Privacy Policy

Effective and last updated: 2026年8月22日

This English translation is provided for convenience. If it differs from the Japanese version, the Japanese version governs.

Hagyyyy株式会社 (“we,” “us,” or “our”) establishes this Privacy Policy (the “Policy”) for handling user information in the Jisui website, iOS app, and Android app (collectively, the “Service”).

1. Basic approach

The Service is local-first: you can begin by storing cooking records on your device. While signed out, dish names, dates, ratings, notes, tags, reference URLs, photos, and videos are generally stored in your browser or app and are not sent to our servers for account synchronization.

Access and error information may still be processed to deliver, secure, and troubleshoot the Service. When you sign in, account information, cooking records, and selected photos or videos are sent to our cloud environment for cross-device synchronization.

2. Information we collect and use

2.1 Information stored on your device

• Dish names, dates, ratings, notes, tags, reference URLs, photos, and videos
• Settings such as display language, last-used sign-in method, and analytics consent
• Authentication tokens used to keep you signed in
• An invitation code held temporarily until account creation if you arrive through an invitation link
• A copy of any inquiry you send (your name, email address, message, attachment count, and the time sent), kept on your device so that you can review what you submitted

The web version primarily uses IndexedDB and localStorage. The apps use an in-app database, file storage, and secure credential storage.

2.2 Account and authentication information

• Email address, verification status, and account creation time
• A hashed password (we do not store plaintext passwords)
• If you sign in with Google, LINE, or Apple: the provider, provider-issued user identifier, email address when supplied, and connection time
• An internal identifier generated by us when the provider does not supply an email address
• A record of your agreement to these documents: the versions accepted, the time and channel of acceptance, a one-way-derived identifier based on the internal user ID, and the IP address used at acceptance

2.3 Friend invitations

• An invitation code issued to you (a randomly generated string that contains no name or similar information)
• A reference to the internal user ID of the inviting user when an account is created through an invitation code

We do not disclose an invited user’s email address or other information to the inviting user. We do not display invitation-registration counts to users. Invitation codes are not tied to rewards, discounts, or any other economic benefit.

2.4 Synchronized cooking records

• Dish names, dates, ratings, notes, tags, reference URLs, and creation and update times
• Photos and videos you select for synchronization and identifiers indicating where they are stored

2.5 Access, security, and error information

• IP address, user agent, access time, request destination, response status, and similar connection data
• Error type, message, stack trace, service name, environment, and similar diagnostic data
• Request counts temporarily associated with an IP address to prevent abuse

2.6 Usage information

• Server operational events, including account registration, synchronization, record counts, and email errors. These use an internal user ID but do not include dish names, notes, tags, media, email addresses, or other entered content.
• Optional screen analytics: only with your express permission, we send broad page categories and fixed action types. We do not send raw URL queries, dish IDs, or entered content.
• Optional store-link analytics: only with your express permission, we send anonymous counts describing the placement, selected App Store, Google Play, or web destination, language, broad OS category, and an allowlisted article campaign. We do not send the raw URL, user agent, device ID, or free text.
• Optional app analytics: after sign-in and acceptance of the current documents, and only with your express permission, we send anonymous counts of first opens, app opens, and successful synchronizations together with OS, app version, build number, and distribution channel. We do not include an internal user ID, email address, advertising ID, device ID, or entered content.

2.7 Account-deletion information

• Any optional account-deletion reasons you select and details you enter under “Other”
• Deletion time, deletion channel, the email address held at deletion, and a one-way-derived identifier based on the internal user ID

Answering the account-deletion survey is optional. Even if you do not answer it, we retain the deletion time, deletion channel, email address held at deletion, and one-way-derived identifier as an account-deletion record. We keep the email address held at deletion so that we can identify the relevant record if you contact us or make a statutory request after deleting your account.

2.8 Contact information

When you contact us, we collect your name (optional), email address (optional), message, and any attached files. We also record the URL of the screen from which you wrote and information identifying your browser or app (user agent) to help us understand the situation. Name and email address are optional, but we need contact details if you would like a reply.

3. Purposes of use

• Providing the Service, identity verification, authentication, synchronization, and media storage and delivery
• Email verification, important security notices, and support
• Detecting, preventing, and investigating unauthorized access, misuse, and other security issues
• Detecting and investigating failures, improving quality, and operating the Service reliably
• Analyzing usage to improve features and usability when you permit it
• Issuing invitation codes and recording account creation through an invitation code
• Responding to your enquiries and keeping a record of them
• Analyzing account-deletion reasons and trends to improve the Service
• Identifying the relevant record if you contact us or make a statutory request after deleting your account
• Recording and verifying whether, and to which version, you agreed to these documents
• Notifying you of changes to this Policy or the Terms and other important matters
• Complying with legal obligations and protecting our or others’ rights

4. External services and processors

We use the services below. In addition to the listed information, IP addresses, user agents, and similar connection data may be transmitted. Providers may handle data both as our processors and under their own privacy policies.

We select and appropriately supervise processors through contracts, access controls, and other measures. Information may be handled outside Japan through a provider’s infrastructure or support operations.

Where personal data is handled abroad, we take measures required by law, such as obtaining consent or using processors that continuously maintain safeguards equivalent to those required by Japan’s Act on the Protection of Personal Information. The main countries where data is currently handled are the United States and member states of the European Union; a processor may change its infrastructure so that data is handled elsewhere. Where legally required, we provide information about the relevant foreign system and our safeguards upon request.

5. Disclosure to third parties

We do not provide personal data to third parties without consent, sell personal data, or provide it for advertising, except:

• as required by law;
• where necessary to protect life, physical safety, or property and obtaining consent is difficult;
• when processing is entrusted within the scope needed for the stated purposes; or
• in connection with a merger, business transfer, or other succession.

6. Analytics, cookies, and similar technologies

• We do not use advertising tracking, advertising IDs, session replay, or automatic collection of entered content.
• Optional web and app analytics are off by default and activate only with your express permission. You may withdraw web permission at the bottom of this page and app permission from the Account screen.
• Access logs, error logs, and server operational events needed to provide, secure, and troubleshoot the Service are processed regardless of your screen-analytics setting.

7. Device permissions

The apps use the operating system’s photo picker when you add cooking media. They do not request access to the camera or your full photo library, and handle only the photos or videos you select for the Service.

The apps also request notification permission in order to show reminders so you do not forget to record a dish. These notifications are created and shown on your device rather than sent from our servers, and we do not collect a device identifier such as a push notification token for this feature. You can turn reminders off at any time in the app’s settings.

All of these permissions can be changed in your device settings.

8. Retention and deletion

• Local data remains until you delete it or the app’s or browser’s storage is cleared.
• Account information and synchronized data are retained while the account exists or as needed for the purposes described above.
• Deleting your account removes the account, synchronized records, photos, videos, and your invitation code from our active environment, and clears the reference identifying you as the inviter in the records of users you invited. We separately retain an account-deletion record containing the deletion time and channel, email address held at deletion, a one-way-derived identifier, and any optional deletion reasons. Signing out alone does not delete server data.
• Local cooking records remain after account deletion. To remove them, use the in-app deletion feature, uninstall the app, or clear the browser’s site data.
• Enquiry content, attachments, and contact details are restricted to service administrators and retained after we respond for as long as needed to review what happened and prevent recurrence, then deleted. Deleting your account does not by itself delete enquiry records; contact us at the address below if you would like them removed.
• Records of your agreement are retained for as long as we may need to demonstrate that agreement was given.
• Backups, access logs, incident records, and abuse-prevention records are access-restricted and retained as needed for recovery, security, or legal compliance, then deleted or de-identified.
• Account-deletion records are restricted to service administrators and retained as needed to improve the Service and understand deletion trends, then deleted or de-identified.
• Statistics that do not identify an individual may be retained indefinitely.

9. Security measures

To prevent leakage, loss, or damage, we limit processing scope, manage access rights, encrypt communications, hash passwords, use private storage and time-limited URLs, supervise providers, and address vulnerabilities. We provide further information about safeguards upon request to the extent doing so does not compromise security.

10. Access, correction, suspension, and other requests

Under applicable law, you may request notice of purposes, access, correction, addition, deletion, suspension or erasure of use, and cessation of third-party provision concerning your personal data held by us. Contact the address below with information needed to verify your identity, the relevant account, and the request. After verifying you or an authorized representative, we will respond without undue delay as required by law. We generally do not charge a request fee.

11. Minors

Minors should obtain consent from a parent or other legal representative where required before creating an account and using the Service.

12. Changes to this Policy

We may revise this Policy in response to changes in law, the Service, or our data practices. For material changes, we will announce the changes and effective date in advance through the Service or another appropriate method and obtain consent where legally required.

13. Operator and contact

Personal information handling business operator

Hagyyyy株式会社

Address

〒160-0023 東京都新宿区西新宿3丁目3番13号 西新宿水間ビル6階

Representative

Disclosed without undue delay upon request through the contact address below.

Contact, complaints, and data-subject requests

support@hagyyyy.com

Optional usage analytics

Use this setting to control optional screen analytics from this device. Logs needed to provide, secure, and troubleshoot the Service are not covered by this setting.