Privacy Policy

See our Terms of Service

1. Introduction

Thank you for using Kuramate (hereinafter "the App"). This Privacy Policy explains how we handle your personal information within the App.

Data Controller: Ryoki Sato (Contact: [email protected])

2. Information We Collect

We collect the following information to provide and improve our services.

2.1 Authentication Information

When you create an account or sign in, we collect the following:

• Email address
• Display name
• Authentication method (Google account, Apple ID, or anonymous authentication)

2.2 Financial Data

As the core feature of the App, we store the following data you enter:

• Transaction records (amount, date, memo, category)
• Store names
• Receipt images
• Shopping lists
• Pantry (inventory) information
• Budget settings
• Meal plans
• Calendar events (title, date/time, location, memo, reminder settings, attendees)

2.3 Group Data

When using the group sharing feature, the following information is shared among group members:

• Group member list
• Group transaction records
• Shared tasks
• Shared calendar events
• Receipt images

2.4 Diagnostics and Usage Data

We collect crash reports to maintain app quality. We collect usage analytics only when you make the optional choice described in Section 2.6.

• Crash reports (using Firebase Crashlytics)
• Usage analytics (using Firebase Analytics)

2.5 Device Information

• Platform (iOS / Android)
• App version
• Device timezone

2.6 Subscription Information

If you use a paid plan, we manage your subscription plan information and expiration date. Payment processing is handled through Apple / Google platforms, and the App does not directly collect credit card or payment information.

RevenueCat manages subscriptions. If you opt in to usage analytics, subscription and app usage information may be used to understand general trends. You can withdraw consent in Settings. We stop collecting new analytics information after withdrawal, and linked information becomes eligible for deletion 65 days after collection and is deleted progressively. Information already sent to analytics services is not deleted retroactively. iOS also requires device tracking permission. This choice does not affect normal subscription management.

2.7 Camera and Photo Library

With your permission, features that use receipt or food images access your camera or photo library. Images you select or capture are sent to our servers when needed for the feature you use.

2.8 Push Notifications

We use your device's notification token to deliver push notifications. You can disable notifications in the App settings.

2.9 Biometric Authentication

The App supports biometric authentication (Face ID, fingerprint) for app lock functionality. Biometric data is processed entirely on your device by the operating system. The App only receives a success or failure result and does not collect, store, or transmit any biometric data.

3. How We Use Information

We use the collected information for the following purposes:

• Providing and operating the budget tracking service
• Account management and authentication
• Data sharing through group features
• Calendar and reminder functionality (event reminders are scheduled as local notifications on your device)
• AI-powered receipt analysis, meal planning, and recipe generation
• Delivering push notifications
• Detecting and fixing app issues
• Analyzing and improving service usage
• Understanding subscription status, purchase stores, and usage trends around subscriptions
• Responding to inquiries

4. AI Features

The App provides AI-powered features including receipt analysis, meal planning, recipe generation, ingredient analysis, and financial reports. When you use these features, information needed for the feature—such as images, text you enter, and transaction, ingredient, recipe, shopping, or calendar information—is used for AI processing through our servers. Processing may use Google APIs, OpenAI APIs, Anthropic APIs, or AI running on servers that we manage.

AI features are optional. All core features of the App are fully available without using AI.

5. Information Sharing with Third Parties

The App may use the following services. The recipient for AI features depends on the processing method used:

• Google / Apple — Authentication services (Google Privacy Policy / Apple Privacy Policy)
• Firebase (Google) — Data storage, authentication, analytics, and crash reporting (Firebase Privacy Policy)
• Google APIs — AI feature processing when used (Google Privacy Policy)
• OpenAI APIs — AI feature processing when used (OpenAI API data controls)
• Anthropic APIs — AI feature processing when used
• RevenueCat — Normal subscription management and, with separate analytics consent, temporary account association (RevenueCat Privacy Policy)
• Google AdMob — Ad delivery (free plan only) (Google Ads Policy)

We do not sell or rent your personal information to any other third parties. However, we may disclose information when required by law.

6. External Data Transmission

To provide and improve our services, the App transmits the following information to external services according to the features and processing method used.

7. Advertising

The free plan of the App displays advertisements using Google AdMob. For ad delivery, advertising identifiers and device information may be sent to Google.

On iOS, a dialog will appear requesting tracking permission based on App Tracking Transparency (ATT). All basic features of the App remain available regardless of your tracking preference.

Upgrading to a paid plan (Kuramate Plus) removes all advertisements.

8. Data Storage and Security

Your data is stored using Firebase services on Google Cloud Platform (GCP), primarily in the Tokyo region.

We protect personal data with encryption in transit and at rest, access controls, and appropriate management of service providers.

However, no method of transmission over the Internet or electronic storage is 100% secure.

When using AI features, your data may be processed on servers outside Japan (such as in the United States), depending on the external AI service used.

If you delete your account, your personal data will be deleted from our servers within 30 days. However, the following data may be retained after deletion:

• Data contained in backup systems (automatically deleted after the backup retention period, up to 90 days)
• Anonymized and aggregated statistical data (in a form that cannot identify individuals)
• Log data previously collected by Firebase Analytics / Crashlytics (subject to Google's data retention policies)

While your account is active, we retain your data for as long as necessary to provide the service.

9. Your Rights

You have the following rights:

• Access to your data — You can view your data within the App
• Data correction — You can edit your data within the App
• Account deletion — You can delete your account from the App's settings screen. If you are unable to access the App, you can also request account deletion by contacting [email protected]. Deletion permanently removes your personal data (transaction records, images, etc.) from our servers. However, data shared within groups (such as group transaction records and images) will remain in the group as data belonging to the other members
• Notification settings — You can disable push notifications from the App's settings screen

If you wish to request disclosure, correction, or suspension of use of your personal information, please contact us using the information provided below.

Usage analytics consent can be withdrawn or given again in Settings.

10. Cookies and Tracking

The App is a mobile application and does not use cookies. We use Firebase Analytics for analytics purposes and may use advertising identifiers for ad delivery.

11. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will promptly delete that data.

12. Response to Data Breaches

In the event of a breach, loss, or corruption of your personal data, or if we become aware of such a possibility, we will take the following actions:

• Investigate the facts and determine the cause
• Promptly notify affected users
• Report to the Personal Information Protection Commission (when required by law)
• Develop and implement measures to prevent recurrence

13. Changes to This Policy

This Privacy Policy may be updated as needed. If significant changes are made, we will notify you within the App. The latest version of the policy is always available on this page.

Versions presented for agreement are preserved as fixed revisions, and the App identifies the applicable version.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at the following email address:

[email protected]