MITAMERU Privacy Policy

1. Business operator

• Name: Hoshikaru LLC
• Representative: Yuki Kunugi
• Address: Shibuya Dogenzaka Tokyu Bldg. 2F-C, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan

2. Information we collect

• Account: email address, name (optional) and identifier received when you sign in with Apple or Google
• Profile: display name, date of birth (to confirm you are 18 or older), height, gender (optional), prefecture (optional), goal type (mode), goal date and goal, reminder time, display language
• Daily log: your choices (exercise, condition, meals and so on), weight and body fat you enter yourself, comments, and photos (Pro only)
• Scans: still frames used to build your 3D model, and the resulting 3D model and outlines
• Apple Health (iOS) / Health Connect (Android): if you allow it, workout types and durations and step counts
• Friends: invitations and connections, cheers you send, and your sharing settings
• Purchases: the purchase, renewal and cancellation status of Pro (payment details such as card numbers are handled by Apple and Google; we never receive them)
• Device and usage: push notification token, device and app type and version, app usage events (tied to an anonymous identifier), and error information
• Inquiries: your email address and what you wrote to us

3. Information we don't collect or send

• Capture video never leaves your device. Only the still frames used for the 3D model are sent, encrypted, and they are deleted from our servers as soon as the model is made
• Weight and body fat from Apple Health / Health Connect are only shown on your device and are never sent to our servers
• We do not collect location (GPS), contacts or other photos on your device

4. How we use information

• To register you, sign you in, confirm your identity and manage your account
• To provide features such as logging, building 3D models and outlines, showing changes, counting down to your goal day, sharing and cheering with Friends, notifications and widgets
• To provide Pro and check your purchase status
• To respond to inquiries and send important notices
• To prevent violations of our Terms and misuse, and to keep the Service safe
• To improve the Service and investigate problems by analyzing usage
• Only if you turn on "Help improve accuracy," to improve the accuracy of 3D models without photos and in a form that does not identify you

5. What Friends and others can see

Friends see only what you choose for each of them (whether you logged today, days this week, days to your goal, active time over the weeks, scan outlines and so on). They never see your weight, body fat, comments, photos or 3D model. Share cards are public only when you choose to share them.

6. Retention

• Scan still frames: deleted as soon as your 3D model is made (also deleted after processing ends if it fails)
• Account and Records: kept while you have an account and deleted when you delete it
• Backups: deleted automatically within 30 days
• Inquiries: one year after we finish responding
• Server access logs: up to 90 days

7. Security measures

• Encrypted connections, and access controls that limit your data to you (row-level security)
• Photos and 3D models are stored privately and shown to you only through time-limited links
• We limit who handles personal information, and we select and supervise service providers
• Details of our security measures are available on request to mitameru@hoshikaru.com, as required by law

8. Disclosure to third parties

We do not provide personal information to third parties without your consent, except:

• When required by law
• When necessary to protect someone’s life, body or property and it is difficult to obtain consent
• In connection with a business succession
• When we entrust handling to the providers below

9. Service providers

We entrust the following providers with handling information as needed to provide the Service. Each is contractually required not to use it beyond that purpose.

• Supabase, Inc. (United States): database, file storage and authentication. Data is stored in Japan (Tokyo)
• Google LLC (United States): building 3D models on Google Cloud (processed in Singapore) and Android notifications through Firebase
• Expo (650 Industries, Inc., United States): push notification delivery
• RevenueCat, Inc. (United States): Pro purchase status
• PostHog, Inc. (United States): app usage analytics
• Cloudflare, Inc. (United States): website delivery
• Apple Inc. and Google LLC: sign-in, payments, notifications, Apple Health / Health Connect

10. Transfers outside Japan

Some of the providers above handle information in the United States or Singapore. Information about personal data protection in those countries is available on the website of Japan’s Personal Information Protection Commission (https://www.ppc.go.jp/en/). Each provider takes measures, such as contracts and certifications, to handle personal data appropriately.

11. Analytics, ads and cookies

• The app uses PostHog for usage analytics. It records app usage tied to an anonymous identifier and never sends your weight, photos, 3D models or other Records
• The Service shows no ads and does not track you across other companies’ apps or websites
• We never use information read from Apple Health / Health Connect for advertising or provide it to third parties
• Our website (mitameru.com) does not use tracking cookies

12. Your requests

• You can export or delete your account and all your Records yourself at any time in the app under Settings › Export or delete data
• For other requests to disclose, correct, add to, delete, stop using or stop providing your information to third parties, contact mitameru@hoshikaru.com
• After confirming your identity (for example, with the email address you sign in with), we will respond promptly as required by law
• We may charge a fee of ¥1,000 per request for disclosure of retained personal data

13. Changes

We will announce any changes to this policy and their effective date on this page, and announce important changes in the Service.

14. Contact

Hoshikaru LLC, Personal Information Desk

Email: mitameru@hoshikaru.com

Address: Shibuya Dogenzaka Tokyu Bldg. 2F-C, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan

Supplementary provision

Established and effective October 5, 2026.