Privacy Policy

Privacy Policy (ver3.0.0) 1. Information We Collect The Service may collect the following information from users. - Email address and display name (obtained through logging in with a Google account, and used for authentication and communication) - Environment information about the devices used, including the device name (host name) and operating system type (for device identification, telling devices apart on the account screen, license verification, and security) - Statistical data such as keystroke counts, working time, and usage frequency (for product improvement and AI analysis, only with the user's consent) - Purchase history, plan information, and payment-related information (for providing the Service, billing, managing contracts, and marketing) - The content of inquiries and the sender's email address (for responding to inquiries) - A hash value of the email address of an account that has been deleted (a form that cannot be reversed) and the date the trial started (to prevent abuse such as repeatedly leaving and rejoining) 2. Purposes of Use We use the information we obtain for the following purposes. - Providing, maintaining, and administering the Service - Verifying users, authenticating licenses, and preventing unauthorized access - Billing fees and managing paid plan contracts - Notices about new features, updates, or our other products (such as by email) - Improving the Service, optimizing AI features, and developing new features through analysis of usage - Responding to inquiries from users - Preventing abuse such as repeatedly leaving and rejoining the Service 3. Provision to Third Parties We do not provide the information we obtain to third parties, except in the following cases. - When the user has given consent - When required by law - When we disclose it, to the extent necessary, to trusted contractors for payment processing, email delivery, and similar purposes (we supervise them appropriately) - When the business is succeeded to, for example through a transfer of the business 4. External Transmission and Use of External Services (disclosure under the Telecommunications Business Act and related rules) The Service uses the following external services for providing the Service, user authentication, license management, payment processing, handling inquiries, and improving quality. Information is sent from the user's device to the servers of these services (including through cookies and local storage). * **Cloudflare (server and network infrastructure, license authentication server, software distribution, bot detection, and forwarding of support email)** * Information sent: app communication content, device environment information, IP address, license authentication information, browser information collected for bot detection, and the content and sender address of emails sent to the support email address * Recipient: Cloudflare, Inc. (United States) * Purpose: stable provision of the Service and the license authentication server, distributing software, preventing unauthorized access and abusive automated operations, optimizing communication, and receiving and forwarding inquiries (emails to support@gamita.net) * **Supabase (authentication, database management, and hosting)** * Information sent: email address, display name, sign-in authentication tokens, device environment information, plan information, and app usage statistics * Recipient: Supabase, Inc. (United States) * Purpose: user authentication, account management, and safe storage of data * **Google (login authentication)** * Information sent: information relating to authentication at login (the result of Google account authentication, email address, and display name) * Recipient: Google LLC (United States) * Purpose: user authentication with a Google account * **Stripe (payment processing)** * Information sent: payment-related information, purchase and contract history, device information, and IP address * Recipient: Stripe, Inc. (United States) * Purpose: payment processing for annual subscriptions, issuing invoices and receipts, fraud prevention, and managing contract status * **Upstash (temporary storage of login processing data)** * Information sent: a temporary identifier used in the login procedure and device identification information (valid for a few minutes) * Recipient: Upstash, Inc. (United States) * Purpose: safely handing over the login procedure between the app and the website By using the Service, users agree to the transmission of information to the external services above and to the transfer and storage of data on servers outside Japan (such as in the United States). We have confirmed that each provider takes appropriate security measures to protect personal information at the destination. 5. Handling of Credit Card Information The Service does not hold users' credit card information or other payment details. All payment processing is performed directly by our payment processor, Stripe, and managed in its secure systems. 6. Data Protection and Management We manage users' information appropriately and work to prevent unauthorized access, loss, destruction, alteration, and leakage. Information that is no longer needed is promptly deleted or anonymized. 7. Leaving the Service and Deletion of Data - Users can delete their own account (leave the Service) from the account screen at any time. - When a user leaves, we delete the account information, the registered device information, and the plan information. Deleted information cannot be restored. If the user has a paid plan, the contract is cancelled at the time of leaving (refunds are handled as set out in the Terms of Service). - Records relating to payments (billing and payment history, and so on) may be retained for a certain period after the user leaves, by us and by our payment processor (Stripe, Inc.), as required by law or for accounting purposes. - To prevent abuse such as repeatedly leaving and rejoining the Service, we convert the email address of a deleted account into a form that cannot be reversed (a salted hash value), using a salt and a hash, and keep it together with the date the trial started for one year after the user leaves. We do not keep the email address itself. We use the hash value only to prevent such abuse, and delete it when the one-year retention period ends. - Records of how we handled an inquiry (such as emails) may be kept for as long as needed to handle it. - Content stored on the user's own device (such as project files) is not deleted by leaving the Service. 8. Security Users are responsible for properly managing their own login credentials (such as a Google account). If theft or unauthorized use of an account is suspected, the user must contact us immediately. 9. Continuous Improvement We review and improve this Privacy Policy from time to time to keep up with changes in practice and technology. If we make a change, we will announce it within the Service or on the official website. 10. Contact For questions about this Privacy Policy, or requests for disclosure, correction, or deletion of personal information, please contact support@gamita.net. You can also delete your account and the related information yourself from the account screen, as described in Section 7. -------------------------------------------------- Last updated: October 26, 2026