Privacy Policy
Kissa Soft (hereinafter referred to as the “Company”) establishes this Privacy Policy (hereinafter referred to as this “Policy”) regarding the handling of users’ personal information in Social Coffee Note.
1. Definition of Personal Information
In this Policy, “personal information” means personal information as defined in the Act on the Protection of Personal Information.
2. Scope of Application
This Policy applies to the handling of information relating to users in the Social Coffee Note mobile application, official website, and services ancillary thereto provided by the Company.
3. Information We Collect
The Company may collect the following information:
- Account information: email address, external IDs used for authentication, display name, and profile information
- User content: coffee records, comments, photos, videos, visibility settings, and information relating to copy attribution
- Usage information: actions in the app and on the website, screens or URLs viewed, feature usage records, and logs necessary for investigating incidents
- Device and communication information: operating system, app version, device type, advertising identifier (when advertising features are used), IP address, and other information collected in connection with communications
- Inquiry information: inquiry details and contact information
- Purchase information: purchase status and entitlement information. Card numbers and other payment information are handled by app stores and payment platforms, not by the Company.
The Company does not collect location information as a feature of this service.
4. Purposes of Use
The Company uses collected information for the following purposes:
- Registration, identity verification, authentication, account management, and provision of this service
- Storage of records, application of visibility settings, and display of copy attribution
- Prevention of unauthorized use, security assurance, responding to reports, and responding to violations of the Terms of Service
- Incident response, quality improvement, analysis of usage, and consideration of new features
- Confirmation of paid-plan status, the operation of advertising display and measurement, and affiliate display operations
- Responding to inquiries, important notices, and notifications of changes to the Terms of Service or this Policy
5. Changes to Purposes of Use
If the Company changes the purposes of use, it will do so only to the extent reasonably deemed related to the purposes of use before the change. The purposes of use after the change will be announced through this service or the official website.
6. Service Providers and External Services
For the purposes described above, the Company uses the following providers and services to the extent necessary:
| Provider / Service | Purpose of Use | Information Handled |
|---|---|---|
| Google Cloud / Firebase | Authentication, app infrastructure, and storage of account and record data | Email address, authentication IDs, user content, and logs |
| Cloudflare R2 | Storage and delivery of photos, videos, and other user media | Photos and videos posted by users, and identifiers and logs necessary for storage and delivery |
| RevenueCat, Apple, Google | In-app subscription billing and entitlement management | Purchase status and identifiers relating to store transactions |
| Google AdMob | In-app advertising display and measurement, and consent management | Advertising identifiers, device information, and advertising-related events |
| Sentry | Detection and investigation of incidents | Error information, device and app information, and logs necessary for incident investigation |
| Resend | Sending emails for authentication, password resets, and important service notices | Recipient email addresses and information necessary for sending |
| PostHog EU | Anonymous usage analytics on the official website | Viewed URLs, anonymous events, etc. |
| Amazon Associates / Rakuten Affiliate | Provision and measurement of affiliate links for coffee equipment | Information collected by the respective companies in connection with link navigation |
The Company will cause service providers to handle only the information necessary, within the scope of the purposes for which they are engaged, and will manage them appropriately.
7. Provision to Third Parties
Except as required by law or otherwise permitted by law, the Company will not provide personal data to third parties without users’ consent. Where the Company entrusts the handling of personal information to the extent necessary to achieve the purposes of use, or provides personal information in connection with a business succession, it will handle such information in accordance with applicable laws. When users make purchases through app stores or access external services through affiliate links, the respective providers handle information in accordance with their own policies.
8. International Transfers
The Company may use services involving providers located outside Japan, such as Resend. When transferring personal data internationally, the Company will provide necessary information, obtain consent, and take other measures in accordance with applicable laws.
9. Advertising and Access Analytics
The Company uses Google AdMob for advertising display and measurement within the mobile app. The necessary procedures for tracking authorization on iOS and for obtaining consent required in applicable regions will be carried out in the app.
On the official website, the Company uses PostHog EU to analyze anonymous usage. The Company does not use cookies or localStorage, has disabled session recording, and does not conduct cross-site tracking. If the implementation or measurement policy changes, the Company will reassess its practices, including the collection of consent.
10. Security Measures
The Company implements access controls, authentication, encryption, monitoring, and other security measures appropriate to the nature of the information it handles. Regarding specific security measures, the Company will respond to inquiries to a reasonable extent in accordance with applicable laws.
11. Retention Periods and Deletion Policy
The Company retains collected information for the periods necessary to achieve the purposes of use, comply with legal obligations, prevent unauthorized use, respond to disputes, and conduct recovery operations. Information that is no longer necessary will be deleted or anonymized, except where legal or technical constraints apply. Retention periods for logs, backups, and other information held by service providers are governed by each provider’s settings and applicable laws.
12. User Rights and Account Deletion
To the extent permitted by law, users may request disclosure, correction, suspension of use, deletion, and other actions with respect to retained personal data. The Company will provide guidance on the minimum procedures necessary for the nature of the request and identity verification. The Company does not require the blanket submission of driver’s licenses or similar documents, nor does it charge a fee of JPY 1,000 per request, as stated in the current text.
When a user requests account deletion, the handling of the account, user content, and copy attribution is as provided in the “Withdrawal and Data” section of the Terms of Service.
13. Changes to This Policy
The Company may change this Policy as necessary due to changes in laws, changes to the service, or other circumstances. For material changes, the Company will provide advance notice of the effective date and details of the changes through this service or the official website.
Version: 1.0
Date of Establishment / Last Revision / Effective Date: 2026-09-14
Business Operator: Kissa Soft
Contact: Contact form
Address: 5F, FPG links Jinnan, 1-11-4 Jinnan, Shibuya-ku, Tokyo, Japan