Privacy Policy

Principles

TinyTrail ("the Service") respects your privacy and collects only what's needed to provide the Service.

We don't require sensitive personal data such as your real name, address, face photo, or gender. A nickname and minimal contact information are enough to use the Service.

What we collect

To provide the Service, we collect the following.

Account information

• Email address (or the ID from your OAuth provider)
• Nickname
• Password (stored as a one-way hash)
• Auth session info

Service usage

• Your quiz answers and result
• Hobbies selected, 7-day plan, and mission completion history
• Activity log (created by you)
• Conversations with the AI companion/trainer
• Community posts and reactions
• Notification and display preferences

Payment

• Customer ID and subscription ID issued by the payment processor (e.g., Stripe)
• Billing state (plan type, validity period)

We do not store credit-card numbers, expiration dates, or security codes on our servers. Card data is held securely by the payment processor.

Technical

• Access logs (IP address, user-agent, timestamp)
• Identifiers stored in cookies and local storage
• Technical details when errors occur

Beta / marketing contact

• Email address submitted when joining the beta waitlist
• Source (which page CTA triggered the signup)
• Diagnosis type ID (optional, when you sign up after the quiz)
• Anonymous identifier tt_aid (cookie and localStorage)
• A salted hash of your IP address (for spam detection — not reversible)
• Locale preference (ja / en) — for funnel measurement

What we don't collect

We deliberately do not collect:

• Real / legal name
• Postal address or detailed residence info
• Face photos or ID documents
• Gender
• Phone number
• Income or job details
• GPS-precise location
• Dating preferences or relationship status
• Government ID numbers

We don't collect them because the Service exists to support hobby continuation — it isn't built on identification or in-person matchmaking.

Purposes

We use the data for:

• Operating the Service, authenticating you, and saving your settings
• Showing quiz results, plans, and missions
• Generating AI companion/trainer responses
• Providing the activity log and community features
• Billing paid plans and issuing receipts/invoices
• Detecting and responding to fraud, spam, and community violations
• Statistical analysis to improve the Service (in a form that doesn't identify you)
• Usage analysis via Google Analytics 4
• Sending beta and launch announcement emails
• Important notices and email notifications
• Compliance with applicable law

Data sent to AI services

AI companion/trainer responses are generated through external generative-AI services (such as OpenAI). To generate responses, we send your messages and a minimal context to the external service.

As a rule:

• We don't send direct identifiers like email addresses or payment IDs.
• We send only the minimum context required for response quality.
• We follow the terms and data-handling policy of the AI provider we use.

Third parties and processors

We don't provide your personal information to third parties without consent, except:

• When required by law
• When necessary to protect life, body, or property
• In the event of business succession (with equivalent privacy commitments)

The following external services help us operate the Service:

Each processor is contracted and configured to handle only the data needed for its role.

Payment data

Payments are processed by Stripe. Credit-card numbers, expiration dates, and security codes are never stored on our servers — they are managed securely by Stripe.

We store only the customer ID, subscription ID, and billing state issued by Stripe.

Cookies and analytics

We use the following cookies and similar technologies for usability and to understand usage.

You can refuse cookies in your browser settings. Some features may not work as a result.

Retention

• Account info, activity log, quiz result: while the account exists
• AI conversation content: up to 12 months, for response-quality improvement and abuse detection
• Access logs: up to 6 months
• Payment-related info: the period required by law (in principle, 7 years)

On account deletion, data is removed within a reasonable period, except for legally required retention.

Your rights (access, correction, deletion)

You may request access to, correction of, deletion of, or restriction of processing of your personal data, and you may request that we stop providing it to third parties.

Send requests via Contact. After identity verification, we will respond within a reasonable period.

Settings you can change directly in-app (nickname, notifications, account deletion) can be modified at any time.

Users in the EU/UK or other jurisdictions with similar laws may have additional rights (such as data portability and the right to lodge a complaint with a supervisory authority). To exercise any of these rights, please contact us.

Security

We take reasonable measures to prevent leakage, loss, or damage of personal data.

• All communication is encrypted over HTTPS.
• Passwords are stored in a non-reversible (hashed) form.
• Operator access privileges are kept minimal and audit-logged.
• External processors are chosen to meet appropriate security standards.

Minors

Minors should obtain consent from a parent or guardian before using the Service. We don't collect information that directly identifies minors, but we recommend parental oversight when minors use the community features.

Marketing contact

We may email the address you registered to share beta and launch announcements, related surveys, and improvement notices.

We use email for marketing only within this scope:

• Beta and launch announcements
• Updates on 30-day plan beta readiness
• Optional surveys for improving the Service
• Related important updates

We don't use your email address to advertise third-party products or services, nor do we provide it to third parties for that purpose.

To stop receiving announcement emails, use the unsubscribe link at the end of each email, or contact us via Contact.

International users

The Service is operated from Japan. When you use the Service from outside Japan, your data may be transferred to and processed in Japan and in the regions of our external processors (e.g., Cloudflare's global network).

We rely on appropriate safeguards (contracts and processor selection) for cross-border transfers. By using the Service, you understand that this transfer occurs.

Changes to this policy

This policy may be revised in response to legal changes or changes in what the Service offers. Revisions take effect when posted on the Service. We provide reasonable advance notice for important changes.

Contact

Questions about this policy? Reach out via Contact.