Privacy Policy

1. Introduction

Hirune (the "Service") respects your privacy and works to protect your personal information. This policy explains what the Service collects and how it is used.

2. Information we collect

• Account information (email address and name, authenticated through WorkOS AuthKit)
• Purchase and unlock history (purchased apps and versions, passcode unlocks, subscription status)
• Playground usage counts (total per user per app)
• Payment information (card details are processed by Stripe and never stored on Hirune servers)
• Access logs (recorded by Vercel, our hosting provider)

3. Information we do not collect

• Credit card numbers (handled by Stripe)
• Passwords (sign-in uses WorkOS magic links or external identities, so Hirune does not store them)

4. How we use information

• Providing and improving the Service
• Account management and authentication
• Payment processing and managing purchase and subscription state
• Customer support

5. Third-party services

The Service uses the following third-party services. Each is governed by its own terms and privacy policy.

• WorkOS AuthKit: sign-in authentication (email address and name) and session cookies
• Stripe: payment processing (PCI DSS compliant) and fraud-prevention cookies
• Cloudflare (Workers / D1 / R2): app file distribution and records of purchases, subscription status, playground usage counts, and unlock history
• Vercel: hosting for Hirune (access logs)
• note and X: links to external services

6. Playground input

Anything you type into the playground is sent to the target app's server (for example, Traceboard). Please do not enter secrets such as passwords or API keys.

7. Data retention

• Account information: kept while your account is active
• Purchase and payment records: kept for seven years to meet tax obligations
• Playground usage counts: kept linked to your account
• To request deletion, contact us by email

8. Data security

We apply industry-standard security measures to protect your data. All traffic is encrypted with SSL/TLS, and access to personal information is appropriately restricted.

9. Your rights

• The right to access your personal information
• The right to correct your personal information
• The right to delete your personal information
• The right to data portability

To exercise these rights, email the contact below.

10. Cookies

The Service uses cookies needed to provide it, such as keeping you signed in. See the Cookie Policy for details.

Cookie Policy →

11. Children's privacy

The Service is not directed at children under 16. If we learn that we have unintentionally collected information from a child under 16, we will delete it promptly.

12. Changes to this policy

This policy may be updated as needed. Significant changes will be announced on the Service. Continued use after a change constitutes acceptance of the updated policy.

13. Contact

Questions or concerns about privacy can be sent to the address below.

taiyo.kimura.3w@stu.hosei.ac.jp