Oekaki Hiroba

LEGAL

Privacy Policy

An explanation of the information we receive and how we handle it.

This is a reference translation. The Japanese version is the authoritative text.

Keel Lab ("we," "us," or "our") establishes the following Privacy Policy (this "Policy") concerning the handling of user information in the mobile application "Oekaki Hiroba" and its related services (the "Service") provided by us. This Policy is established in order to comply with the Act on the Protection of Personal Information and other related laws, regulations, and guidelines.

1. Information We Collect

In providing the Service, we may collect the following information.

  1. Identification information: the anonymous user ID issued by Firebase Authentication, and identifiers associated with the device or app installation. The Service does not require account registration using a name, email address, or the like.
  2. Profile information: the display name (nickname) and avatar (preset emoji and color) optionally set by the User.
  3. Post and usage information: illustrations, titles, comments, message board (Talk) posts, likes, reports, blocks, posting date and time, time spent drawing, the class (time-limit class) and frame selected, and the like.
  4. Device and technical information: device type, OS, app version, language settings, time zone, push notification token, crash logs (Firebase Crashlytics), and usage analytics data (events such as screen views and feature usage via Firebase Analytics).
  5. Advertising information: advertising identifiers (IDFA/AAID), and information concerning ad impressions, clicks, conversions, and the like.
  6. Purchase information: purchased items, purchase and subscription status, and transaction-related identifiers provided by the App Store / Google Play and by payment processing services (such as RevenueCat). We do not collect payment credit information such as credit card numbers.
  7. Inquiry information: email address, the content of inquiries, records of our responses, and the like.

2. Purposes of Use

We use the information we collect for the following purposes.

  • To provide the Service, identify users, store and display posts, and maintain functionality
  • To send push notifications regarding likes, comments, and the like
  • To analyze usage, improve quality, plan new features, and address defects
  • To detect and prevent crashes, failures, misuse, and security issues
  • To deliver advertising, measure its effectiveness, and display ads according to user settings
  • To manage in-app purchases, purchase status, and entitlements
  • To carry out moderation and ensure safety, including reports, blocks, post deletion, and use restrictions
  • To respond to inquiries and to provide important notices and notice of changes to the terms
  • To respond to requests based on laws and regulations or from public authorities

3. Provision to Third Parties

We will not provide personal information to third parties without obtaining the User's prior consent, except in the following cases.

  1. Where required by laws or regulations
  2. Where necessary for the protection of the life, body, or property of a person and it is difficult to obtain the consent of the individual
  3. Where particularly necessary for improving public health or promoting the sound development of children and it is difficult to obtain the consent of the individual
  4. Where it is necessary to cooperate with a national government body, a local government, or a party entrusted by either of them in carrying out affairs prescribed by laws or regulations
  5. Where information is transferred in connection with a business succession

4. Outsourcing and Use of External Services

We use the following external services to the extent necessary to provide the Service. These services handle information in accordance with the privacy policy of each company and under appropriate security control measures. In connection with processing by external providers, information may be transferred to and stored on servers outside Japan.

  • Google LLC (Firebase): for anonymous authentication (Authentication), database (Cloud Firestore), image storage (Cloud Storage), server processing (Cloud Functions), push notifications (Cloud Messaging), configuration delivery (Remote Config), usage analytics (Analytics), and crash analysis (Crashlytics)
  • Google LLC (AdMob): for ad delivery, use of advertising identifiers, and ad performance measurement
  • RevenueCat, Inc.: for in-app purchases and management of purchase and subscription status and entitlements
  • Apple Inc. / Google LLC: for app distribution, payment, refunds, purchase verification, and the like

5. Regarding User Content

  1. Posted illustrations, titles, comments, message board posts, and the like are made public and displayed to other Users in accordance with the specifications of the Service.
  2. In order to maintain a safe usage environment, respond to violations of the terms, and comply with laws and regulations, we may review posted content, reporting history, blocking information, and the like, and may restrict display, delete content, or restrict accounts.
  3. Even where a post has been deleted, it may remain for a certain period for purposes of backup, caching, legal compliance, or dispute resolution. In addition, we may be unable to delete copies that other Users have saved or shared.

6. Advertising Identifiers and Your Choices

The device's advertising identifier may be used for ad delivery by AdMob. On iOS, the App Tracking Transparency framework requires the app to request permission before carrying out tracking. Users may change their choices regarding permission for ad tracking, personalized advertising, and the like through the OS settings or through the consent screen provided by the Service. Even after making a choice, contextual and similar advertising may still be displayed.

7. Security Control Measures

In order to prevent the leakage, loss, or damage of personal information and otherwise ensure its secure management, we implement necessary and appropriate measures such as encryption of communications, management of access privileges, and auditing of logs. However, complete security of transmission and storage over the internet cannot be guaranteed.

8. Retention Period

We retain information only for the period necessary to achieve the purposes of use, or for the period necessary for legal, accounting, security, dispute resolution, or similar purposes, and after such period we will delete or anonymize the information within a reasonable period. If you wish to delete your account, you may do so from "Settings → Delete account" within the app. Even after deletion of an account or a post, deletion from backups may require a reasonable period of time.

9. User Rights and Deletion Requests

In accordance with applicable laws and regulations, Users may request disclosure, correction, addition, deletion, suspension of use, or suspension of provision to third parties with respect to their own personal information held by us. Where a deletion feature is available within the app, please use that feature, or contact the inquiry desk listed at the end of this Policy. We will verify your identity and respond in accordance with applicable laws and regulations. We may be unable to fulfill your request for reasons such as identity verification, statutory retention obligations, or the protection of the rights of third parties.

10. Use of Cookies and Similar Technologies

On our website, we may use the minimum necessary cookies and similar technologies in order to understand and improve how the site is used. The app itself does not use these technologies.

11. Use by Children

The Service is provided in accordance with the age rating on the app stores and with applicable laws and regulations. Where a minor uses the Service, please do so only after obtaining the consent of a person with parental authority or another statutory representative. If we become aware that we have collected a child's personal information without the necessary consent, we will take action such as deleting that information within a reasonable period.

12. Changes to This Policy

We may amend this Policy in response to changes in laws and regulations or in the content of the Service. Material changes will be announced by display within the app, on this website, or by other appropriate means prior to the effective date.

13. Contact Desk

Please direct inquiries regarding this Policy or the handling of user information, as well as requests for disclosure or deletion of personal information, to the address below.

Keel Lab
Contact: support@keel-lab.com

Effective Date

Established and effective as of July 16, 2026