1. Information we collect
| Category | Details |
|---|---|
| Account | Your login name (never shown to other users); your password, stored only as an irreversible hash that nobody, including the Operator, can read; your recovery code (hash only); when your password was last changed |
| Age and consent | Date of birth (used to confirm you are 18 or over; other users see only your age); records of your acceptance of the Terms, this Policy and the Community Rules (version, time, app version) |
| Profile | Public username, display name, bio, photos, gender (optional; you decide whether it is shown), languages, interests, relationship goals, the categories you chose, your Free Tonight setting |
| Location | Your current position from your phone's GPS, rounded to about 550 m before it is stored (only the latest one is kept), or the prefecture and municipality you choose manually |
| Messages | Message text, photos and voice messages, when they were sent and received, delivery and read status |
| Connections | Favourites, blocks, profile-visit history (Visitors) and the status of message requests |
| Devices and sign-in | Type, name and app version of signed-in devices, sign-in times, last active time, the push-notification token for your device (stored encrypted), notification settings |
| Safety | Reports and the records kept to review them (the reported message and the messages before it, the reported profile's content, and so on), records of actions taken by our staff, and appeals |
| Access logs | IP address, time, the address accessed and device/browser information (user agent). Message text and location coordinates are not written to access logs (they can appear in diagnostic logs of slow database operations). |
| App installation | A random ID the app creates for each installation (not a device or advertising ID), OS and version, device model, app version, language, first-open and last-used times, the account last signed in on it, and an uninstall time inferred from push responses (collected even when not signed in) |
| Optional measurement (Android) | The ad network and campaign name if you installed the app through an ad campaign, only if you choose to share it in Settings (off by default; switching it off deletes it immediately) |
| Support requests | What you send through in-app support (category and messages) and our replies |
We do not collect e-mail addresses or phone numbers to create accounts, your contacts, a history of your locations, advertising identifiers, or credit-card or other payment details.
2. How we use information
- To provide the Service: managing accounts and sign-in, showing profiles, searching by distance, region and category, delivering messages and sending notifications
- To confirm that users are 18 or over and to keep people under 18 off the Service
- To prevent fraud and abuse, handle reports, act on breaches of the Terms and Community Rules, and keep users safe
- To answer support requests, account-deletion requests and requests about personal information
- To investigate faults, keep the Service secure, and maintain and improve it (including statistics that do not identify anyone)
- To comply with the law
We never use the content of your messages or your location for advertising or marketing.
3. What other users can see
Your public username, display name, age, photos, bio, interests, languages, relationship goals, chosen categories, prefecture and municipality, gender (if you chose to show it) and, while it is set, Free Tonight are shown to other users. Depending on your settings, the following may also be shown:
- An approximate distance (such as “within 5 km”), only if both you and the other person allow it
- An approximate last-active time (such as “today” or “this week”), and your appearance in Discover > Recent Login together with when you were last active, to the minute (such as “Last active 25 minutes ago”), only if “Show when I was last active” is on
- Profile visits: if you have “Record visits to my profile” on and “Browse invisibly” off, the owner of a profile you view can see your visit (their settings do not change this)
- Read receipts and the typing indicator, if you turned them on
Your date of birth, exact location, login name and device details are never shown to other users. You can change these settings at any time in the app under Settings > Privacy.
4. Service providers
We entrust the handling of personal data to the following providers, only as far as needed to run the Service, and require them by contract to handle it appropriately.
| Provider | What they do | Where data is handled |
|---|---|---|
| Google LLC (Google Cloud) | Servers, database and backups | Japan (Tokyo region) |
| Google LLC (Google Cloud) | Storage of server logs | May include countries outside Japan |
| Google LLC (Firebase, Google Play) | Push notifications (Firebase Cloud Messaging); checking that requests come from the genuine app (Firebase App Check, Play Integrity) | May include countries outside Japan |
| Apple Inc. | Push notifications to iPhones; app integrity checks (App Attest, DeviceCheck) | May include countries outside Japan |
| Cloudflare, Inc. (Cloudflare R2) | Storage and delivery of profile photos, photos and voice messages and other files | May include countries outside Japan |
| Google LLC (Firebase Hosting) | Delivery of this website | May include countries outside Japan |
Downloading the app and the features of your phone's operating system are subject to Apple's and Google's own privacy policies.
5. Transfers to providers outside Japan
Google LLC, Apple Inc. and Cloudflare, Inc. are companies in the United States, and personal data may be handled on servers outside Japan. For information about the personal-information protection system of the United States, see the information published by Japan's Personal Information Protection Commission.
We take necessary and appropriate measures to ensure these providers continuously implement measures equivalent to those required by Japanese law, and will tell you about those measures on request.
6. Staff access to private messages
Messages and attachments (photos and voice messages) are not end-to-end encrypted; they are stored on our servers so they can be delivered. Authorised staff may view them only when needed to handle a report or a safety or legal matter (for example, when a message, conversation or user has been reported, or to respond to a lawful request).
Only designated staff using two-factor authentication can view them, through a read-only screen (they cannot send or change messages), and every view is recorded (viewing a conversation or an evidence file also requires a reason). We never read private messages for advertising or analytics.
When something is reported, the reported message and up to 5 messages before it, or the reported profile's content (display name, bio and photos), are kept for review. For reports about child safety or someone's safety (someone who may be under 18, child sexual exploitation and similar), copies of the reported user's original photo and audio files (the reported file, files in the saved messages, and their profile photos) are also kept, in restricted storage where every access is logged (see the Child Safety Standards).
7. Disclosure to third parties
We do not provide personal data to third parties without your consent, except:
- where required by law (including lawful requests from courts or investigating authorities);
- where necessary to protect someone's life, body or property and it is difficult to obtain your consent; or
- where we entrust handling to the providers in section 4, as far as needed for the purposes above.
8. How long we keep information
| Information | Kept for |
|---|---|
| Location | Only the latest value (overwritten on update; choosing a prefecture and municipality manually under Settings > Location deletes the GPS position) |
| Profile-visit history | 90 days |
| Free Tonight setting | 7 days after it ends |
| Push-notification delivery records | 30 days |
| Signed-in device records | 30 days after the session ends (for example, after you log out) |
| Server access logs | About 30 days |
| Support requests | Deleted 180 days after the request is closed (and with your account if you delete it) |
| Profile, photos, messages you sent and similar | Until your account is deleted |
| Reports, staff action records and audit records | Currently kept without a fixed period, for user safety and legal compliance |
| Copies of photos and audio kept for child-safety and similar reports | Up to one year after the report is closed (while a legal hold lasts, until it is released) |
| App installation records | 400 days after uninstall or last use (after account deletion, unlinked from the account and kept for the same period) |
| Backups | Encrypted, for up to 100 days |
9. Deleting your account
You can request deletion in the app (Settings > Delete account). If you can't do this yourself, see the Request Account Deletion page. During the 7-day grace period you can cancel by logging in and choosing “Cancel deletion”. After it ends, your profile, photos and voice messages, location, favourites, blocks and visits, the messages you sent, notification settings and sign-in details are deleted.
However, reports and the records kept to review them (including the public username, display name, bio and message excerpts captured at the time), staff action records, audit records and records required by law are kept after deletion together with your account's internal ID. App installation records are kept unlinked from the account. Deleted data also remains in encrypted backups until they expire (up to 100 days); restoring a backup never brings a deleted account back.
While a reported case is under a legal hold for legal follow-up, deletion of the reported account is paused.
10. Security measures
- Encrypted connections (HTTPS/TLS)
- Passwords and recovery codes stored only as irreversible hashes; notification tokens and similar values encrypted; encrypted backups
- The database accepts connections only from the application and cannot be reached from the internet
- Staff access controlled by role and two-factor authentication, with every action logged
- Understanding the external environment: where providers outside Japan are used (section 5), we take measures based on the laws of those countries
Messages are not end-to-end encrypted. No online service can be guaranteed to be completely secure, so please keep your password and recovery code safe.
11. Your rights
You may ask us to notify you of the purposes of use; to disclose the personal data we hold about you (including records of provision to third parties); to correct, add to or delete it; to stop using or erase it; or to stop providing it to third parties.
- You can download your data in the app: Settings > Privacy > Download my data (up to 3 times a day).
- For other requests, contact support in the app (Settings > Help and safety tips > Contact support).
- Because we do not hold your e-mail address or phone number, we verify your identity by asking you to sign in to the app or by checking information only you would know. If we cannot verify your identity, we may be unable to act on the request.
- There is no fee.
12. This website
This website is delivered by Google LLC's Firebase Hosting, which processes visitors' IP addresses and similar data to serve it. The website uses no cookies, analytics tools or advertising tags.
This website has no input forms. Support requests and account-deletion requests are accepted through support in the app (Settings > Help and safety tips > Contact support).
13. Advertising and paid features
The Service currently shows no advertising and has no paid features or in-app purchases. If we introduce either, we will update this Policy beforehand and ask for your consent where required.
14. Information sent to external services
To deliver notifications and prevent abuse, the app sends the following information to external providers.
| Recipient | Information sent | Purpose |
|---|---|---|
| Google LLC (Firebase Cloud Messaging) | Push-notification token, app identifier, notification content (never message text) | Delivering push notifications; checking whether the app was uninstalled (an invisible notification, at most once a day) |
| Google LLC (Firebase App Check, Play Integrity) / Apple Inc. (App Attest, DeviceCheck) | Information used to verify that the app and device are genuine | Preventing use by modified apps or automated tools |
15. People under 18
The Service is only for people aged 18 and over. If we learn that someone under 18 is using it, we suspend the account. See our Child Safety Standards.
16. Changes to this Policy
We may change this Policy when laws or the Service change. We will announce important changes in the app or on this website and ask for your consent again where required.
17. Operator and contact
Business handling personal information: [To be announced]
Address: [To be announced]
Representative: [To be announced]
Contact: support in the app (Settings > Help and safety tips > Contact support)
18. Language
This English version is provided for convenience. If it differs from the Japanese version, the Japanese version prevails.
