Privacy Policy
Contents
This page is an English translation of the Japanese page. The Japanese page is the original. If the two differ, the Japanese page takes precedence.
This is the policy on the information that maruapp (the “Business Operator”) handles in “KoeSapo” (the “App”) and on this site (the “Site”).
Business Operator
| Item | Details |
|---|---|
| Business Operator’s name | maruapp |
| Contact | info@koesapo.app |
| Address, full name, and telephone number | The Business Operator will notify you by email, without delay after receiving your request (as a guide, within one week). |
Information collected
Information the Business Operator does not collect
The Business Operator does not collect the voices and text of talks handled in the App. However, the following two cases are exceptions. In some cases the Business Operator receives the information and in others it does not, and each case is described in its own section.
- When you use online listening
- When you send information in an inquiry
The App does not include any external components for advertising. It does not use advertising identifiers either. It includes a component for managing subscriptions (the “billing platform”) and a component for measuring usage (the “measurement platform”). The information sent and how to stop it are described in the sections “Purchase and subscription information” and “Usage measurement.” The App does not send the voices or text of talks to these two components.
Information stored on your device
The App stores your talk history, your Phrasebook (categories, subcategories, and phrases), and your display and voice settings on your device. Your talk history and Phrasebook are saved inside your device. The App does not send them outside your device. If you delete them in the App, they are removed from your device (except those remaining in backups).
In addition, the App stores the following information on your device.
- Two values created from the result of the age check: a true/false value for whether the device is age-restricted, and the identifier of a change that is waiting for parental consent (only while waiting). The age range itself is not kept.
- The value of your “Share usage info” choice
- The anonymous identification number created by the billing platform component, and your subscription entitlement
- The identifier for each installation of the App (the app instance ID) created by the measurement platform component, and the value of the switch for whether information is collected
The information described in this section, including your talk history and Phrasebook, may be included in backups of your device (an OS feature).
Microphone and speech recognition
The App uses the microphone and speech recognition to turn the voice of the person you are talking with into text. iOS asks for your permission the first time you launch the App. In Settings, you can switch between Offline and Online with “Speech Recognition”. The default setting is Online.
The language for listening and reading aloud can be chosen in Settings from the languages your device supports.
- Offline: The voice is turned into text only inside your device.
- Online: The voice is sent over the network to Apple’s speech recognition service and turned into text. The Business Operator receives neither the voice that is sent nor the text. For how Apple handles it, please see the explanation under “Privacy & Security → Speech Recognition” in the iPhone “Settings” app.
Purchase and subscription information
To manage the App’s subscription “KoeSapo Plus,” the App uses the billing platform of RevenueCat, Inc. (United States). Payment, billing, refunds, and subscription management are handled by Apple.
The information sent to RevenueCat is as follows.
- Purchase records (Apple’s proof of purchase)
- An anonymous identification number (a number the component creates on your device; it is not a user ID assigned by the Business Operator)
- The time you last used the App
- Attached to every communication: the component version, the OS version, the device model, the App version, the language, the App Store country, and a device-specific identifier (IDFV)
The following information is not sent. It consists of user IDs assigned by the Business Operator, attributes, attribution information, diagnostic information, and advertising attribution tokens. The route by which attribution integrations automatically collect device identifiers has been turned off. The voices and text of talks are not sent either.
RevenueCat stores this information in AWS data centers in the United States.
Purchase records are kept for each anonymous identification number. The Business Operator can read these records on the management screen. The Business Operator operates in a way that does not match these records against information that can identify you, such as the name and email address you gave in an inquiry.
The result of the age check is not passed to RevenueCat. The App does not stop communicating with RevenueCat even on an age-restricted device.
Usage measurement
What is sent is events about how the App is used. The content of talks is not included. If you turn off “Share usage info” in Settings, events are no longer sent.
To understand how the App is used, the App uses Google Analytics for Firebase from Google (a company in the United States). The App does not include components that use advertising identifiers.
Information is sent only when all three of the following apply.
- You have finished the introduction screens shown when you first open the App
- “Share usage info” in Settings is on
- The device is not age-restricted
Regardless of the App Store country or region, you choose on the introduction screens whether to turn “Share usage info” on. The default setting is off. You can change it later with “Share usage info” in Settings. On age-restricted devices, the choice is not shown on the introduction screens either, and Settings shows “Not sent from this device”.
The events sent are the following five types.
- Had a talk in which listening worked
- Finished a first talk
- Displayed the subscription screen (the type of location where it was displayed is attached)
- Made a purchase (the type, monthly or yearly, is attached)
- Restored purchases
Each of them is only a predetermined type and carries no text values. The voices and text of talks are not sent. The user ID and attributes assigned by the Business Operator are not passed. The App does not ask for tracking permission.
In addition, the measurement platform automatically counts events such as the first launch, the start of a session, the length of use, updates of the App and the OS, and exceptions. While “Share usage info” is off, these are not sent either.
The measurement platform counts the number of users by the identifier for each installation of the App (the app instance ID). Collection of the device-specific identifier (IDFV) has been turned off. The default for ad personalization has also been turned off. Automatic screen measurement has also been turned off.
The App does not collect location information. The measurement platform estimates an approximate location, such as the city or the country or region, from the IP address of the communication. According to Google’s explanation, IP addresses are neither recorded nor stored.
Measurement records are kept for each installation identifier. The Business Operator operates in a way that does not match these records against information that can identify you, such as your name or email address.
The retention period is 14 months, and the setting that extends the period as you keep using the App is on. The 14-month retention applies to events and per-user data. It does not apply to the standard aggregate tables, which are kept separately.
The four data-sharing settings, Google signals, ad personalization, and integrations with services such as advertising are turned off.
Google may process information in any country where Google or the parties that Google entrusts have facilities.
Age check
The App may receive age information from Apple’s age check mechanism (an OS feature).
The information the App receives is the age range that the OS returns (the lower and upper ages). Your age is declared to Apple by you or your parent or guardian, and is handled by the OS. The age range is requested on devices where the OS has answered that an age check is required (iOS 26.4 or later), and, among devices where the OS gives no answer, on devices whose App Store country is the United States or unknown. The boundaries are ages 13, 16, and 18.
The App leaves the device unrestricted only when the lower bound of the age range is 18 or higher. The App restricts the device in these cases: the person is under 18, sharing of the age range was declined, or the age range could not be obtained. On a restricted device, if the OS answers that parental consent is required, the App receives only whether the OS’s consent screen finished normally. The App does not receive the content of the parent’s or guardian’s answer.
The values created from the age range are used only for the following purposes.
- Deciding whether to withhold analytics information
- Opening or closing subscription sign-up (while waiting for parental consent, a notice is shown instead of the subscription screen)
- Deciding, on the introduction screens and in Settings, whether to show the “Share usage info” choice
The age range itself is not kept. Inside your device, it is converted into a true/false value for “whether to restrict,” and then discarded. What is kept on your device is only two things: the true/false value for whether to restrict, and the identifier of a change that is waiting for parental consent (only while waiting).
The result of the age check is not passed to the measurement platform or the billing platform, and is not sent to the Business Operator either. Communication in Apple’s age check mechanism is carried out by the OS and is not visible to the App.
If a parent or guardian withdraws consent, Apple stops the App from launching (according to Apple’s guidance). The Business Operator does not receive notice of the withdrawal on a server.
Inquiries
The Business Operator receives the name, email address, and message that you send to the support email. It uses them only for replying and handling your inquiry, keeps them for one year after the Business Operator finishes handling your inquiry, and then deletes them.
In order to reply, the Business Operator may put the content of your inquiry into a translation service. In that case, your name and email address are not entered.
Browsing the Site
When you open “Report a bug or request a feature” under “About this app” in the “Settings” tab of the App, the Site is displayed inside the App. Connection records remain in the mechanism that delivers the Site. The Business Operator has not installed any access analysis tools.
Purposes of using information
The Business Operator uses the information it collects for the following purposes.
- To respond to your inquiries
- To check the status of your subscription and provide paid features
- To tally usage. What is tallied is the number of subscriptions, the rate at which each subscription screen led to a purchase, the number of people who had a talk in which listening worked (per week), and the number of people who finished a first talk. All of these are limited to events that do not include the content of talks.
- To use the values created from the result of the age check for deciding whether to withhold analytics information, for opening or closing subscription sign-up, and for deciding whether to show the “Share usage info” choice. They are not used for any other purpose.
Measures taken for security control
Information received in inquiries is stored in an email system that only the Business Operator can read, and is deleted after the retention period has passed. Because the Business Operator does not collect the voices and text of talks in the App, they are not stored on the Business Operator’s side.
Only the content excluding your name and email address is entered into the translation service (see the section “Inquiries”).
Information on purchases and subscriptions and information from usage measurement are placed in the systems of the entrusted parties (RevenueCat, Inc. and Google, both companies in the United States). Of the settings for sending or collecting information, the Business Operator has turned off those described in the sections “Purchase and subscription information” and “Usage measurement.”
Security control measures are set out in the contracts with the entrusted parties. With RevenueCat, a Data Processing Addendum (DPA) forms part of the contract, and within 30 days after the contract ends, the information is destroyed or returned. With Google, security control measures (an addendum) are set out in the data processing terms, and within 180 days after the contract ends, the information is deleted.
Provision to third parties
Of the information the Business Operator collects from you, for information that constitutes personal data, the Business Operator does not provide it to third parties (including persons located outside Japan) without first obtaining your consent. However, the following cases are excepted.
- When the handling of personal data is entrusted to an outside party
- When the Business Operator or the App is acquired
- When personal data is jointly used with business partners (if there is a specific joint use, its details will be announced separately.)
- Any other case in which provision to third parties is lawfully permitted by law
In the App, for subscription management and usage measurement, the handling of information is entrusted to companies in the United States (RevenueCat, Inc. and Google). The names of the entrusted parties and the information sent are as described in the sections “Purchase and subscription information” and “Usage measurement.”
Requests for disclosure, correction, suspension of use, and deletion
If you wish to have your information disclosed, corrected, suspended from use, or deleted, please contact the following email address. The Business Operator will respond after confirming that you are the person concerned.
The contact point for complaints and consultations is also the email address above.
Information that the Business Operator can recognize as yours, such as inquiry emails, will be deleted upon your request.
Purchase and subscription information is kept for each anonymous identification number, and usage measurement information is kept for each installation identifier. Because the Business Operator operates in a way that does not match these records against your name or email address, it cannot tell which records are yours even if it receives your request. When you make a request, you do not need to send an identification number or a purchase receipt.
Usage measurement is no longer sent once you turn off “Share usage info” in Settings. Events and per-user data that have already been sent disappear after the retention period of 14 months (aggregate tables are kept separately).
For purchase and subscription information, how it is handled after the contract with RevenueCat ends is as described in the section “Measures taken for security control.”
Changes to the Privacy Policy
The Business Operator will change the content of this Privacy Policy as necessary. In that case, the effective date and content of the revised Privacy Policy will be announced on the Site.
Enactment and revision
- Enacted: May 21, 2022
- Revised: October 26, 2026
- Revised: October 31, 2026
Key points of the previous revision (October 26, 2026): Descriptions of purchase and subscription information, usage measurement, age check, and the language for listening and reading aloud were added; the descriptions of the storage of talk history and Phrasebook, inquiries, and requests for disclosure, correction, suspension of use, and deletion were revised; the choice of whether to send usage info was changed so that it is not sent under the default setting; and the description of iCloud sync was removed.
Key points of this revision: The description of the language for listening and reading aloud was revised to match how the language is actually chosen (in Settings, from the languages your device supports).