HapikuruPrivacy Policy
Introduction
This Privacy Policy describes how CHIYUU Co., Ltd. ("we," "our," or "us") handles your information in connection with the Hapikuru website, iOS/Android applications, and related APIs (collectively, the "Service"). All language versions of this Privacy Policy are treated equally.
Information We Collect
We may collect:
(1) information you provide directly, such as your nickname, user ID, birthday, bio, icon settings, group names, the text of your thank-yous, and the contents of your inquiries;
(2) user IDs, email addresses, and certain profile information made available by Google or Apple when you sign in with those services;
(3) information collected automatically through your use of the Service, including device information, IP address, push notification tokens, usage history, operation logs, and crash or error logs;
(4) payment status information received from the App Store or Google Play if we offer paid plans in the future;
(5) the reports and blocks you make, including the reported thank-you or user, the reason, and the time;
(6) cookies and similar technologies on the website for analytics and remembering language settings; and
(7) if on-device AI is unavailable and you consent to external AI sharing, your free-form description of your day, the display names of group members needed to generate suggestions, and generated suggestions.
How We Use Your Information
We use the information we collect for account registration and authentication, user identification, providing features such as groups, sending and receiving thank-yous, and reward quests, delivering push notifications, providing, maintaining, and improving the Service, responding to inquiries, investigating incidents and fixing bugs, fraud prevention and other security measures, analyzing usage, handling objectionable content (reviewing reports and blocks, removing content, and suspending accounts), confirming payment status, and complying with applicable laws. Information sent to external AI is used only to generate thank-you suggestions.
Information Sharing
We do not sell your personal information.
Thank-yous you post to a group, along with your nickname, icon, and bio, are visible to the members of that group. Thank-yous recorded under "My own" are visible only to you.
Only when on-device AI is unavailable and you consent to external AI sharing, we send the free-form description, display names, and generated suggestions described above to Google's Gemini API to generate thank-you suggestions. We do not store those inputs or generated suggestions. Google's handling of this information is governed by Google's Privacy Policy and applicable contractual terms. Your consent is stored on your device for each account and can be withdrawn in the app's settings; we will ask again before a later request after you withdraw it, switch accounts, reinstall, or change devices.
To the extent necessary to operate the Service, we may also allow information to be handled by, or shared with, service providers and integrated services such as Google Sign-In, Apple Sign-In, Firebase Cloud Messaging, Firebase Analytics, Firebase Crashlytics, Sentry, Slack, the App Store, and Google Play. Some of these providers are located outside Japan, and your information may be processed in other countries.
Please review each provider's terms and privacy policy for details about how they handle information, including international transfers.
When you report a thank-you, its text, its author, and your account information are sent to our internal messaging tool (Slack) so that we can review and act on the report within 24 hours. When you block a user, information about you and the blocked user is sent in the same way. The other user is not notified of your report or block.
We do not link your information with third-party data for advertising purposes or share it with data brokers.
Security
We take reasonable administrative, technical, and organizational measures to protect your information against loss, leakage, unauthorized access, alteration, and similar risks. However, no method of transmission over the Internet or electronic storage is completely secure.
Your Rights
You may request deletion of your personal information or deletion of your account by contacting us.
Account information, information about groups and thank-yous, records of reports and blocks, and payment-related information are generally retained until account deletion.
Inquiry records may be retained for a reasonable period after the inquiry is resolved, and usage analytics data and crash or error logs are retained in accordance with the retention policies of the relevant third-party services.
After account deletion, we will delete or anonymize your information within a reasonable period, except where retention is required by law or reasonably necessary for dispute resolution or fraud prevention.
Additional Information for EU/EEA Users
If you are located in the EU/EEA, we may process your information on the basis of contract performance, our legitimate interests in operating, securing, improving, and protecting the Service, your consent, and compliance with legal obligations, as applicable.
Subject to applicable law, you may have the right to access, rectify, erase, restrict, object to processing, receive a portable copy of certain data, and withdraw consent.
You may also lodge a complaint with your local supervisory authority.
Where your information is transferred outside the EU/EEA, we will seek to rely on appropriate safeguards under applicable law, such as contractual protections or other recognized transfer mechanisms.
Contact Us
For questions about this Privacy Policy, or to request deletion or account closure, please contact us at https://hapikuru.app/en/contact.
CHIYUU Co., Ltd. / #603 Karney Place Sendai Ekimae-dori, 1-5-28 Honcho, Aoba-ku, Sendai-shi, Miyagi 980-0014, Japan
We may update this Privacy Policy from time to time. If we make material changes, we will revise the "Last Updated" date on this page and, where appropriate, provide notice within the Service.