Privacy Policy

Last Updated: May 11, 2026

1. Scope

This Privacy Policy (this "Policy") sets forth how Yurisys LLC ("we", "us", or "our") handles personal information in the iOS application "Memopad" (the "App").

2. Information We Collect

The App respects User privacy and collects only the minimum information necessary.

2.1 Information You Provide

• Memo title, body, creation timestamp, last-modified timestamp, and other metadata attached to memos
• In-app settings (display order and other user preferences)

The storage location and handling of these are described in §2.2.

2.2 Storage Location

• The data described in §2.1 is stored only on the User's device (local database); it is never transmitted to any servers we operate. We have no means to view or retrieve the content of such data.
• The App does not provide cloud synchronization via iCloud / CloudKit or any other means. Data is stored only on the device in use, and no mechanism is provided to restore data to another device upon device change or device failure (see the "Retention Periods" section).

2.3 User Identifier

• The App stores an anonymous user identifier (UUID) in the device Keychain, used to associate analytics and billing information.
• This identifier is generated at the first launch of the App and is not linked to direct identifiers such as name or email address.
• The identifier is erased upon a device reset (factory restoration) or explicit clearing of the Keychain.

2.4 Billing Information

• In-app purchases and subscriptions are processed through the Apple App Store, with RevenueCat used to manage billing state.
• Items collected: purchase transaction ID, purchase timestamp, product ID, purchase status, anonymous app-user ID (AppUserID), etc.
• We do not collect any credit card information, name, address, or email address.
• For each vendor's handling, see the "Third-Party Provision and Outsourcing" section.

2.5 Automatically Collected Information (Analytics and Diagnostics)

For stable operation and improvement of the App, we collect the following analytics and diagnostics information. Direct identifiers such as name or address are not included in principle; however, third-party SDKs may process anonymous IDs, device information, usage data, diagnostic information, etc.

• OS version, device model, app version, language setting
• Anonymized app usage (screen transitions, feature usage counts, etc.)
• UI settings (appearance mode, etc.)
• Crash logs and error logs
• Approximate region (country/region estimated from IP address)

For details of the services used for collection and processing (Apple App Analytics, Google Firebase) and their providers, see the "Third-Party Provision and Outsourcing" section. Apple App Analytics is provided only when "Share App Analytics" is enabled in iOS "Settings > Privacy & Security > Analytics & Improvements."

2.6 Advertising Information

• The App displays advertisements via Google AdMob to Free-plan Users. Users on the Premium plan are not shown advertisements.
• The App displays the iOS App Tracking Transparency (ATT) dialog and provides the advertising identifier (IDFA) to AdMob only when the User grants tracking permission. When the User denies tracking, the IDFA is not provided and only non-personalized advertisements are displayed.
• For advertising delivery, in addition to the identifiers above, AdMob may have Google LLC process IP address, device information, approximate region, and ad-interaction information. For details, see the "Third-Party Provision and Outsourcing" section.

2.7 Information We Do Not Collect

We do not collect the following information:

• Name, address, phone number, or email address (except in inquiries)
• Contacts, calendar, photo library, camera, GPS, or other device location permissions (provided that, as described in §2.5 and §2.6, analytics and advertising services may estimate approximate country/region from IP address)
• Biometric or health information
• Financial information or authentication credentials (credit card numbers, Apple ID passwords, etc.)

3. Purposes of Use

We use the collected information for the following purposes.

4. Third-Party Provision and Outsourcing

We use the following third-party services and share information with them to the extent necessary. The data collected, retention periods, and security measures of each service follow the relevant providers' privacy policies.

Except as required by law or as necessary to protect life or property, we do not provide personal information to any third party other than those listed above.

5. International Data Transfers

The App is distributed worldwide, and User information may be processed on servers outside Japan (including in the United States) through the third-party service providers listed in the "Third-Party Provision and Outsourcing" section. The primary processing locations and transfer bases of each provider are as follows.

When selecting service providers, we confirm that each provider has appropriate protective measures in place based on international frameworks such as GDPR and APPI and standard contractual clauses.

6. Retention Periods

• User input data (on-device): Retained until the User deletes the data within the App or uninstalls the App. Uninstalling erases device-side data.
• User identifier (UUID in Keychain): Retained until the device is reset or the Keychain is explicitly cleared. Uninstalling the App alone does not erase the identifier from the Keychain.
• Analytics and diagnostics data: Per the retention periods specified by each service provider. See the "Third-Party Provision and Outsourcing" section for detail links.
• Advertising-related information: Per the retention periods specified by Google LLC. See the "Third-Party Provision and Outsourcing" section for details.
• Billing records: Periods specified by tax-related laws such as the Corporation Tax Act and the Electronic Books Maintenance Act (7 years as a general rule)
• Inquiry history: 3 years after the conclusion of correspondence

7. User Rights

Depending on your region of residence, you may exercise the following rights. Please contact us at the inquiry contact.

7.1 All Users (Japan)

• Request for disclosure, correction, suspension of use, or deletion of personal information (Articles 28–35 of Japan's Act on the Protection of Personal Information)
• Note that information stored on our servers is limited. User-input data is stored on the User's own device, and may be deleted at any time using the App's edit/delete functions. Device-side data is also deleted by uninstalling the App.

7.2 Residents of the EU/EEA and the UK (GDPR / UK GDPR)

• Right of access, right to rectification, right to erasure (right to be forgotten), right to restriction of processing, right to data portability, and right to object
• Right to lodge a complaint with a supervisory authority

7.3 California Residents (USA)

• We respond to requests for disclosure, deletion, and other rights regarding collected information under applicable law.
• We do not "Sell" personal information. As described in the "Third-Party Provision and Outsourcing" section, we share certain information with Google LLC (AdMob) for advertising delivery; such processing is conducted within the bounds of applicable law.

7.4 Other Regions

• Rights under local laws such as Brazil (LGPD) and Canada (PIPEDA)

8. Tracking and Choices

• The App delivers advertisements via Google AdMob under the Free plan and displays the iOS App Tracking Transparency (ATT) dialog.
• You may change ATT permission per app at any time in iOS "Settings > Privacy & Security > Tracking." When tracking is denied, the IDFA is not provided to AdMob, and only non-personalized advertisements are displayed.
• You may change Apple App Analytics collection at any time in iOS "Settings > Privacy & Security > Analytics & Improvements."
• The App currently does not provide an in-app feature to individually stop collection of Google Firebase. To stop collection or delete already-transmitted data, please contact the inquiry contact in the "Inquiries" section. Upon request, we will respond promptly.
• The items collected by Google Firebase and AdMob and their retention periods follow Google LLC's policies. For details, refer to the links provided in the "Third-Party Provision and Outsourcing" section.

9. Children's Privacy

1. The App is not intended for use by children under 13 (or under the age specified by the laws of the country of residence if higher), and use by such children is not permitted.
2. We do not intentionally collect personal information from children.
3. If it becomes apparent that we have collected personal information from a child, we will promptly delete such information. Parents or guardians who become aware of such cases are asked to contact us.
4. Parents and guardians are responsible for supervising children's use of the App.

10. Security

1. We take reasonable technical and organizational measures to prevent unauthorized access, loss, tampering, or leakage.
2. Memo content is stored only on the User's device (local database) and is not transmitted to any servers we operate. We have no means to access the content of such data.
3. However, we do not guarantee absolute security with respect to communications over the Internet or any other method.
4. With respect to the third-party services described in the "Third-Party Provision and Outsourcing" section, we select and manage service providers to a reasonable extent. However, events arising from the specifications, outages, or breaches of such providers are also subject to the privacy policies and terms of service of those providers.
5. Users are responsible for managing their own devices and Apple IDs.

11. Changes to This Policy

This Policy may be revised in response to changes in law or feature additions. We will notify Users of material changes through in-app notifications or the App Store description. See the "Revision History" at the end of this Policy.

12. Inquiries

Inquiries regarding this Policy, requests to exercise User rights (the "User Rights" section), and confirmation of business operator information under Article 32, Paragraph 1 of Japan's Act on the Protection of Personal Information are accepted via the contact below. We respond promptly as a general rule (within one month where GDPR applies).

• Email: [email protected]

Revision History

2026-05-11 (Initial Draft)

• Initial draft created