Privacy Policy

The Service “Pojipo” is operated by:

• Operator: sawada3.com
• Person in charge: Masaki Sawada
• Address: 3F Ginza Yoshida Bldg. II, 2-21-2 Ginza, Chuo-ku, Tokyo 104-0061, Japan
• Contact: info@pojipo.com

For any privacy question, or to exercise your rights, contact us at the email address above.

Information you provide

• Account: your email address (used for passwordless one-time-code sign-in) and the information needed to keep you signed in. If you sign in with Google or Apple: the email address each gives us (with Apple’s “Hide My Email”, the forwarding address Apple makes for you) and your identifier at that service. If you sign in with Apple, we also keep, encrypted, what is needed to remove the link with Apple when you delete your account. We do not receive your name or profile photo.
• Profile: your nickname, the avatar you are assigned or choose, your invite code, your sharing preferences (including who your records are shared with by default), and your display language.
• Your content: the short notes you write and the BGM you pick, posts shared to the world or to friends and their translations, the country attributed to a shared post, stars (reactions) you give, friend connections, and users you block.
• Heart weather: the weather you choose for a day (sunny, cloudy, rainy or stormy) to describe how you feel or how tired you are, and its date. It is never shown to other users. Weather can be chosen only in versions of the App before 1.0.13. Version 1.0.13 has no place to choose it, and the weather kept before stays in your account.
• Good-mood switches (called “calm switches” in some versions): the switches you add (name, category, emoji) and how you rated them after trying them.
• Posts held for review: entries that may contain inappropriate language and are checked before they are published.
• Reports and inquiries: if you report a post, the report content and reason; what you enter in the contact form.
• Voice input: if you use voice input, your speech is converted to text by your device’s speech recognition (Apple or Google). We do not receive or store your audio.
• Kept only on your device: your quietness settings (versions before 1.0.13), unsent drafts, which notes you have read, kept or skipped, and when the app last showed you places to talk. None of this is sent to our servers. The app also checks on your device whether a record contains certain words that can signal serious distress; the result is never sent.
• For the home-screen widget: a few of your past records (their words and dates — never ones with words that may signal serious distress, or from rainy or stormy days) are kept in a place on your device shared by the App and its widget. Versions before 1.0.13 also keep your heart weather from the last two weeks there (1.0.13 does not). None of this is sent to our servers. With Settings → “Keep words off the widget” on, no words are kept there.
• Photos added to your records: photos can be added only in versions of the App before 1.0.13 (1.0.13 has no place to add one; photos added before stay on your device and still show on that day’s screen). Photos are kept on your device. The photo of an “only me” record is never sent to our servers. When you share a record with friends, its photo is shared with them too (a record with a photo can't be shared with everyone): where and when it was taken and the camera are removed on your device before it is sent, and again on our servers. Before anyone else can see it, the photo is checked automatically by OpenAI; photos found inappropriate are not kept or shown. Like the post, a shared photo is shown for 24 hours and is deleted from our servers when the post is deleted or expires (within 2 days) or the account is deleted. Deleting a record deletes its photo on your device.
• Poji’s room records: which room you used, when and for how long, how you left (if you chose), the feeling you picked, and that day’s heart weather (if you kept one). With or without an account, these stay only on your device and are never sent to our servers. They are deleted automatically after 400 days. Notes you write in a room are not saved. In Settings → “Poji’s room” you can stop keeping a record or delete it.
• Time marks (timers: your next mark and daily marks): a feature of versions of the App before 1.0.13. They are kept only on your device and never sent to our servers. If you choose a notification for a daily mark, it is scheduled on your device (notification permission is asked only then). For the Lock Screen widget and Live Activity, a copy of your marks is kept in a place on your device shared by the App and its widgets. Version 1.0.13 has no such feature: the first time it opens, it deletes any marks left and stops their notifications and alarms.
• Poji’s room scenes and sounds: fetched from our servers and kept on your device after first use (up to 300 MB; you can remove them in Settings). No information identifying your account or device is sent when they are fetched, and we keep no record of who fetched which scene or sound (as with any connection, your IP address reaches the infrastructure provider that delivers them).

Information collected automatically

• Technical & usage data: device and app information, log data, approximate location derived from your IP address, and timestamps, processed by our infrastructure providers to operate and secure the Service.

We do not collect payment information, and we do not knowingly collect precise GPS location.

Usage records (which buttons are pressed)

• To improve the App (to see where people get stuck and which features are used), we send which button you pressed (the button’s name) and when, to our server. Along with it we send only: a random number the App makes on your device the first time it starts (an install ID), a number that changes each time the App starts, the App version, and whether it is iPhone or Android.
• The install ID is not your account ID, an advertising ID or a device identifier. It is sent without your sign-in information, and we do not link it to your account. We never sell or share it, or use it for advertising, and we use no third-party analytics service (SDK).
• We never send what you write, what you record, photos, your nickname, email address or invite code, which weather (feeling) you chose, or the results of good-mood switches (calm switches). Nothing is recorded around the places to talk or the checks for painful words.
• Usage records are deleted automatically after 180 days. If you turn off “Send usage records” in the app, nothing more is sent, what was sent is deleted from our server, and the App switches to a new install ID. Deleting your account, or “Delete this device’s data”, deletes them the same way.
• The weather chosen in the first screens of versions before 1.0.13 is counted only as a daily total and is never linked to an install ID.
• When you delete your account, you may choose why (you don’t have to, and there is no box for words). Whether you answered and the reasons chosen are counted only as daily totals to improve the App, and cannot be linked to an install ID, to you or to your account.

• To provide and maintain the Service (saving your records and heart weather, showing your look-back, feeds and friends’ stories). Look-back sentences and the “for right now” and “today’s note” picks are made on your device by fixed rules — there is no AI analysis.
• To authenticate you (email one-time codes, Sign in with Google, Sign in with Apple).
• To display content according to your sharing setting.
• To translate shared posts (the text of a post is machine-translated so people who use other languages can read it).
• To enable social features (invite codes, follows, friends, reactions — including telling people who starred their posts or started following them).
• To keep the Service safe (moderation, abuse prevention, security).
• To improve the Service (from usage records: where people get stuck and which features are used).
• To communicate with you about the Service.
• To comply with legal obligations.

If you are in the EEA or the UK, we rely on:

• Performance of a contract — to provide the Service you request.
• Consent — for optional features and where required (withdrawable any time).
• Legitimate interests — to keep the Service secure and to improve it.
• Legal obligation — where the law requires it.

You choose who sees what you record. “Only me” is never shown to other users; “Friends only” is shown only to your friends (people you follow who also follow you); “Everyone” is shown in the public world feed. New accounts start with “Only me”. Your heart weather is never shown to other users.

If you star a shared post, the person who posted it sees your nickname (or “Someone” if you have none) and that you starred it, in the App’s notices. This happens whichever version of the App you use — including earlier versions that don’t mention it when you give a star. We never show anyone the number of stars, totals, who viewed a post, or who didn’t star it. People can turn these notices off in Settings.

You can follow other users. When you follow someone, they see your nickname (or “Someone” if you have none) and that you followed them, in the App’s notices. Posts shared with “Everyone” by people you follow appear together near the top of your Everyone tab (the Poji tab in 1.0.13). When you follow each other, you become friends and can see each other’s “Friends only” posts. We never show anyone the number of follows or followers. You can stop following at any time, remove a follower, or block someone.

Shared posts are visible for 24 hours and are deleted from our servers about two days after posting. Entries that may contain inappropriate language are not published until they have been checked. Shared posts are processed by a provider for translation (see section 6).

“Only me” means other users cannot see it; it does not mean the operator is technically unable to read it in the database. We do not look at individual records except where needed to handle reports or protect the Service. Please do not include sensitive personal information in your posts.

We share data only with providers that process it on our behalf, under contract:

• Cloudflare — the app’s servers, database, and file storage and delivery (such as BGM and the scenes and sounds of Poji’s room).
• Resend — to deliver sign-in emails.
• Google — to authenticate you when you continue with Google.
• Apple — to authenticate you when you continue with Apple, and to remove that link when you delete your account.
• OpenAI — machine translation of the text of shared posts, and the automatic check of shared photos (both “Everyone” and “Friends only”).
• Web3Forms — to deliver reports and contact-form messages to the operator’s email.
• Vercel — to host this website.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

Your data may be processed in countries other than your own, including where our providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

We keep your personal data for as long as your account exists. You can delete your account at any time from Settings → Delete account. Deleting your account permanently removes your profile, records, heart weather, good-mood switches, shared stories, reactions, friend connections, and the reports you made. Shared posts are also deleted from our servers about two days after posting, even if you keep your account. However, if another user reported one of your posts, the post's text and nickname contained in that report, together with the report and contact emails we received, are kept for one year after we receive them to handle the report and prevent abuse, and then deleted. Deleted data also disappears from our server's recovery records within 30 days at most. Records may also be kept for longer where the law requires it.

Poji’s room records stay only on your device, with or without an account; we do not hold them. Besides being deleted automatically after 400 days, they are removed with Settings → Poji’s room → Delete the record, by deleting your account, with Delete the data on this device, or by deleting the App.

Usage records (an install ID with button names and times) are deleted automatically 180 days after they arrive. When you turn off “Send usage records”, delete your account, or choose “Delete this device’s data”, the records of that install ID are deleted right away. Daily totals stay, as they belong to no one.

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete your data (“right to be forgotten”);
• receive a copy of your data in a portable format;
• object to or restrict certain processing;
• withdraw consent at any time;
• for California residents: know, delete, and opt out of “sale”/“sharing” (we do not sell or share), without discrimination.

You can exercise most rights directly in the App, or by contacting info@pojipo.com. You also have the right to lodge a complaint with your local data protection authority.

The Service is not directed to children under 13 (or under 16 in the EEA where required). We do not knowingly collect data from children below the applicable age. If you believe a child has provided us data, contact us and we will delete it.

We use industry-standard measures — including encryption in transit, server-side access checks (so you can reach only your own data), and two-factor authentication for the admin panel — to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and to respond to incidents appropriately.

This website uses only essential cookies/local storage needed to function. The mobile app does not use advertising cookies.

We may update this Policy. We will post the new version here and update the “Last updated” date; material changes will be communicated in the App where appropriate. Continued use after changes means you accept the updated Policy.

Questions about this Policy? Email info@pojipo.com.