Privacy Policy

Haru Studio ("Company") values your privacy. This policy applies to the Nanal app ("Service").

1. Information We Collect

Required

• Account info: email address (via social login), social login identifier (Google, Apple, LINE)
• Content: photos you upload, category and timelapse records, notes

Optional

• Profile: nickname
• Preferences: language, display settings

Automatically Collected

• Device info: device ID, OS version, model, language
• Log data: access timestamps, usage history
• Ad identifiers: advertising ID (AAID etc.)

2. How We Use Your Information

1. Service delivery: user identification, photo/category/timelapse management, cross-device sync
2. Customer support: inquiry responses, announcements
3. Advertising: in-app ad delivery and measurement
4. Legal compliance: fraud prevention

3. Photos and Record Data

1. Photos you upload are stored in private storage accessible only by you.
2. Category and timelapse records are used solely for service delivery.
3. You may delete your data at any time. All data is permanently deleted upon account deletion.

4. Data Retention

1. Upon account deletion: immediately deleted (except where required by law)
2. Login records: 3 months (as required by law)
3. User-generated content: retained until deleted or account is closed

5. Third-Party Disclosure

We do not share your personal data with third parties, except with your consent or as required by law.

6. Service Providers

• Supabase, Inc. — database hosting, authentication, photo storage
• Google LLC — social login (Google), advertising (AdMob)
• Apple Inc. — social login (Apple)
• LY Corporation (LINE) — social login (LINE)

7. International Data Transfers

Your data may be stored on overseas cloud servers operated by Supabase, Inc. By using the Service, you consent to this transfer.

8. Your Rights

You may request access, correction, deletion, or restriction of processing of your data at any time via app settings or by email.

9. Contact

10. Policy Changes

We will notify you of changes at least 7 days in advance via the app or website.

11. Rights of EU/EEA Users (GDPR)

If you reside in the European Economic Area (EEA), you have additional rights under the GDPR.

• Legal Basis for Processing: Contract performance for service delivery, legitimate interest for advertising, and legal obligations. Marketing-related processing is based on your consent.
• Right to Data Portability: You have the right to receive your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
• Right to Lodge a Complaint: You may file a complaint with the data protection authority in your country of residence.
• Data Protection Contact: support@myharuapp.com

12. Age Restriction

This service is intended for users aged 14 and older. Children under 14 may not create an account. We do not knowingly collect personal information from children under 14. If we become aware that we have collected personal information from a child under 14, we will promptly delete it.