Privacy Policy

Established September 11, 2026 / Revised September 16, 2026

Hiroaki Nagahashi ("the Operator") handles information about Users of the diary app "Daymoir" ("the Service") as described below. A diary is a precious record. We collect only what we need, and use it solely to provide the Service.

1. Information We Collect

Information from Sign in with Apple: the per-user identifier Apple issues, and an email address only if you choose to share one (which may be an Apple relay address)
Information you provide: your conversations with the AI and diary text, attached photos, your display name in shared journals, and the text of any inquiry or feedback you send us
Information the Service generates: diary entries and titles the AI has organized, recaps, photo descriptions, and numerical data used to search your diary
Information for notifications: the push notification token for your device
Purchase information: the status of your paid plan (plan and expiration) and an identifier the Service issues to reconcile it. Apple processes payment; we do not receive credit card or other payment details
Usage information: which screens you opened; whether you signed in, created a diary entry, asked the AI a question, or created or joined a shared journal; a per-install identifier; your device model and OS; the app version; and your approximate region. This does not include diary text, photos, or titles
Crash and error records: technical records of unexpected app termination or failed server processing (where it occurred, device model and OS, app version, and the user identifier issued by the Service). This does not include diary text, photos, or titles

Reminder times, theme settings, and the launch-lock setting are stored only on your device; the Operator never receives them. Face ID / Touch ID is used only via the result the device reports — the Operator never receives biometric data itself. The Service shows no ads and does not collect an advertising identifier (IDFA).

2. Purposes of Use

To provide the Service (account management, storing and displaying diary entries)
For AI-based formatting of diary entries, generating recaps, and searching and answering questions about past entries
To notify shared journal members when a new entry is posted
To respond to inquiries
To prevent unauthorized use and investigate failures
To aggregate how features are used, in order to improve the Service
To provide the paid plan and deliver important announcements

3. AI Processing

AI processing such as formatting diary entries uses Amazon Web Services' Amazon Bedrock, processed within Japan (Tokyo and Osaka regions). We use Anthropic's Claude models and Amazon's Nova and Titan models. Amazon Bedrock does not use inputs or outputs to train models, and does not share them with model providers. The Operator likewise never uses Diary Data to train AI models.

4. Disclosure to Third Parties

The Operator does not disclose personal information to third parties without the User's consent, except in the cases below. We never disclose or sell information for advertising purposes.

Where required by law
Where necessary to protect a person's life, body, or property, and obtaining consent is difficult
Where outsourcing part of the Service's operations, as described in Section 5 below, to the extent necessary

Content and display names posted to a shared journal are shown to that journal's members as a direct result of the User's own action.

5. Outsourcing

The Service outsources part of its operations to the following providers.

Amazon Web Services, Inc.: servers, storage of data and photos, and AI processing. Data is stored in regions within Japan.
650 Industries, Inc. (Expo, USA): delivery of push notifications. We send the device token and the notification text. Shared-journal notifications include the poster's display name and the entry's title or opening text; inquiry-reply notifications include the opening text of the reply.
Apple Inc.: Sign in with Apple authentication, push notification delivery, and App Store payment. Apple processes payment; the Operator does not receive credit card or other payment details.
Google LLC (USA): usage analytics (Google Analytics for Firebase) and crash records (Firebase Crashlytics). We send only the usage information and crash records described in Section 1 above — never diary content. We also use Google Analytics to measure visits to the Service's marketing site (https://daymoir.app).
Functional Software, Inc. (Sentry, USA): records of failed server processing. We send only the failed process, where it occurred, and the user identifier issued by the Service — never diary content.
RevenueCat, Inc. (USA): management of paid-plan purchase status. We send only the billing identifier the Service issues and the App Store purchase status.

On the marketing site, Google Analytics sends Google LLC an identifier stored in your browser's cookies, along with the pages you viewed, your approximate region, and your device type. It never sends personally identifying information such as your name or email address, and it is never linked to diary content. You can stop this collection by disabling cookies in your browser or using Google's opt-out add-on.

Regarding the transfer of notification, usage, crash/error, and purchase-status information to providers in the United States, you can review the U.S. data protection framework via the Personal Information Protection Commission's information on data protection systems in foreign countries (Japanese). We contract with all outsourced providers under terms requiring appropriate handling of personal information.

6. Security

All communication between the app and our servers is encrypted with TLS.
Photos are stored in a non-public location and are retrieved only via a time-limited URL when you view them.
Only the Operator can access the servers and data.
The app has a launch-time lock that verifies you via Face ID / Touch ID.

7. Retention and Deletion

Diary Data is retained while your account exists. When you withdraw or request deletion, we delete it without delay. Any copies remaining in disaster-recovery backups are removed within 7 days at most after deletion.

However, the text of inquiries and feedback you send us, and our replies, are retained even after withdrawal, as a record used to inform future improvements. In that case we remove the link to your account, but the text itself remains, so if you included your name or other identifying details in the text, that detail remains as well.

Once you withdraw, we can no longer confirm which inquiries were yours. If you would like your inquiry records deleted, please contact support@daymoir.app before withdrawing.

8. Requests for Disclosure, etc.

Users may request disclosure, correction, addition, deletion, suspension of use, or suspension of third-party disclosure of their personal information. Please contact support@daymoir.app. After verifying your identity, we will respond without delay.

9. Users Under 18

Users under the age of 18 must obtain a parent or guardian's consent before using the Service.

10. Revisions

The Operator may revise this Policy. If there is a significant change, we will announce it within the Service or on this page.

11. Operator and Contact

Operator: Hiroaki Nagahashi
Address: Disclosed without delay upon request
Contact: support@daymoir.app