Privacy policy

1. Who we are

• Name: SANGGI LEE (individual)
• Contact: dvdsang2@gmail.com
• We will give you our address without delay if you ask for it.

2. What we collect

Account

The Google or Apple account identifier and email address you sign in with (a relay address if you chose Apple's Hide My Email), or, on the web, the email address you sign in with by link. For people who moved over from the old test version, a value derived from their phone number that cannot be turned back into it (a hash) and the country code. Your email address is never shown to other users.

Profile

Display name (taken from your Google or Apple account at first), profile photo, introduction and activity area (a place name). We do not ask for your age, gender or date of birth.

Location (optional)

• If you allow it, your device location is used on the device to sort nearby circles, events and used items. For this, your location is not sent anywhere.
• When you set your activity area from your current location, we store an approximate position rounded to about 1 km and the place name.
• When you list a used item, we store a position rounded to about 2 km and the area name with the listing, and show them publicly.
• When a circle's activity area is set with "Use my location", the position is rounded to about 100 m and shown publicly as part of the circle. For an event venue, we store the position of the place chosen in search.
• Turning your current location into a place name uses your phone's operating system (Apple on iPhone, Google on Android).
• You can withdraw location permission in your device settings at any time. You can still use the Service by choosing an area by hand.

Circles and events

Circles and events you create; the introduction and answers in your requests to join a circle; member and staff roles; event sign-ups, waitlist places, cancellations and attendance; QR ticket check-in times; seats; poll answers; records of random draws and event games (roles, votes, drawings and so on); saved circles and events. Answers to questions a host adds to an event sign-up (for example nationality, gender or a social media account) and the "paid" mark a host records. Names a host types into a team split for people who do not use the app. Event fees are paid between the people involved, outside the Service; we never receive payment details.

Posts and messages

Board posts, comments and likes; stories; event photos; circle chats (text and photos); DMs (between an event's host or staff and an attendee, and trade DMs about used items; text and photos); photos and short clips in Today's log (sound is not kept and clips are cut to at most 4 seconds) and their captions; the daily vlog made from the log; used-item listings (photos, description, price, status) and trade ratings; anything you send through the feedback form.

Safety records

Reports (who reported, what was reported, the reason and an excerpt of the content), blocks and restrictions.

Notifications

Your push notification token, device type (iOS or Android), the app's language (so notifications arrive in it), notification settings (on or off per type, muted chats, quiet hours and time zone) and in-app notices.

Usage and technical data

The kind and time of actions such as opening the app, viewing a screen or posting, and the app version (recorded with your account to improve quality and investigate problems). Server access logs: IP address, browser and device type, the URL requested (including ad measurement parameters), the referring page and the time. The Service contains no advertising or behavioral analytics tools.

3. Why we use it

• To create your account, sign you in and confirm it is you
• To provide circles, events, sign-ups, check-in, seats, games, polls and other features
• To provide posts, chats, DMs, Today's log and vlogs, used-item listings and trade messages
• To show nearby circles, events and used items and calculate distances
• To send push notifications and in-app notices (in the app's language)
• To translate text when you press the translate button
• To handle reports, prevent harassment and misuse, enforce the Terms and keep people safe
• To answer inquiries, investigate problems and improve quality
• To comply with the law

We do not use personal information beyond these purposes. We do not use it for advertising and we do not sell it.

4. What other users can see

• Anyone, including people who are not signed in: your profile's display name, photo, activity area and introduction; public circles' descriptions and activity areas (including their position); the profiles of the owner and some members; public events and their venues (if the host limits the venue to attendees, only confirmed attendees and the host see it); posts and stories set to public; used-item listings (the seller's display name, area, approximate position and average rating).
• Circle members: the member list, the circle's posts, chat and stories, Today's log and vlogs, and event attendee lists. If you post anonymously, other members do not see that it was you (we can see it, to handle reports).
• The circle's owner and staff: introductions and answers in requests to join, answers to event sign-up questions, paid marks and check-in status.
• A DM is visible only to the two people in it.
• We may look at information, including chats and DMs, as far as needed to handle reports, investigate misuse, comply with the law or investigate problems.

5. Service providers and processing outside Japan

We use the following companies' services to process and store information. They handle personal data on our behalf, and we supervise them appropriately. Except where the law requires it, we do not give personal information to third parties without your consent.

• Google LLC (USA): Firebase Authentication (sign-in), Cloud Run (servers), Cloud Firestore (database), Cloud Storage for Firebase (photos and videos), Firebase Cloud Messaging (push notifications), Cloud Translation (translation), Cloud Logging (access logs), Sign in with Google, and Google Fonts on the web version.
• Apple Inc. (USA): Sign in with Apple and push notifications to iPhones (APNs).
• Nominatim by the OpenStreetMap Foundation (UK) and the address search of Japan's Geospatial Information Authority: searching for places and addresses. Only the search words are sent, from our server, never your account details.

When you press the translate button, the event or circle description or the chat message on screen is sent to Google Cloud Translation. Translations are only kept in memory for a short time, not stored.

The database, photos and videos and the servers are in Japan (Tokyo). Some processing, such as sign-in, push notifications, translation (processed in the USA) and access logs, may take place outside Japan, for example in the USA, by Google or Apple. We have checked the USA's personal information protection system in the survey on foreign systems published by Japan's Personal Information Protection Commission.

6. How long we keep it

• Account, profile, posts, messages, participation and similar data: while your account exists, or until you delete them.
• Stories: shown for 24 hours after posting.
• Access logs: deleted automatically after 30 days.
• Push notification tokens: deleted when you log out, delete your account, or the notification service reports them invalid.
• Translations and place searches: only kept in memory for a short time (up to 12 hours for translations, 24 hours for place searches), not stored.
• Recovery copies: deleted data and files stay in a recovery area for up to 7 days, then are erased.
• What we keep after you delete your account is described in "7. Deleting your account".

7. Deleting your account

You can delete your account at any time in the app or on the web: My → Settings → Delete account. See Delete your account and data for the steps and what is deleted and kept.

• Deleted: your account, profile, posts, comments and likes, chat messages, the DMs you are in (they also disappear for the other person), Today's log, listings and ratings, requests to join and participation records, notification settings and tokens, usage records, and the photo and video files you uploaded.
• Kept: records of reports (reports you made and reports about you) are kept for 3 years after they are handled, for safety and to resolve disputes. Blocks other users set against you remain as their settings. Vlog video files that included your posts are no longer shown in the app but may remain in storage.

You can also keep your account and delete posts, messages (unsend), listings, Today's log entries and so on from each screen.

8. Requests for access, correction or suspension

You can ask us to tell you the purposes of use of your retained personal data, to disclose it (including records of provision to third parties), to correct, add to or delete it, to stop using or erase it, or to stop providing it to third parties. Write to dvdsang2@gmail.com from the email address you registered. After confirming it is you, we will respond without delay as the law requires. There is no fee. Complaints and questions about how we handle personal information go to the same address.

9. Age

The Service is for people aged 18 or over. If we learn that information belongs to someone under 18, we will suspend the account and delete the information.

10. Security measures

• Organization and people: only the operator handles personal data. We set rules for handling it and review them.
• Technical: connections are encrypted with HTTPS; sign-ins are verified on the server; the database can be reached only from our servers; access rights are kept to what is needed; the admin screens require authentication.
• Physical: data is stored in Google Cloud data centers, and the operator's devices are locked.
• Foreign systems: understood as described in "5. Service providers and processing outside Japan".
• If a data breach occurs, we will report it to the Personal Information Protection Commission and notify you as the law requires.

11. Browser storage and data sent to other services

The web version keeps your sign-in state, language and whether you have dismissed notices in browser storage (such as local storage). We do not use cookies for advertising or behavioral analytics.

On the web version, to show pages and sign you in, your browser sends your IP address, browser type and the URL of the page you are on to Google services (Firebase Authentication, Cloud Storage for Firebase and Google Fonts).

12. Changes

We may change this policy when laws change or features are added. We will announce important changes in the Service or on this page. A revised policy applies from the time it is posted here.

13. Contact

SANGGI LEE (Machiwa): dvdsang2@gmail.com