
• App instance ID

Crash reporting (Firebase Crashlytics)

• Stack traces and error logs at the time of a crash
• Device state (model, OS version, available memory)

Crash reports never contain your stored passwords, notes or other saved content.

In-app purchases (Google Play Billing / Apple App Store)

Purchases are processed by Google Play or the App Store. All payment and card details are handled by Google or Apple; we never receive your card number or other payment credentials. We only receive your entitlement status.

おくすりナビ uses RevenueCat to manage entitlement state. RevenueCat stores an anonymous user identifier and purchase history for that purpose.

4. App-Specific Features

The following features exist only in the apps noted, and run only when you explicitly enable or trigger them.

Location

Applies to: 高速料金ナビ, Highway Navigator, Train App

• Device location is used to provide route guidance, toll calculation and nearby traffic information.
• Location is used only for these purposes and is never accumulated on our servers.
• You can grant or revoke location access at any time in your device settings.

Cloud sync (iCloud / Google Drive)

Applies to: パスワード管理, Simple Password, Memo App

• Backups are saved to your own iCloud or Google Drive only when you enable sync.
• When Google Drive is used, we receive your email address and basic account profile at sign-in. Access is limited to the drive.file scope, so the app cannot access any file it did not create.
• Backups are encrypted and stored in your own cloud storage, not on our servers.
• You can stop syncing and delete backups at any time, from the app or from the cloud service.

Breach check (Have I Been Pwned)

Applies to: パスワード管理, Simple Password

• Queries the Have I Been Pwned API (api.pwnedpasswords.com) only when you run a security audit.
• Only the first 5 characters of the SHA-1 hash of a password are sent (k-anonymity). The password itself and the full hash are never transmitted.
• The service cannot determine which password was checked.

AI Scan (reading medication details from an image)

Applies to: おくすりナビ

• Only when you take or select a photo and run the scan, that image is sent to Google's generative AI service (Firebase AI Logic / Gemini) to read the medication details.
• Only the image you capture or select at that moment and the extraction instruction are sent. Records already stored on your device are never sent.
• Images are not stored on our servers.
• A photo of a prescription may include a name or clinic name. If you do not want such details transmitted, adjust the framing or enter the information manually.
• Firebase App Check is used to prevent abuse.

Medication reminders

Applies to: おくすりナビ

• Reminders are local notifications generated on your device; their contents are never sent externally.

Favicon retrieval

Applies to: パスワード管理, Simple Password

• Requests containing only the domain name of a saved URL are sent to Google's favicon service (www.google.com/s2/favicons) and to that domain.
• Usernames, passwords and notes are never included.
• This feature can be disabled in the app settings.

Reading page content via the Safari extension

Applies to: TsuboMeter

• On real estate sites you have granted access to, the Safari extension reads only the displayed price and floor area, calculates the price per tsubo and per square metre, and shows the result on the same page.
• Reading and calculation happen entirely on your device. Page content, URLs and browsing history are never sent to us or to any third party.
• Only your display preferences and a count of how many times a price was shown are stored on the device. Which properties you viewed is not recorded.
• The extension is off by default. You choose which sites it may run on in Settings → Apps → Safari → Extensions.

5. Third-Party Services

We do not sell or transfer collected information to any third party other than those listed above, except where required by law.

6. Retention and Deletion

• Data on your device is retained until you delete it or uninstall the app.
• Where a Trash feature exists, deleted items are permanently removed after a set period (30 days in the password manager apps). You can also delete them permanently at any time.
• Cloud backups can be deleted by you from iCloud or Google Drive.
• Retention of analytics and crash data follows the policies of the respective provider (Google).
• To request deletion of analytics or crash data, contact us at the address below.

7. Permissions

• Internet / network state: used for ads, analytics and each app's network features.
• Location: used only in the traffic and navigation apps.
• Biometrics: used to unlock the password manager apps. Biometric data itself is not accessible to the apps.
• Accounts: used only if you enable Google Drive sync.
• Camera / photo library: used only for AI Scan in おくすりナビ. The app handles only the image you select and does not read your library as a whole.
• Notifications: used for medication reminders in おくすりナビ.
• Tracking (iOS): requested for ad optimization. Consent is optional.

The Apps do not request contacts, calendar or microphone permissions.

8. Children's Privacy

The Apps are not directed to children under 13. We do not knowingly collect personal information from children under 13.

9. Contact

For questions about this policy or to request deletion of your data:

• Developer: Team 3 (Google Play Store) / Masaki Sato (App Store)
• Email: feedback.team03.app@gmail.com
• Support page

10. Changes to This Policy

We may update this policy to reflect changes in law or in the Apps. If we make significant changes, we will announce them on this page or within the Apps.

Effective date: August 9, 2026

This policy is published at: https://support-site-vercel.vercel.app/privacy.html