Privacy Policy
1. Introduction
Thank you for using Kuramate (hereinafter "the App"). This Privacy Policy explains how we handle your personal information within the App. By using the App, you agree to the practices described in this policy.
Data Controller: Ryoki Sato (Contact: support@kuramate.app)
2. Information We Collect
We collect the following information to provide and improve our services.
2.1 Authentication Information
When you create an account or sign in, we collect the following:
- Email address
- Display name
- Authentication method (Google account, Apple ID, or anonymous authentication)
2.2 Financial Data
As the core feature of the App, we store the following data you enter:
- Transaction records (amount, date, memo, category)
- Store names
- Receipt images
- Shopping lists
- Pantry (inventory) information
- Budget settings
- Meal plans
2.3 Group Data
When using the group sharing feature, the following information is shared among group members:
- Group member list
- Group transaction records
- Shared tasks
- Receipt images
2.4 Diagnostic Data
To improve app quality, we automatically collect the following:
- Crash reports (using Firebase Crashlytics)
- Usage analytics (using Firebase Analytics)
2.5 Device Information
- Platform (iOS / Android)
- App version
- Device timezone
2.6 Subscription Information
If you use a paid plan, we manage your subscription plan information and expiration date. Payment processing is handled through Apple / Google platforms, and the App does not directly collect credit card or payment information.
2.7 Camera and Photo Library
With your permission, we access your camera and photo library for capturing receipt images and food/ingredient photos. Selected or captured images are compressed on your device before being sent to our servers.
2.8 Push Notifications
We collect and store your device's notification token to deliver push notifications. You can disable push notifications from the App's settings screen.
2.9 Biometric Authentication
The App supports biometric authentication (Face ID, fingerprint) for app lock functionality. Biometric data is processed entirely on your device by the operating system. The App only receives a success or failure result and does not collect, store, or transmit any biometric data.
3. How We Use Information
We use the collected information for the following purposes:
- Providing and operating the budget tracking service
- Account management and authentication
- Data sharing through group features
- AI-powered receipt analysis, meal planning, and recipe generation
- Delivering push notifications
- Detecting and fixing app issues
- Analyzing and improving service usage
- Responding to inquiries
4. AI Features
The App provides AI-powered features including receipt analysis, meal planning, recipe generation, ingredient analysis, and financial reports. When you use these features, relevant data (such as receipt images, transaction data, and ingredient information) is sent through our servers to Google's AI service (Gemini API) for processing.
AI features are optional. All core features of the App are fully available without using AI.
5. Information Sharing with Third Parties
The App uses the following services, and information is handled according to their respective privacy policies:
- Google / Apple — Authentication services (Google Privacy Policy / Apple Privacy Policy)
- Firebase (Google) — Data storage, authentication, analytics, and crash reporting (Firebase Privacy Policy)
- Google Gemini API — AI feature processing (Google Privacy Policy)
- RevenueCat — Subscription management (RevenueCat Privacy Policy)
- Google AdMob — Ad delivery (free plan only) (Google Ads Policy)
We do not sell or rent your personal information to any other third parties. However, we may disclose information when required by law.
6. External Data Transmission
The App transmits the following information to external services to provide and improve our services.
| Recipient | Information Transmitted | Purpose |
|---|---|---|
| Firebase Analytics (Google) | App usage data, device information, screen navigation | Service usage analysis and improvement |
| Firebase Crashlytics (Google) | Crash logs, device information, app state | Bug detection and fixes |
| Google AdMob | Advertising identifiers, device information | Ad delivery (free plan only) |
| Google Gemini API | Receipt images, transaction data, ingredient information (AI features only) | AI feature processing |
| RevenueCat | Subscription information, device identifiers | Subscription management |
7. Advertising
The free plan of the App displays advertisements using Google AdMob. For ad delivery, advertising identifiers and device information may be sent to Google.
On iOS, a dialog will appear requesting tracking permission based on App Tracking Transparency (ATT). All basic features of the App remain available regardless of your tracking preference.
Upgrading to a paid plan (Kuramate Plus) removes all advertisements.
8. Data Storage and Security
Your data is stored using Firebase services on Google Cloud Platform (GCP), primarily in the Tokyo region.
We implement the following measures to protect your personal data:
- Encryption of data in transit (TLS)
- Encryption of data at rest (Google Cloud standard encryption)
- Access control via Firebase Authentication and additional security verification
- Oversight of our data processor (Google Cloud) under their data processing terms
However, no method of transmission over the Internet or electronic storage is 100% secure.
When using AI features, your data may be processed on Google servers located outside of Japan (such as in the United States). Google maintains appropriate security measures in accordance with their privacy standards.
If you delete your account, your personal data will be deleted from our servers within 30 days. However, the following data may be retained after deletion:
- Data contained in backup systems (automatically deleted after the backup retention period, up to 90 days)
- Anonymized and aggregated statistical data (in a form that cannot identify individuals)
- Log data previously collected by Firebase Analytics / Crashlytics (subject to Google's data retention policies)
While your account is active, we retain your data for as long as necessary to provide the service.
9. Your Rights
You have the following rights:
- Access to your data — You can view your data within the App
- Data correction — You can edit your data within the App
- Account deletion — You can delete your account from the App's settings screen. If you are unable to access the App, you can also request account deletion by contacting support@kuramate.app. Deletion permanently removes your personal data (transaction records, images, etc.) from our servers. However, data shared within groups (such as group transaction records and images) will remain in the group as data belonging to the other members
- Notification settings — You can disable push notifications from the App's settings screen
If you wish to request disclosure, correction, or suspension of use of your personal information, please contact us using the information provided below.
10. Cookies and Tracking
The App is a mobile application and does not use cookies. We use Firebase Analytics for analytics purposes and may use advertising identifiers for ad delivery.
11. Children's Privacy
The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will promptly delete that data.
12. Response to Data Breaches
In the event of a breach, loss, or corruption of your personal data, or if we become aware of such a possibility, we will take the following actions:
- Investigate the facts and determine the cause
- Promptly notify affected users
- Report to the Personal Information Protection Commission (when required by law)
- Develop and implement measures to prevent recurrence
13. Changes to This Policy
This Privacy Policy may be updated as needed. If significant changes are made, we will notify you within the App. The latest version of the policy is always available on this page.
14. Contact Us
If you have any questions about this Privacy Policy, please contact us at the following email address: