Privacy Policy

1. Information We Collect

1.1 Account Information

You can create an account in the following ways:

• Email authentication: Email address and password
• Anonymous account: Temporary user ID only

1.2 User Content

Content created and saved by users in the App:

• Projects, tasks, and list information
• Journal entries
• Time logs (work time records)
• Wiki pages
• Category and tag information
• Statistics data

1.3 Usage Data

To improve the App's functionality, we may collect the following:

• Device type and operating system version
• App version information
• Error logs and crash reports

2. How We Use Your Information

Collected information is used for the following purposes:

• Account creation, management, and authentication
• Providing and improving the App's services and user experience
• Storing and syncing user data
• Improving App features and fixing bugs
• Maintaining security and preventing unauthorized use
• Complying with legal obligations

2.1 Legal Basis for Processing (GDPR Article 6)

When processing personal data of users in the EU/EEA, the App relies on the following legal bases:

• Performance of a contract (Art. 6(1)(b)): Processing necessary to provide the service, such as storing and syncing account information and user content
• Legitimate interests (Art. 6(1)(f)): Processing necessary for service stability and security, such as collecting error logs and usage data
• Compliance with a legal obligation (Art. 6(1)(c)): Processing of data required to be retained by law

3. Data Storage and Security

The App uses Supabase as its backend service. User data is encrypted and stored on Supabase's secure cloud infrastructure.

3.1 Security Measures

• SSL/TLS encryption for data in transit
• Hashed storage of passwords
• Access control to prevent unauthorized access
• Regular security audits

3.2 Data Storage Location

User data is stored in Supabase's data centers (primarily in the United States or Europe). Supabase complies with GDPR and other international privacy standards.

4. Third-Party Services

The App uses the following third-party services:

4.1 Supabase

Used as the database and authentication service. See the Supabase Privacy Policy for details.

4.2 Stripe

Used for payment processing of paid plans in the web browser version. Payment information such as credit card details is managed by Stripe and is not stored on the App's servers. See the Stripe Privacy Policy for details.

4.3 Apple App Store (In-App Purchase)

Apple's In-App Purchase is used for payment processing of paid plans in the iOS app. See Apple's Privacy Policy for details.

4.4 Google Play (In-App Purchase)

Google Play's In-App Purchase is used for payment processing in the Android app. See Google's Privacy Policy for details.

5. Sharing and Disclosure of Information

The App does not share users' personal information with third parties except in the following cases:

• With the explicit consent of the user
• To comply with legal obligations (court orders, requests from law enforcement, etc.)
• To protect the rights, property, or safety of the App
• Sharing with service providers (such as Supabase) to the extent necessary to provide the service

6. Your Rights

You have the following rights. To exercise these rights, please contact us using the contact information below:

• Right of access (Art. 15): You can request access to your personal data
• Right to rectification (Art. 16): You can request correction of inaccurate personal data
• Right to erasure (Art. 17): You can request deletion of your personal data (also available via the account deletion feature in the App)
• Right to restriction of processing (Art. 18): You can request that we restrict the processing of your personal data in certain circumstances
• Right to data portability (Art. 20): You can request that your personal data be exported in a machine-readable format
• Right to object (Art. 21): You can object to the processing of your personal data based on legitimate interests
• Right to withdraw consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal

Users in the EU/EEA also have the right to lodge a complaint with the supervisory authority in your country (Art. 77). You may contact the supervisory authority before contacting us, but we encourage you to reach out to us first.

7. Data Retention and Deletion

7.1 Retention Period

Your data is retained for as long as your account is active. When you delete your account, all associated data will be deleted.

7.2 Account Deletion

You can delete your account at any time from the Settings screen in the App. The following data will be permanently deleted:

• Profile information
• Projects, tasks, and lists
• Journal entries
• Time logs
• Wiki pages
• Statistics data

Deleted data cannot be restored, so please proceed with care.

7.3 Account and Data Deletion Request (Google Play)

If you cannot delete your account from within the App or need assistance, please request deletion of your account and associated data via:

Email: info@prest-square.jp

Please include the email address of the account you wish to delete.

8. Changes to This Policy

The App may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notifications or email. The date of the last update is shown at the top of this page.

9. Cookies and Similar Technologies

The App may use cookies and similar technologies to maintain authentication sessions and improve the user experience. These are used to keep you logged in and remember your app settings.

10. International Data Transfers

Your data may be transferred to and stored outside your country (in Supabase's US or European data centers). For transfers outside the EU/EEA (e.g., to the United States), Supabase relies on the Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data is handled with appropriate safeguards. See Supabase's Data Processing Addendum (DPA) for details.

10.1 Automated Decision-Making and Profiling

The App does not perform automated decision-making or profiling (GDPR Article 22) that produces legal effects or similarly significant impacts on users.