Privacy Policy

1. Your photos

The Service does not store your original photo files on our servers. Loading, displaying and computing basic metrics happen inside your browser.

Only when you run an AI analysis (subject detection, classification, etc.) is a downscaled image of the photo (including a crop of the subject) sent to our server. It is processed temporarily for that analysis only and is not stored.

2. Information we collect

• Account information: The email address you sign in with. When you sign in with Google, basic profile information provided by Google such as your name and profile picture. Your nickname, if you set one.
• Photo information (when signed in): So that analysis results can be reused later, we store each photo's file name, file size, an identifier computed from its content (hash), its EXIF data (capture time, camera and lens, shooting settings, and the location if the photo contains GPS data) and the analysis results (metrics such as focus scores, the subject's region, classifications, image features, and categories you changed by hand).
• Usage: The number of photos processed by the AI (to manage your plan's limit). Which features and buttons of the Service are used (linked to your account when signed in), where visits come from (the referring site and campaign parameters in the URL), the first page opened and the device type. Operational records such as server processing times (without information identifying users).
• Name quiz ranking: The nickname, number of correct answers and answering time you register in the ranking (shown publicly in it). To prevent mass registrations, your IP address and the visit that registered are recorded for that day only, not as such but as irreversible hashes. Quiz results played while signed in (kept as your records).
• Payment information: Pro plan payments are processed by Stripe. We never receive or store card information such as card numbers. We keep only the Stripe customer ID, subscription ID, and the subscription's status and period.
• Analytics: Vercel Web Analytics aggregates the pages viewed, referrers, country / region and device / browser type without cookies and without identifying individuals.

3. Information stored in your browser

So you can keep working with your photos after a reload, the loaded photos (references to the files on Chrome / Edge, copies of the photos on other browsers) and your display settings are stored inside your browser (IndexedDB, localStorage, sessionStorage). They are not sent to our servers. Name quiz rounds played while not signed in are kept in the browser for up to an hour, so they can be added to your records once you sign in. Stored photos are deleted when you log out, and can also be deleted by clearing the site data in your browser.

To keep you signed in, the authentication service (Supabase) stores your login session in the browser.

4. How we use information

• To provide the Service (analyzing photos, storing and showing the results)
• To sign you in and verify your identity
• To bill the Pro plan, manage subscriptions and manage AI usage limits
• To prevent misuse and operate the Service safely
• To improve the Service and plan new features by analyzing usage
• To answer inquiries and send important notices

5. Disclosure to third parties

We do not provide personal information to third parties without your consent, except where required by law, where necessary to protect a person's life, body or property and consent is difficult to obtain, and other cases permitted by law.

6. External services (providers outside Japan)

The Service uses the following external services and entrusts the handling of information to their operators. They are located outside Japan, such as in the United States, and information may be stored and processed on servers outside Japan. Each provider protects personal information under its own privacy policy.

• Supabase (United States): Sign-in (authentication) and the database (accounts, analysis results, usage)Privacy policy
• Vercel (United States): Serving the Service, AI analysis on the server, analyticsPrivacy policy
• Stripe (United States): Pro plan paymentsPrivacy policy
• Google (United States): Sign-in with a Google accountPrivacy policy

7. Security

Communication is encrypted (HTTPS). The database only lets each signed-in user read and write their own data. Usage records can be viewed by administrators only.

8. Retention

Account and photo information is kept until you ask us to delete your account. Usage records are kept as long as needed for analysis and improvement, and deleted when no longer needed. Payment records are kept for the period required by law. The quiz ranking resets every day at midnight (Japan time), and earlier days' entries are deleted.

9. Your requests

If you ask us to disclose, correct, stop using or delete the personal information we hold about you (including deleting your account), we will respond in accordance with the law after confirming your identity. Please contact us as below.

10. Minors

Minors should use the Service with the consent of a parent or guardian.

11. Changes to this policy

We may revise this policy in response to changes in the law or in the Service. The revised policy takes effect when it is posted on this page. We will announce important changes in the Service.

12. Contact

Onaga AI Operations Office

We accept inquiries about the Service and the handling of personal information by direct message to our official X account (@onaga_ai_photo).

• X @onaga_ai_photo