Privacy Policy

1. Introduction

Mugen Studio Inc. ("Company," "we," "us," or "our") values the privacy and protection of personal information of users of the mobile application "komoriba" (こもりば) and its associated websites and services (collectively, the "Service").

This Privacy Policy ("Policy") describes the types of information we collect, how we use and manage that information, how it may be shared with third parties, and the rights available to users.

In the event of any discrepancy between the Japanese and English versions of this Policy, the Japanese version shall prevail.

2. Information We Collect

2.1 Account Information

• Identifiers: A user ID automatically generated upon first launch of the application (assigned via Firebase Authentication). Registration of an email address or other personal information is not required.
• External Account Linking: If you link your Account to a Google account or Apple ID, we receive an identifier from the linked service (such as an external account ID). We do not obtain passwords from linked services.

2.2 Service Usage Information

• Crystal Ledger: History of Crystal earnings and spending, balances (including Free and Paid Crystal classifications)
• Mokumoku Session Records: Session start and end times, duration, and number of blocked apps
• Content Information: Purchased or acquired Komoriba Content, sharing history
• User Input and Public Information: Optional display names, room and playlist names, creation request text, creator names, survey responses, and content you choose to publish or share
• Photos: Optional reference images you select when requesting an original Komoriba
• Safety Information: Reports about users, rooms, or public content, and relationships between users who block one another
• Inbox: Receipt and read status of announcements from the Service

2.3 Billing and Subscription Information

• Subscription Status: Enrollment status, entitlements (benefit permissions), subscription start date, renewal status
• Purchase History: Transaction IDs and timestamps for consumable purchases (Crystal packs) and subscription purchases

Note: Credit card numbers and other payment method details are managed by Apple App Store, Google Play, and payment processors. We do not directly collect or store this information.

2.4 Device and Technical Information

• Push Notification Tokens: Device tokens used to deliver push notifications through Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM)
• Screen Time-Related Information: In connection with the focus session feature, we collect the number of apps the user has designated for blocking. We do not collect the specific names of blocked apps or detailed Screen Time usage statistics.
• Technical Information: App version, device and OS information, language and time zone, app-instance and similar identifiers, crash logs, and diagnostics

2.5 Analytics Information

• Firebase Analytics: On iOS and Android, we collect screen views, feature usage, purchase-flow outcomes, and similar app interactions together with pseudonymous identifiers such as an app-instance identifier. We do not use this data for advertising, and do not send free-text survey responses, creation prompts, or invite codes to Analytics.
• Firebase Crashlytics: On iOS and Android, we collect crash logs, non-fatal errors, diagnostics, and technical app, device, and OS information.

3. How We Use Your Information

We use the collected information for the following purposes:

1. Providing and Operating the Service: Account management, Mokumoku Session functionality, Crystal management, content delivery
2. Billing and Subscription Management: Purchase confirmation and processing, granting Subscription benefits, preventing duplicate transactions
3. Sending Notifications: Delivering service-related announcements and important notices via push notifications
4. Service Improvement and Analysis: Analyzing usage patterns, improving features, developing new functionality
5. Fraud Prevention: Detecting and preventing unauthorized Crystal acquisition, unauthorized access, and other fraudulent activity
6. Customer Support: Responding to user inquiries
7. Legal Compliance: Complying with applicable laws and regulations

4. Sharing Information with Third Parties

We do not share your personal information with third parties except in the following circumstances:

4.1 Publication and Sharing You Choose

When you choose to join a public room, share a playlist, publish a creation, or use another sharing feature, information needed for that action—such as a display name, room or playlist name, creation, and creator name—may be visible to other users. Survey responses, private creation prompts, and reference images are not shown to other users, except for the resulting creation you separately choose to publish.

4.2 Service Providers

We use the following third-party services to operate the Service. Information is shared with these providers only to the extent necessary for their services.

4.3 Other Disclosures

• Legal Requirements: When required by court orders, legal obligations, or lawful requests from law enforcement
• Protection of Rights: When necessary to protect the life, person, or property of the Company, users, or third parties
• Business Transfers: In the event of a merger, acquisition, or other business succession (we will require the successor to assume the obligations under this Policy)

5. International Data Transfers

The Service's backend infrastructure is primarily located in Japan (Google Cloud Platform, Tokyo region). However, certain third-party services (such as Firebase Authentication and Cloudflare) operate on global infrastructure, and your information may be processed on servers located outside of Japan.

We endeavor to ensure that appropriate security measures are in place when information is transferred internationally.

6. Data Security

1. We implement reasonable technical and organizational security measures to prevent unauthorized access, loss, alteration, or leakage of collected information.
2. Communications are protected by encryption (HTTPS/TLS).
3. When an Account is based on anonymous authentication tied to a device, we do not hold additional identifying information (such as name or address), and we are generally unable to directly identify a specific individual.

7. Data Retention

1. We retain user information for as long as it is necessary to provide the Service.
2. Even if access to an Account is lost due to app deletion or other reasons, data on our servers may be retained for a certain period. We will endeavor to delete unnecessary data after a reasonable period.
3. Information required to be retained under applicable laws will be kept for the period prescribed by such laws.

See Delete your account and data for deletion methods, the data deleted, and the retention periods that may apply after deletion.

8. Your Rights

8.1 Rights Under Japanese Data Protection Law

Users residing in Japan have the right to request disclosure, correction, deletion, or suspension of use of their personal information held by the Company, in accordance with the Act on the Protection of Personal Information. Please contact us using the information at the end of this Policy to make such requests.

You can delete your account immediately from Settings in the app or request deletion by following Delete your account and data.

8.2 Push Notification Management

You can control push notification settings (on/off) through your device settings.

9. Children's Privacy

1. The Service is intended for users aged 13 and older and is not designed or offered to children under 13.
2. Minors should use the Service in accordance with applicable law and store rules and, where required, with consent from a parent or legal guardian. External account linking, Paid Crystal purchases, and Subscriptions should be managed with parental supervision and consent.
3. If we learn that we may have collected information from a child under 13, we will review and delete it where reasonably possible. Parents or guardians may contact us using the information at the end of this Policy.

10. Changes to This Policy

1. We may update this Policy from time to time in response to changes in applicable laws, changes to the Service, or other circumstances.
2. For significant changes, we will provide advance notice through in-app notifications, push notifications, or postings on our website.
3. The updated Policy will take effect upon being posted within the Service or on our website.

11. Contact Us

For questions or requests regarding this Policy, please contact:

• Operator: Mugen Studio Inc. (無限スタジオ株式会社)
• Address: 2F-C, Shibuya Dogenzaka Tokyu Building, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo, Japan
• Email: komoriba@mugen-studio.com

Supplementary Provisions

• This Policy took effect on March 23, 2026 and was revised on August 23, 2026.