Privacy Policy

1. Information We Collect

Account information: email address, business/display name, and profile image. Sign-in uses a verification code sent by email, so we do not collect passwords.

Content: photos and videos uploaded by Users (persons who register an account to use the Service) and accompanying information (file names and metadata such as capture date). Photos may contain personal information such as the likeness of photographed subjects.

Usage: activity records for share links, such as views and saves (time and device type). We do not collect Recipients' names or contact details.

Usage (Users): we collect how User-facing screens (the top page, admin screens) are viewed and used, via an analytics tool, to improve the Service (see Section 4). Recipients' viewing pages are not included.

IP address: only when a viewing-PIN entry fails, we temporarily record the IP address to prevent brute-force attacks. These records are automatically deleted within 24 hours.

Cookies etc.: we use cookies necessary to maintain sign-in state and PIN verification state. We also record the “saved” display state in the Recipient's browser storage (localStorage). We do not use advertising cookies or tracking.

2. How We Use Information

To provide the Service (storing photos and videos, delivering them through share links, and providing the save feature).

To show Users usage insights (such as how many times a gallery has been opened or saved).

For identity verification, preventing misuse, responding to inquiries, and improving the Service.

3. Disclosure and Processors

We do not provide collected information to third parties except as required by law. We never share your information with third parties for advertising purposes, and we do not “sell” personal information.

We entrust storage and processing to the following providers to the extent necessary to operate the Service. Each processor handles information under its own privacy policy and its agreement with us.

・Vercel Inc. (US) — website hosting

・Supabase Inc. (US) — database and authentication (data stored in the Seoul region)

・Cloudflare, Inc. (US) — storage of photo and video data

・Resend (US) — sending emails such as sign-in verification codes

・Stripe, Inc. (US) — payment processing for paid plans (card details are handled directly by Stripe and never stored on our servers)

・Functional Software, Inc. (Sentry, US) — error monitoring

・PostHog, Inc. (US) — usage analytics (User-facing pages only)

4. Information Transmitted to External Providers

In accordance with the external-transmission rules of Japan's Telecommunications Business Act, we disclose the information sent from your device to external providers when you use the Service. None of it is used for advertising.

・PostHog, Inc. (US) — information sent: URLs of pages viewed, interactions such as clicks, browser/device type, IP address, and identifiers such as cookies. Purpose: usage analytics and service improvement. Transmission occurs only on User-facing pages (the top page and admin screens); it does not occur on Recipients' viewing pages.

・Functional Software, Inc. (Sentry, US) — information sent: technical details when an error occurs (location, browser/device type, IP address). Purpose: detecting and fixing defects. Error monitoring covers all pages, including delivery pages.

5. Data Location and International Transfers

Service data is stored on servers managed by the processors above. All processors are US companies; database and authentication data are stored in the Republic of Korea (Seoul region), and photo/video data and other information may be stored and processed on servers outside Japan, including the United States.

These countries may not have data protection regimes equivalent to Japan's Act on the Protection of Personal Information. In accordance with that Act, we verify each processor's safeguards (encryption in transit and at rest, access controls, etc.) and permit processing only within the purposes described in this Policy.

6. Retention and Deletion

Photos and videos are deleted from storage — originals and derived files (thumbnails and web versions) alike — when the user deletes the gallery or photo.

Galleries under an active plan (including the free trial) become unavailable to clients after expiry, but the data is kept until the user deletes it (unless the user has enabled automatic deletion for that gallery).

If no plan is active after the free trial ends or a paid plan is canceled, galleries with unlimited retention or a later date are automatically given an expiry date 30 days after the trial ended (7 days after cancellation), and their data is deleted from the day after the expiry date. We notify the registered email address 7 days and 1 day before deletion.

You can delete your account yourself at any time from Settings → Delete account (all galleries, photos, and account data are deleted and cannot be recovered). We also handle deletion requests via our contact address within a reasonable period.

7. Security

All communication is encrypted (HTTPS). Photo and video storage is private, and delivery uses signed URLs with expiration times. Share links are issued as hard-to-guess random strings, and a 4-digit PIN can be set as needed.

8. Your Rights

You may request notification of the purpose of use, disclosure, correction, addition or deletion, suspension of use or erasure, and suspension of third-party provision of your personal information held by us. Please contact us using the details below. We may ask for information to verify your identity.

If you appear in a photo as a subject and wish to discuss it (for example, to request deletion), contacting the User who shared the photo directly is usually the fastest resolution. If you cannot reach that User, please contact us using the details below.

We will never treat you disadvantageously for exercising your privacy rights.

9. Children's Information

Account registration is intended for persons 18 years of age or older. If you are under 18, please obtain the consent of a legal guardian.

Gallery content may include photos of children as subjects. Consent for capturing and sharing these photos (including parental consent) is the responsibility of the User (Terms of Service, Article 4).

10. Changes to This Policy

We may revise this Policy in response to legal changes or changes to the Service. For material changes, we will announce them in advance on the Service or by email, specifying the effective date, and update the date at the top of this page.

11. Language

The Japanese version of this Policy is the authoritative text. This English translation is provided for reference only; if there is any discrepancy, the Japanese version prevails.