Privacy Policy

1. Information we collect and why

1. Account information: We use the email address, account identifiers and related information provided when you register or sign in with a Google account, an Apple Account, or an email address and password to verify your identity, manage access and contact you. If you sign in with Apple, we may receive the name Apple provides on first sign-in, and if you choose Hide My Email, we receive the relay address Apple issues. Passwords are managed by the authentication platform we use; we never handle them in plain text.
2. Records and conversations: We use what you enter, such as conversations, meals, weight, body fat percentage, exercise (including strength-training sets), sleep, condition, fitness tests, nutrition values (calories, protein, fat and carbohydrate), goals and plans, profile, menus, pantry items, shopping lists, schedules and settings such as display options and the start of your week, to store, display and correct your records, answer your questions with AI and organize your records. We also use names of foods or products that the AI could not identify to improve our food database (Section 3.3).
3. Information created by AI: Responses, organized records, nutrition estimates (saved marked as estimated), and suggested plans and outlooks that AI creates from what you enter are also saved as part of your records.
4. Purchase information: If you buy the paid plan, we receive from Google Play or the App Store the purchase status, product, subscription period, whether it auto-renews, and transaction or order identifiers, and use them to confirm your purchase, grant credits and prevent fraud. To link a purchase to your account, we give the store an identifier we generate. We do not receive card numbers or other payment details.
5. AI credit usage: For each grant (monthly free credits, gifts, the paid plan and so on), we record the amount granted, its expiry, and the credits used and remaining, together with the gifts you receive and the weekly reviews used to judge them, to manage and display your credits.
6. Technical information: We handle times of use, request details, IP addresses, error information and similar data as needed to provide the Service, prevent unauthorized use and resolve problems.
7. Inquiry information: We use the email address, name and details you provide when contacting us to respond and communicate with you.
8. Reports: If you report an AI response, we use the response you selected, your reason and the information needed to receive the report to investigate problematic output and improve safety.

We do not use this information for advertising and we do not sell it.

2. Health information

1. Your records and conversations include health information such as weight, meals and how you feel. Depending on where you live, this may be specially protected, for example as sensitive personal information, special category data or consumer health data.
2. We use health information only to provide the logging and advice you ask for and to operate the Service safely. We do not build advertising profiles from it, sell it, or provide it for employment or insurance decisions.
3. Consent for health information: We collect, store and use health information (including AI estimates) based on your explicit consent in the app to the handling of health information. We ask for this consent separately from the consent to send data to AI described in Section 3.
4. Withdrawing consent: You can withdraw consent for health information at any time under Privacy and AI in the app or by contacting contact@hyucode.com. After withdrawal, we no longer record new health information or use AI to advise on or process it. Information already stored is kept so that you can view, delete and export it, until you delete it or your account. You can erase it by deleting records or your account.
5. The Service is not a medical service, and we do not use health information for diagnosis or treatment.
6. Please enter only what you need for your own use, and do not enter information about other people.

3. Use of AI services

1. What we send: To generate responses and organize records, we send the conversations, records, goals, profile and other information needed for your request to the OpenAI API. This includes health information.
2. Food search: To estimate nutrition values, words such as food names in your conversation are processed by the OpenAI API to find matching foods in food composition data.
3. Web search for our food database: Names of foods or products that the AI could not identify from your messages may be looked up using OpenAI's web search feature, in a separate process from answering you, to improve our food database. Only the food or product name is sent; your account information (such as your email address or account identifiers) and the rest of your conversation are not. The results may be stored as shared food data that is not linked to you and used to estimate nutrition values.
4. Consent and withdrawal: Sending data to AI is based on your explicit consent in the app. You can withdraw consent at any time under Privacy and AI in the app or by contacting contact@hyucode.com. After withdrawal, we stop new sending to AI. Withdrawal does not retrieve data already sent or automatically delete saved conversations or records, and you can still view, correct and delete records, export your data and delete your account. You do not need to accept revised terms to withdraw consent.
5. Model training: Under OpenAI's standard terms, data sent through the OpenAI API is not used to train its models. We do not use your information for any other training purpose. If we ever wish to, we will tell you the purpose and conditions in advance and obtain any required consent.
6. Retention by the provider: OpenAI generally retains data it receives for up to 30 days to monitor for abuse (longer where required by law or for safety). Processing is not limited to Japan. See OpenAI's explanation of how it manages API data for details.

4. Service providers and processing outside your country

We entrust the handling of information to the following providers to the extent needed to provide the Service, and our contracts with them limit their use of and access to it accordingly.

• Supabase: Authentication; storage of records and conversations. Main processing location: Japan (Tokyo); some processing may occur elsewhere.
• Google Cloud / Firebase: Running and delivering the API and website; backups; app usage, crash and performance analytics (Section 6). Main processing location: Japan (Tokyo) and elsewhere.
• OpenAI: AI responses, organizing records, food search, web search for our food database (only food or product names are sent). Main processing location: United States and elsewhere.
• Amazon Web Services (Amazon SES): Sending sign-up confirmation and password reset emails. Main processing location: Japan (Tokyo).
• Sentry: Optional diagnostics (Section 6). Main processing location: United States.

Hosting our database in Tokyo does not mean all processing takes place in Japan. Providers outside Japan, such as in the United States, are bound by data processing agreements with us to handle personal information to the standard required by Japan's Act on the Protection of Personal Information, so that they maintain a system meeting that Act's standards. We periodically check how these obligations are carried out. On request, we will provide information about the measures we have taken.

5. Disclosure to third parties; app stores and sign-in providers

1. We do not provide personal data to third parties except where we entrust handling as needed to provide the Service, where you consent, or where permitted or required by law.
2. Google (Google sign-in, Google Play) and Apple (Sign in with Apple, the App Store) handle sign-in, purchases and payments independently under their own terms and privacy policies. They manage your payment details and purchase history.

6. Usage and quality analytics and optional diagnostics

1. You can choose to send diagnostic information to the external service Sentry to help us investigate and fix app errors. Reporting is off by default. If you turn it on in the app settings, your consent is remembered for the same account on this device and continues after the next launch. Sending stops when you sign out or switch accounts, and turning the setting off or deleting your account removes the record of your consent. You can stop future reports in settings, but reports already sent cannot be recalled. We do not use them for advertising or to track you. Separately, the Usage and quality analytics setting lets you choose whether to send data to Firebase Analytics, Crashlytics and Performance together. It is on by default and you can turn it off at any time. This setting is saved for the device rather than an account and continues after sign-out or switching accounts. Turning it off or deleting your account stops future reports. Data already sent cannot be recalled.
2. Reports are limited to information such as a general error category, app version, production or development environment and where in the app's code the error occurred. We filter out chat and health record content, account identifiers, detailed error messages, device identifiers, interaction history and attachments. Sentry stores this data in the United States. Your IP address is transmitted during sending, but we configure Sentry to remove IP addresses from stored events. This does not guarantee complete anonymity. Firebase (Google) receives fixed screen names, operation outcomes and processing times, as well as SDK-collected app version, device, OS and network information, app instance or installation identifiers and native crash information. Your IP address is also transmitted with requests and used to estimate geographic region. Store purchase and subscription events, including product IDs and prices, may also be measured automatically. Our app does not attach chat text, health records, account IDs or email addresses. We remove Dart error messages and arbitrary file paths and send only allowlisted source locations. Native crash content is handled by the SDK. Automatic monitoring of HTTP URLs is disabled. Advertising ID collection, advertising use and personalization are disabled. Firebase measurement does not guarantee anonymity. Google may process data outside your country, including in the United States.
3. Diagnostic events are kept in ordinary event storage for 90 days if received while we are on a paid Sentry plan, or 30 days on the free plan, depending on our plan when Sentry received them. We do not guarantee simultaneous deletion from the provider's backups or other storage. Firebase data is retained according to each service and the project settings. Turning the setting off resets local Analytics data and requests deletion of unsent Crashlytics reports. We cannot guarantee simultaneous deletion of data already sent, SDK requests in progress or provider backups.

7. Security

We protect information through encrypted communications, authentication, per-user data separation, restricted access permissions and separate management of secrets. The Service is designed not to write conversation or record content or credentials to routine operational logs. When our staff handle information for maintenance or support, they do so under multi-factor authentication and restricted permissions, only as far as the purpose requires.

8. Retention, deletion and backups

1. We keep conversations and records while needed to provide the Service or until you delete your account or ask us to delete them. Signing out or uninstalling the app does not delete stored data.
2. Correcting or deleting a record updates the record, but past conversations that mention it remain unchanged.
3. Deleting your account: You can request deletion from the account screen in the app after signing in again with your password, Google or Apple. If you cannot sign in, contact contact@hyucode.com and we will verify your identity before acting. Deletion covers your authentication account, conversations, records, profile, goals and plans, settings, consent information, and purchase and credit records (including gifts). Failed processing is retried automatically. If you sign in with Apple, we revoke the link (tokens) with Apple when you delete your account.
4. Subscriptions: Deleting your account does not cancel a Google Play or App Store subscription. Cancel it separately in the store.
5. Backups and deletion records: Standard backups are retained for 30 days, and minimal deletion records (such as user IDs and request IDs) used to prevent deleted data from returning after a restore are retained for 60 days; each is deleted in turn after its period ends. If we restore from a backup, we re-apply deletion requests received before the restore before resuming service.
6. Logs: Server request logs, including IP addresses, are kept for 30 days by default on our hosting platform. External AI and diagnostic data have their own retention periods, so deletion does not happen simultaneously across all storage.

9. Your rights and how to exercise them

1. In the app, you can review, correct and delete records, withdraw consent for health information and for sending data to AI, stop optional diagnostics and delete your account.
2. You can export your stored data from the Data export page on our website by signing in with the same account you use in the app (Google or email address). If you sign in with Apple or prefer another method, contact contact@hyucode.com.
3. For other requests, such as deleting all data while keeping your account, notification of purposes of use, access, correction, suspension of use or stopping disclosure to third parties, contact contact@hyucode.com. We will verify your identity and respond in accordance with applicable law, and explain our reasons if we cannot fulfil a request. We will never ask for health details, passwords or authentication codes to verify your identity.
4. Depending on where you live, you may have further rights under local law, such as to object to processing, to data portability, to withdraw consent or to appeal our decision. If you are not satisfied with our response, you can ask us to reconsider, and you can also complain to the data protection authority where you live.

10. Cookies on our website

Our website does not use advertising trackers or analytics tools added by us. Our hosting platform may process access information to deliver and secure the site. The Data export page uses only the cookies needed to keep you signed in. Our website has no form for entering health information.

11. People under 18

The Service is intended for people aged 18 or older, and we do not knowingly collect information from anyone under 18. If we learn that such information has been registered, we will delete it.

12. Changes and contact

If we change how we handle information, we will let you know by updating this page or by other means, and obtain consent where required by law. For significant changes, we may ask you to review this policy again in the app.

This Policy is written in Japanese. If the Japanese version and a version in another language differ or conflict, the Japanese version prevails.