Privacy Policy

Harigami

Last updated: October 16, 2026 (10. added what stays after deletion: the account ID on notices left on a family board, and a marker that prevents recreating the account)

10HALF LLC ("we", "us") respects the privacy of users of Harigami ("the App", available on iOS and Android) and is committed to protecting personal information. This Privacy Policy explains what information the App handles and how.

1. Information We Handle

The App stores the following information in the cloud we use, and we use it to provide the App:

• Notice contents: photos captured with the scanner or chosen from Photos (with location and other capture metadata removed), the text recognized in them, the title, category, due date, and other details you confirm or edit, and who pinned each notice and when
• Display names and board names: entered optionally by you when using the App with your family
• Account identifier: the ID of the account the App creates automatically. For transfer codes, the server stores only a value derived for matching, not the code itself. Invitation codes are stored on the board so that members can show them.
• Notification settings: reminder times for the day before and the day of, whether reminders are on or off for each notice, and the time zone and language used for reminder times and text
• Notification destinations: a per-device identifier used to deliver push notifications (the Firebase installation ID)
• Purchase status: your Harigami Pro purchase history and subscription status (expiry, whether in a free trial, and so on). Payment is processed by Apple (App Store) or Google (Google Play); we do not receive payment information such as credit card numbers.
• Operational records: to prevent abuse and investigate problems, we keep records of requests to our servers (time, IP address, app and OS information, result, and so on) for about 30 days.
• Inquiries: if you contact us, your email address and the content of your inquiry

In addition, the App keeps on your device a copy of your notices for offline use, settings for how screens are displayed (such as the layout), and your account credentials such as the transfer code (in the Keychain on iPhone, or in storage encrypted with an Android Keystore key on Android). On Android, these credentials (the account ID, the transfer code, and a sign-in token) are also saved to Google's Block Store for a phone change. Block Store contents move to a new phone in a device-to-device transfer, and are backed up to Google's cloud only when the device backup is end-to-end encrypted.

2. How We Use Information

• Storing notices, syncing them between devices, and transferring them to a new device
• Providing boards shared with your family (letting members see the board's notices and each other's display names)
• Delivering due-date reminders
• Purchasing and restoring Harigami Pro, and providing features according to subscription status
• Preventing abuse, investigating problems, and responding to inquiries

We do not use information for any other purpose, and never for advertising or analytics.

3. Sharing with Your Family

When you use the same board as your family, the board's notices (photos, recognized text, due dates, and so on), the members' display names, and who pinned each notice are visible to every member. When you join, the notices you had also move to that board and become visible to every member. If you leave or are removed, the notices you pinned stay on the family board. Anyone who knows an invitation code can see the board's name and the members' display names before joining. Share an invitation code only with the family members you want to invite.

4. Outside Services

The App uses the following outside services to store and process information. We entrust Google and RevenueCat with information only as needed to provide the App.

• Google (Firebase): account authentication, storing notices and settings, server processing, and delivering push notifications (Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Firebase Cloud Messaging), and checking that requests come from the genuine App (Firebase App Check, using Apple's App Attest on iPhone and Google's Play Integrity API on Android). Privacy and Security in Firebase
• RevenueCat: managing Harigami Pro purchase status. It handles your account ID, App Store or Google Play purchase records, country or region, and device and app information. RevenueCat Privacy Policy
• Apple: in-app purchase payments on iPhone and push notification delivery (Apple Push Notification service). Apple processes payments under its own terms and privacy policy.
• Google (Google Play): in-app purchase payments on Android. Google processes payments under its own terms and privacy policy.
• Google (ML Kit Document Scanner): scanning notices on Android (taking or choosing a photo and correcting it). Google Play services processes this on your device and does not send the images or their content to Google. It sends technical information to Google for Google's own diagnostics and usage analytics, such as device and app information, device and per-installation identifiers, and performance data. ML Kit data disclosure
• Google (Block Store): keeping your account credentials for a phone change on Android (see section 1).

5. Where Data Is Stored and Transfers Abroad

Notices and other data are stored in Google Cloud's Tokyo region (Japan). The following processing, however, takes place outside Japan, including in the United States:

• Parts of the services of Google (a US company), such as account authentication, push notification delivery (notifications include a notice's title and other content), and checking that requests come from the genuine App
• Purchase status management by RevenueCat (a US company)
• Push notification delivery by Apple (a US company) on iPhone
• Google Play payments, ML Kit technical information, and account credentials kept in Block Store, handled by Google (a US company) on Android

Information about the United States' personal data protection system is available in the survey of foreign personal information protection systems published by Japan's Personal Information Protection Commission (in Japanese). For Google and RevenueCat, the processors we entrust, we have confirmed that their contracts (data processing terms) and security programs provide measures meeting the standards of Japan's Act on the Protection of Personal Information. We will describe those measures without delay on request.

6. Disclosure to Third Parties

Except as required by law, we do not provide your information to third parties without your consent. Sharing with your family (including the board name and display names that anyone with an invitation code can see before joining) happens on your instruction and with your consent. Sharing as a PDF and export are done by you, to destinations you choose.

7. Device Permissions

The App uses the following permissions. You can decline any of them; only the related feature will then be unavailable.

• Camera: used to scan notices (capture and automatic correction). On Android, the App itself has no camera permission; the scanner in Google Play services takes the picture.
• Photos: on iPhone, "Choose from Photos" uses the standard iOS photo picker. On Android, the scanner's photo picker (shown by Google Play services) is used. Either way the App receives only the photos you select and does not request access to your whole photo library.
• Notifications: used to show due-date reminders. Notifications show the notice's title and other content on the Lock Screen and elsewhere. You can change how they appear in your device settings (iOS Settings → Notifications, or Android Settings → Notifications).

8. Sharing and Export

The App can share a notice as a PDF and export the board's notices (photos and recognized text) together as a zip file. On a board shared with your family, the export also includes notices pinned by other members. Both happen only when you choose to, and you choose where to send them (a messaging app, email, files, and so on). Data you send elsewhere is handled under that service's privacy policy.

9. Security

To prevent leaks, loss, or damage of information, we take the following measures:

• We have set policies and procedures for handling information and limit who may handle it and with what access.
• We use encrypted communication, access controls (only a board's members can read its notices), checks that requests come from the genuine App, and minimal administrative privileges.
• Where data is held by processors abroad, we take measures after understanding that country's system, as described above.

We will describe these measures in more detail without delay on request.

10. Retention and Deleting Data

• You can delete notices one at a time in the App. Deleting a notice also deletes its photos, recognized text, and planned reminders from our servers. On a board shared with your family, it is removed for every member.
• You can delete your account from Settings at any time. When you do, we delete your notices (including photos), display name, notification settings and destinations, and purchase status records from our servers, and also delete your records at RevenueCat. Your transfer code stops working, and the copy of your notices on your device is deleted. However, notices you pinned on a board shared with your family stay on that board for your family. Those notices keep the account ID that shows who pinned them until the notice or the board is deleted. To prevent a deleted account from being misused, we keep a minimal record (the account ID, when it was deleted, a value derived from the transfer code for matching, and so on) for one year after deletion, and then erase it. After that, to prevent the same account from being recreated, we keep only a marker that the account was used, which is not linked to the account or to you. Purchase records held by Apple and Google are subject to their respective policies. Deletion is carried out in order after it is accepted.
• Deleting the App alone does not delete data on our servers. To delete it, delete your account in the App, or ask us by email as described below.
• Operational records are deleted after about 30 days.
• Deleting your account does not cancel your App Store or Google Play subscription. Please cancel it in your App Store account settings or in Google Play → Subscriptions.
• If you cannot use the App, you can also ask for your account and data to be deleted by email to the contact below (see Support for how).

11. Your Requests

You can ask us to disclose (by a method you choose, including electronically), disclose records of provision to third parties for, correct, stop using, or delete the information we hold about you. Please email us using the details below. Because the App has no email registration, we will explain how to confirm your identity (for example, with information shown in the App's Settings) and then respond in accordance with applicable law. There is no fee. You can view, edit, and delete your notices and display name in the App at any time.

12. Children's Privacy

The App does not knowingly collect personal information from children under 13.

13. Product Page Analytics

On the App's product page (https://10half.jp/harigami.html) and related articles, we use Google Analytics 4, provided by Google LLC, to understand how the pages are used and to improve them. It is not used in the App itself. The following explanation of cookies and consent applies to these web pages.

Google Analytics 4 uses cookies to collect information such as the pages viewed, time on page, referrer, device type, and approximate region. It does not collect information that directly identifies you, such as your name or email address, but a cookie-based identifier (a pseudonymous ID) and your IP address are processed by Google LLC in the United States. This information is handled under Google's Privacy Policy.

To understand statistics such as visitors' age ranges, gender, and interests, we may also use advertising-related identifiers linked to Google accounts (Google signals). We use these only for statistics and do not identify individual users. We do not serve or display ads on this website.

Consent: If you visit from the European Economic Area (EEA), the United Kingdom, or Switzerland, we do not use the cookies or advertising-related identifiers above until you consent. A consent banner appears on your first visit, and they are used only if you choose "同意する" (Accept). For visits from other regions, we have determined that consent is not required, so they are enabled by default.

Whether the banner appears is decided from your browser's time zone setting, so depending on your settings it may not appear even in those regions. Even then, cookies are not used, because Google determines the region of the visit. If you want to consent when the banner does not appear, open it with "Cookie 設定" (Cookie settings) in the product page footer.

Even when cookies are not used, information such as the page viewed, your IP address, and browser type is sent to Google without cookies. This does not continuously identify individual users.

Your choice is stored in your browser's local storage (key kt-consent) so that the banner is not shown again; it is not sent anywhere. This key is shared with our other product pages (KAETAO and SwingDiff), so a choice made on any of them applies to all of our product pages in the same browser.

You can change your choice at any time: open the banner again with "Cookie 設定" (Cookie settings) in the product page footer and choose "拒否する" (Decline); Google Analytics cookies already stored are also deleted. You can also disable cookies or use tracking prevention in your browser settings. On desktop browsers, the Google Analytics Opt-out Browser Add-on is also available (it does not support smartphone browsers).

14. Changes to This Policy

We may update this Privacy Policy as needed. Before a significant change takes effect, we will announce what changes and when it takes effect on this page or in the App.