Privacy Policy

Established: October 11, 2026 / Last updated: October 22, 2026

Daiki Ikebata (the "Operator") sets out below how user information is handled in "Numaroku" (the "App"), an iPhone app.

1. Our Basic Approach

The App is designed so that the Operator has no servers. Information you record in the App is stored only on your iPhone and in your own iCloud. The Operator never receives or sees that information.

2. Information the App Stores on Your Device

To provide its features, the App stores the following information you enter on your iPhone:

• Your oshis' names, colors, icon photos, the day you became a fan, and birthdays (month and day)
• Spending amounts, dates, categories, notes, photos, and how each amount is split between oshis
• Recurring spending, budgets, and category settings
• Events (such as concerts and shows): names, dates, venues, notes, ticket status, lottery result dates, payment deadlines, and ticket prices
• App settings (such as whether the lock is on, the "hide amounts" setting, and the currency you chose)

When photos are added, they are resized and their metadata, such as where they were taken, is removed before they are saved.

3. Sync and Backup with iCloud

If you are signed in to iCloud on your iPhone, the information in Section 2 is stored in Apple's iCloud (the private area of your own account) and synced with your other devices that use the same Apple Account. The Operator cannot see this information. Apple's privacy policy (https://www.apple.com/legal/privacy/) applies to how iCloud handles it.

To protect against data loss, the App automatically makes backups on your device and in the App's folder in your iCloud Drive. You can turn off saving to iCloud Drive in the App ("Backup & Data"). Turning it off does not automatically delete backups already in iCloud Drive; you can delete them with "Delete iCloud Drive Backups" on the same screen. If you export CSV files, you choose where they are saved and who they are shared with.

4. Information the Operator Obtains

The Operator does not obtain your personal information through the App's features. If you contact us by email, the information is handled as described in Section 12. Specifically, the App does not:

• Require an account (email address, phone number, password, etc.)
• Show ads, use advertising identifiers, or track you across other companies' apps or websites
• Use analytics tools or send information to external services

The App contains no mechanism that sends your information to the Operator or to advertising or analytics companies. The App communicates only with Apple's App Store (to verify purchases) and with your own iCloud (for sync and backup).

The following information may reach the Operator through Apple:

• Crash reports and usage statistics: provided by Apple to the Operator only if you allow it in your iPhone settings (Privacy & Security → Analytics & Improvements → Share With App Developers). They include the device model, OS version, and a record of what happened when a problem occurred. According to Apple, they do not include information that directly identifies you, such as your name or Apple Account. They are used only to fix problems in the App
• Aggregated purchase information: numbers such as sales and cancellations on the App Store (aggregated by Apple)

5. Face ID, Touch ID, and Passcode

The App's lock uses the authentication built into your iPhone. Face and fingerprint data are processed only on your iPhone, and neither the App nor the Operator receives them.

6. Photos and Notifications

• The App reads only the photos you choose. It never reads your whole photo library. When saving a recap image to Photos, it asks only for permission to add photos
• When you share a recap image, you choose the app and the people to send it to. Shared images are never sent to the Operator
• Notifications for budgets, oshi anniversaries, "one year ago today," and events and tickets are created on your iPhone and are not sent outside. Notification text never includes amounts, oshi names, or event names or venues
• Information shown in Home Screen and Lock Screen widgets is passed only within your iPhone. Oshi names, amounts, and event names are not shown while your iPhone is locked. If the App's lock is on, widgets do not show amounts or event names
• The display on the Lock Screen and in the Dynamic Island on event days (Live Activity) is created on your iPhone and is not sent outside. It uses only your oshi's color and does not show oshi names, event names, or venues

7. In-App Purchases

Purchases, payments, and cancellations of Premium are handled on Apple's App Store. The Operator does not receive payment information such as your credit card number. The App checks whether a purchase is valid on your iPhone using Apple's systems.

8. Sharing with Third Parties

The Operator does not provide your personal information to third parties without your consent, except as required by law.

9. Deleting Your Data

• You can delete oshis, spending entries, and photos in the App at any time
• Deleting the App deletes the data on your iPhone. Data stored in iCloud can be deleted in the iPhone Settings app → your name → iCloud → Manage Account Storage
• Because the Operator does not hold your data, the Operator cannot delete or restore it

10. Children

The Operator does not obtain information from children through the App. If you are a minor, get the consent of a parent or guardian before purchasing Premium. If we learn that a child under 13 (under 18 for residents of India) has emailed us without a parent's consent, we will delete the email.

11. Your Rights (GDPR, CCPA, and Other Regions)

Depending on where you live, you may have rights over your personal data, such as the rights to access, correct, delete, restrict or object to processing, and receive a copy in a portable format. Because the data you record in the App is stored only on your iPhone and in your own iCloud, you can exercise most of these rights directly with the App's export and delete features or by deleting the App. For the limited information the Operator holds (emails you send us), contact us as described in Section 12.

If you are a California resident: the Operator does not sell or share your personal information for cross-context behavioral advertising.

For residents of India (Digital Personal Data Protection Act, 2023): questions and grievances about the processing of your personal data are handled by the Operator at the contact in Section 12. If you are not satisfied with our response, you have the right to complain to the Data Protection Board of India.

For residents of Brazil (LGPD): we process emails you send us in order to respond to your request. You may also file a complaint with the Brazilian data protection authority (ANPD).

For residents of Quebec, Canada: the person in charge of the protection of personal information is the Operator (contact in Section 12). Emails you send us are stored with Google LLC in the United States.

12. Contact, and Information We Receive When You Contact Us

Contact: kainan0880jwr@gmail.com

1. When you contact us by email, the Operator receives your email address, your name (display name), the content of your inquiry, and any attached files. These are used only to answer your inquiry and to investigate and improve the App, and are not provided to third parties without your consent, except as required by law
2. Emails we receive are stored in an email service provided by Google LLC (United States). As a result, your information may be processed outside your country of residence, including in the United States. The Operator protects the email account with two-step verification and limits access to the Operator only. Transfer abroad: your email address, name, and inquiry are stored on the servers of Google LLC (United States) when received and kept for about one year as described in item 3. If you do not want this, please do not contact us by email (in that case we cannot answer)
3. Emails for completed inquiries are deleted after about one year
4. Requests to be notified of the purpose of use of, to disclose, to correct, add to, or delete, to stop using or erase, or to stop providing to third parties the personal data we hold, requests to disclose records of provision to third parties, and complaints are accepted at the contact above. After confirming your identity, we will respond without delay in accordance with the law. The Operator's address will be disclosed without delay upon request

13. About This Website

The website for the App (https://kainan0880jwr.github.io/numaroku-site/) is published with GitHub Pages by GitHub, Inc.

• When you visit, GitHub may collect access logs (such as IP addresses) for security and other purposes. GitHub's Privacy Statement (https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement) applies. The Operator does not receive these logs
• This website does not use cookies, analytics tools, ads, or external fonts or scripts
• This website does not track visitors, so it does not respond differently to Do Not Track signals

14. Changes to This Policy

The Operator may change this policy when necessary. Important changes (especially if we start obtaining information or sending it outside) will be announced in the App or on this page, and the new content will be posted on this page.

The Japanese version of this policy is the authoritative text. Versions in other languages are translations provided for convenience; in case of any discrepancy, the Japanese version prevails, except where the law of your country of residence requires otherwise.