Privacy Policy

Effective: October 29, 2026. This is a translation. If it differs from the Japanese version, the Japanese version prevails.

1. About this policy

This policy explains how Process Craft AI (Rintaro Sakino, "we") handles information in the iPhone app Oshizome ("the App") and on this website.

2. What stays on your iPhone

• Photos of your fave (including cut-out and round-cropped versions)
• Your fave's name, color, messages, birthday and the day you became a fan
• Your fave's events (names and dates of concerts, streams and so on)
• Your widget designs, cheer counts and today's fortune

These are stored in an area of your iPhone that only the App, its widgets and its Live Activity can read (an App Group). They are not sent to our server, and we cannot see them.

The App reads only the photos you choose. The App does not save images to the Photos app.

Sharing designs

When you share a widget design, the App makes a link (https://oshizome-app.web.app/d.html#…) and a QR code. The part after "#" holds only the layout of the design (style, shape, positions and sizes of parts, colors and any text typed into the design). It does not include photos, your fave's name, messages, events or anything that identifies you.

You choose who receives the link and how, in the iPhone share sheet. Browsers do not send the part after "#" to servers; the receiving page (d.html) reads it inside the browser only to open the App. It does not reach our server and we do not store it. Text typed into a design is visible to whoever receives the link, so do not type anything you want to keep private.

3. What we send to our server

iOS ends the Dynamic Island and Lock Screen display (Live Activity) after at most 8 hours. Before that happens, our server uses Apple's push service to put it back. For this, the App sends only:

• Push tokens for starting and updating the Live Activity (addresses issued by Apple for the App on your iPhone)
• A random ID and passphrase created when you install the App (the server stores only a hash of the passphrase)
• Whether the display is on, and whether photos and messages rotate
• When the display started, and when the display switches (start and end of birthdays; start of an event's countdown, the event start and the end. Times only; we do not send whose birthday or which event it is)
• The notification language (Japanese or English), and whether it is a development or App Store build

We do not send names, photos, messages, colors, event names, designs, cheer counts, your Apple ID, email address, phone number, location or advertising identifier (IDFA). Server records can only be looked up by the random ID, so we cannot tell whose record is whose.

4. Where it is stored

Our server runs on Google Firebase (Google Cloud, Tokyo region). Notifications that put the display back are delivered through the Apple Push Notification service.

5. How we use it

We use the information in section 3 only to keep the Live Activity on screen, rotate photos and messages, and switch the display for birthdays and event countdowns. We do not use it for advertising, analytics or sale.

6. Analytics and ads

The App does not include analytics or advertising SDKs, and it does not track you across apps.

7. Purchases

Apple handles purchases of Oshizome Plus and payment. We do not receive your card details or Apple ID. Whether you have purchased is checked on your iPhone by Apple's StoreKit.

8. Sharing and service providers

We do not share the information in section 3 with third parties, except where required by law. We use Google (Firebase) to run the server and Apple to deliver notifications.

9. Retention and deletion

• When you turn the display off in the App's Settings, the server record is deleted right away.
• If you delete the App, Apple tells our server the push address no longer works the next time it tries to put the display back (within 8 hours), and it stops sending. The record is deleted 30 days after the App last updated it.
• Photos and other data on your iPhone are removed when you delete the App.

10. Requests about your data

We cannot tell whose record is whose. To delete your record, use the methods in section 9 (turn the display off or delete the App). For questions, contact us at the address in section 14.

11. Security

All communication is encrypted (HTTPS). Passphrases are stored only as hashes. The server database cannot be read or written directly by the App or any other device, and only we manage it.

12. Age

The App can be used by people of any age. We do not collect personally identifiable information from anyone, of any age.

13. This website

This website does not use analytics tools or cookies. Firebase Hosting (Google), which serves the site, may keep access logs for delivery.

14. Changes and contact

We will post any changes on this page. Contact: Process Craft AI (Rintaro Sakino) rintaro.sakino@process-craft-ai.com