Privacy Policy

Recipe Note (the "Service") handles user information based on the provisions described below.

To use the Service, users must read and agree to the contents described below.

If you do not agree, please do not use the Service.

1. Operator Information

• Operator: Makit System
• Personal Information Protection Manager: Munehisa Kuriyama
• Contact: makitsystem@gmail.com

2. Information We Collect

2.1 Information you provide

• Account information: email address, display name, authentication provider identifier (Google OAuth or Sign in with Apple)
• Recipe information: recipe name, source URL, ingredients, notes, rating (deliciousness level), images (recipe photos / dish photos)
• Cooking history: cooking dates and notes about each cooking day
• Tags: user-defined tag names

2.2 Information collected automatically

• Usage logs: navigation, operations, and error situations within the Service
• Device information: OS version, model, language, timezone
• Advertising ID: Identifier for Advertisers (IDFA) on iOS or Advertising ID on Android (used for ad delivery and measurement)
• Crash reports: diagnostic information automatically collected via Firebase Crashlytics when the app crashes
• Subscription-related information: purchased plan, purchase date, expiration, etc. (obtained via RevenueCat)

2.3 Information we do NOT collect

• We do not collect highly sensitive information such as location data, contacts, or your entire photo library (we only access individual images you select).

3. Purposes of Use

We use the collected information for the following purposes.

1. To provide the Service
2. To communicate and provide information about the Service
3. To investigate and analyze usage of the Service
4. To improve the Service or develop new services
5. To customize the Service for each user
6. To survey satisfaction with the Service
7. To aggregate and publish statistically processed information as research results
8. To resolve operational problems and prevent unauthorized use of the Service
9. To respond to disclosure or provision requests under applicable law or from public authorities

4. Disclosure to Third Parties and Service Providers

In providing the Service, we entrust the handling of personal information to the providers listed below. Each provider handles personal information in accordance with our contracts and the provider's own privacy policy.

Data is stored in regions located in Japan (Tokyo) wherever possible. However, because each provider is headquartered outside Japan (primarily in the United States), this constitutes a "provision to a third party located in a foreign country" under Article 28, Paragraph 1 of the Japanese Act on the Protection of Personal Information. By using the Service, you consent in advance to the entrustment of personal information to these foreign third parties.

We may also disclose collected information to third parties in the following cases.

1. When the Company determines disclosure is necessary to provide the Service.
2. To respond to user inquiries, contact users, provide related aftercare, etc.
3. When required by law or by a court, administrative agency, regulatory authority, or other public authority.
4. When the Company determines disclosure is necessary to resolve disputes with third parties or to protect the rights or interests of users or third parties of the Service.
5. In other cases where the Company determines disclosure is necessary, with the user's prior consent.

5. Information Sent When Using AI Features

• When and only when a user uses the recipe extraction AI feature, the uploaded image or HTML text from the user-specified Web page is sent to Google's Gemini API for processing.
• Data sent to Google's Gemini API is processed under the terms applicable to the API used by the Company.
• If you do not use AI features, no such transmission occurs.

6. Provision to Third Parties Located Abroad (Article 28 of the Act on the Protection of Personal Information)

• The providers listed in Section 4 above (Supabase Inc., Cloudflare, Inc., Google LLC, RevenueCat, Inc., Apple Inc.) are all headquartered in the United States.
• While data storage regions are configured to Japan (Tokyo) wherever possible, the contracting party is a foreign legal entity, so this provision constitutes a "provision to a third party located in a foreign country" under the Act on the Protection of Personal Information.
• Reference links for the personal information protection regimes in the relevant countries (United States):
  • Personal Information Protection Commission of Japan, "Survey of Personal Information Protection Systems in Foreign Countries": https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/
  • The United States does not have a comprehensive federal personal information protection law; protection is provided through state laws (such as CCPA / CPRA) and sector-specific regulations.
• Provider safeguards: each provider implements appropriate information security measures based on its Privacy Policy and Data Processing Addendum (DPA).
• By using the Service and consenting to this Policy, you are deemed to have consented to the provision of personal information to these foreign third parties.

7. Advertising

• The Service shows ads through Google AdMob to users on the Free and Basic plans. No ads are shown to users on the Premium plan.
• Advertising IDs (IDFA / Advertising ID) may be used to deliver personalized ads.
• For users in the EU/UK/EEA, we plan to implement consent prompts via the Google User Messaging Platform (UMP).
• To opt out of personalized ads:
  • iOS: Settings > Privacy & Security > Apple Advertising
  • Android: Settings > Google > Ads
• For details on Google's advertising policies, see policies.google.com/technologies/ads.

8. Data Management and Security

8.1 Server-side data vs. local-only data

When a user is signed in, recipes, tags, cooking days, images, etc. are sent to our servers (Supabase / Cloudflare R2) and used for synchronization across multiple devices. The following information, on the other hand, is stored only locally on the device (in a SQLite database, etc.) and is not sent to our servers.

• Pre-sync recipe drafts (edits in progress only on the device)
• Image restoration queue (for device migrations)
• Display settings, home tab order, and other user preferences
• Session tokens

8.2 Retention period

• Server-side data is generally retained while the account is active. However, on the Free plan, if you do not use the Service for one year after your last activity, your account and server-side data (including recipes and images) may be deleted. We will notify you by email several times before deletion. While a Basic or Premium subscription is active, this long-inactivity automatic deletion does not apply.
• Upon an account deletion request, server-side data is deleted within 30 days. A grace period until backup media are automatically purged may apply before deletion is fully complete. Backup data stored in Google Drive is not automatically deleted when you delete your account.

8.3 Security

We store collected information on servers in environments not accessible by ordinary users, and strive to prevent unauthorized access, loss, destruction, falsification, and leakage. Communication is encrypted via HTTPS, and stored data is protected by the encryption features of Supabase and Cloudflare R2.

9. Disclosure, Correction, and Deletion Requests

• Disclosure / correction requests: please email us at makitsystem@gmail.com.
• Deletion requests: please use "My Page > Delete account" in the Service, or email us at the address above.
• Time to completion: within 30 days (with a grace period until backup media are purged). We will notify you by email upon completion.

10. Children's Privacy

• The Service is intended for users of all ages and may be used by children under 13.
• However, when children under 13 use the Service, they must do so under the supervision and consent of a guardian (consistent with Article 3 of the Terms of Service).
• When personal information (email address, recipe data, images, etc.) is collected from children under 13, we treat it as having been provided with the consent of a guardian. Guardians may request deletion of their child's account and data from "My Page > Delete account" or by emailing makitsystem@gmail.com.
• Features that require authentication (Google OAuth / Sign in with Apple) follow the age policies of each authentication provider. Google accounts and Apple IDs typically can only be created for children under 13 via Family Link or Family Sharing, so use of authenticated features is generally under guardian management.
• Advertisements (Google AdMob) are shown using general-audience settings. We recommend that guardians supervise their children's use. Turning off "Ad personalization" on the Google Account also stops personalized ads in this Service.
• When COPPA (USA) or GDPR-K (EU) child protection provisions apply, we will respond in accordance with the applicable laws of each jurisdiction.

11. Disclaimer and Notes

We bear no responsibility for the protection of your information on the web services of other businesses or individuals that you view or access through the Service.

1. Please review the contents of such services yourself before viewing or using them.
2. We bear no responsibility for any damage to you or any third party caused by improper acts of hackers or others.
3. Please carefully manage information used to verify your identity to prevent loss, forgetfulness, or knowledge by third parties.

12. Access from Overseas

Please refrain from accessing the Service from countries or regions where the use, management, operation, or content of the Service is deemed inappropriate or illegal.

13. Updates to This Privacy Policy

We will work on improving this Privacy Policy from time to time. Before accessing the Service or using our service, please review the latest version of this Privacy Policy. By accessing the Service or using our service, you are deemed to have agreed to the latest Privacy Policy.

14. Contact Information

• Operator: Makit System
• Personal Information Protection Manager: Munehisa Kuriyama
• Email: makitsystem@gmail.com