プライバシーポリシー

Hapiura Privacy Policy

Version: v1
Effective date: October 15, 2026

Hapiura (the "Service") is operated by the service operator (the "Operator"). This Privacy Policy explains how information about users is handled.

1. Information We Collect

The Operator may collect account identifiers, name or display name, email address, profile image, and other public profile information obtained through Google or other authentication services; birth date, time zone, profile information, and other settings entered by users; consultation details, fortune inputs, AI-generated results, and fortune history; usage dates, usage counts, device and browser information, cookies, and other technical information; paid-plan, subscription, payment, and cancellation status; inquiries and feedback; and information needed for security, troubleshooting, and prevention of misuse.

2. Purposes of Use

We use this information to provide and manage the Service and accounts; calculate and generate fortune results; save and display fortune history; manage usage limits and plan conditions; manage subscriptions, payments, billing, cancellations, and misuse; respond to inquiries and feedback; maintain, improve, and troubleshoot the Service; prevent misuse and maintain security; send important notices; and comply with applicable law.

3. Sending Information to AI Services

To generate fortune results, part of a user's consultation, fortune-related information, calculation results, or other necessary information may be sent to an external AI service. Information is sent only to the extent necessary for generation. Users should not carelessly enter third-party personal information, confidential information, or other information they do not want sent externally.

4. Payment Information

Paid plans use an external payment provider. Card numbers, expiration dates, security codes, and other card information are handled by the external payment provider, and Hapiura does not directly store card numbers or similar card details. Hapiura may handle subscription status, payment status, and customer or subscription identifiers issued by the payment provider for subscription management, billing, cancellation, and support.

5. External Services and Entrusted Processing

The Operator may use external providers as necessary for authentication, AI processing, payment, data storage, service operation, inquiry handling, and related functions. Such providers may handle user information only to the extent necessary for the relevant service. The Operator will take appropriate steps to manage and supervise entrusted providers.

6. Provision to Third Parties

The Operator will not provide personal data to third parties except with the user's consent, when required by law, when necessary to protect life, body, or property and consent is difficult to obtain, when the arrangement is legally treated as entrusted processing or business succession, or when otherwise permitted by law.

7. Cookies and Similar Technologies

The Service may use cookies and similar technologies to maintain login status, save language and theme settings, understand referral sources, improve the Service, and maintain security. Referral-tracking cookies may be stored for up to 90 days. Other retention periods vary by cookie type and purpose. Users can restrict cookies through browser settings, but some functions may become unavailable.

8. Security

The Operator takes necessary and appropriate security measures to prevent unauthorized access, leakage, loss, or damage.

9. Retention and Deletion

Information is retained for as long as necessary to achieve the purposes of use or as required by law. When a user deletes an account, account information, fortune history, profile information, and related data are deleted through the Service's deletion process. If the user has a paid plan, recurring billing cancellation is processed. Information may nevertheless be retained for a necessary period for legal retention, prevention of misuse, dispute handling, backups, or other necessary reasons.

To restrict re-registration, the user's Google OAuth ID may be retained for 90 days after account deletion. After 90 days, it will be deleted or otherwise appropriately handled when it is no longer needed for that purpose.

10. User Requests

Users may request notification of the purpose of use, disclosure, correction, addition, deletion, suspension of use, erasure, or suspension of third-party provision of their personal data as permitted by law. Identity verification information may be requested.

11. Minors

Minors should obtain consent from a legal representative when necessary. Consent required for a paid plan must also be obtained when necessary.

12. Changes

The Operator may change this Privacy Policy according to applicable law or changes to the Service. Material changes will be announced through the Service together with their effective date.

13. Contact

For inquiries about this Privacy Policy, contact [email protected].

End