Privacy Policy
Last Updated: November 30, 2025
This Privacy Policy ("Policy") applies to the DoorNote mobile / cloud service operated by HOKKALON Inc. ("we," "us," or "our").
App: DoorNote / Operator: HOKKALON Inc. / Contact: y-ishiba@hokkalon.com
0. Scope
This Policy aligns with disclosures for Apple App Store (App Privacy) and Google Play (Data Safety). It explains how we collect, use, and safeguard personal information processed through DoorNote and related services.
1. Information We Collect
- Information you provide: email address, display name, authentication provider info, Firebase UID, form titles/PIN settings, submissions and attached images, support messages.
- Automatically collected: device info (OS, model, language, time zone, app version), usage events, diagnostics (crash/performance logs), subscription/receipts (RevenueCat), Cloudflare Turnstile verification.
- Network context on submission: IP address, country code, User-Agent, Accept-Language, request ID, theme settings (audit/security).
- On-device data: drafts/cache remain locally and are removed when the app is uninstalled.
2. Purposes of Use
- Provide, operate, improve DoorNote (authentication, QR/PIN forms, submissions, media storage, analytics)
- Support, identity verification, important notices
- Usage measurement, quality improvement, new features, UX optimization (e.g., Mixpanel)
- Fraud prevention, security monitoring, incident investigation, legal compliance
- Subscription/purchase management via App Store / Google Play / RevenueCat
- Advertising delivery/measurement when AdMob is enabled (default: disabled)
3. Tracking Consent
For iOS 14.5+, if IDFA is used for cross-app tracking, we request permission via AppTrackingTransparency. You can change this in iOS Settings > Privacy & Security > Tracking. Android users can reset advertising IDs in Google Play Services. By default, DoorNote does not use advertising IDs.
4. Disclosures to Third Parties
We do not disclose personal data to third parties except with consent, when required by law, to trusted processors under contractual safeguards, or in connection with corporate transactions.
5. Service Providers & SDKs
- Firebase Authentication / Firestore / Storage (Google LLC)
- Cloud Functions / Cloudflare Workers (infrastructure)
- RevenueCat (subscription management)
- Mixpanel (analytics)
- Cloudflare Turnstile (bot detection)
- Crashlytics (optional crash reporting)
- Google AdMob (ads, only if enabled)
Providers may receive identifiers, usage data, receipts, diagnostic logs. See each provider’s privacy policy.
6. Retention & Deletion
- Account data: retained until deletion/closure; billing per legal requirements.
- Audit IP/request logs: ~1 year.
- Submissions (messages/images): expire (up to ~2 years) then auto-deleted.
- Diagnostics/aggregated logs: ~24 months rotation.
- Local caches: removed on uninstall.
7. Your Rights
You may request access, correction, deletion, restriction, or stop disclosure, subject to law. Use in-app “Delete Account” or contact y-ishiba@hokkalon.com.
8. Security
TLS, role-based access control, audit logging, least-privilege; incidents are investigated and remediated promptly.
9. International Transfers
Data may be transferred outside Japan (e.g., US/EU) via Firebase, RevenueCat, Cloudflare, Mixpanel with appropriate safeguards.
10. Children’s Privacy
DoorNote targets adult users (delivery/neighbor comms). Not directed to children under 13. Minors should use with parental consent.
11. Changes to This Policy
We may update this Policy. Material changes will be notified in-app or on this page. Latest version will be posted here.
12. Trademarks & Disclaimer
DoorNote is a communication/guide tool; no guarantee of delivery success or accuracy of user-submitted content. Trademarks belong to their owners.
13. App Privacy / Data Safety Alignment
Categories map to Apple “Data Linked/Not Linked/Tracking” and Google Play “Data Safety.” Reviewed periodically.