Privacy Policy

Negai (the "App") is an app provided by Sho Fujimoto (the "Developer") for recording visits to Shinto shrines and Buddhist temples in Japan. When you record a visit on the grounds, you earn Wish Points, and you can leave photos, a note, and a wish for someone, then send that wish to them as a link.

This Privacy Policy explains how the App handles your information.

This Privacy Policy applies to the following app:

• App name: Negai
• Bundle ID (iOS) / package name (Android): com.fjsh.negai
• Developer (individual): Sho Fujimoto

The App does not ask you to sign up or log in with an email address or phone number. The Developer does not collect your name, email address, or phone number.

1. Information We Collect

1.1 Account

When you first open the App, the Developer's server creates an anonymous account for your device.

• An account ID and a 4-digit number (used for the default display name, such as "Visitor 1234")
• A sign-in token (32 random bytes). On your device, it is kept in the OS's secure storage (such as the iOS Keychain). The server stores only an irreversible form of the token (a SHA-256 hash), not the token itself
• The date and time you agreed to the Terms of Service
• Your nickname (1–20 characters, only if you set one)
• If your use is suspended for breaking the Terms of Service, the date and time and the reason (seen only by the Developer)

1.2 Visits and Posts

When you record a visit, the following information is stored on the server.

• The shrine or temple you visited, the date and month of the visit (Japan time), and its prefecture
• Your device's location at the time of the visit (latitude and longitude), its accuracy, and your distance from the shrine (see 1.3)
• The Wish Points you earned
• A note (up to 500 characters, only if you write one)
• Photos (up to 4) and whether each photo is a goshuin photo (see 1.4)
• A wish: "For" (up to 30 characters) and a message (up to 200 characters), only if you write one
• The visibility you choose ("Share within Negai" or "Only me") and whether you agreed to post anonymously on the shrine website

1.3 Location

The App uses your device's location only in the following two situations. It gets your location only while you are using the App, never in the background.

• Finding shrines nearby: Your current location is sent to the server to find nearby shrines and temples. This location is not stored on the server.
• Recording a visit: To confirm that you are on the grounds, your current location and its accuracy are sent to the server. The server records a visit only when the accuracy is within 100 m and you are within 300 m of the center of the shrine or temple. The location, accuracy, and distance at that time are stored with the visit, so that we can investigate fraudulent records.

The location of your visits is never shown to other users, on the shrine website, or in wish links. Others can see only which shrine you visited and on what date.

1.4 Photos

To add photos to a visit, you take them with the camera or choose them from your device. The App uses the OS photo picker, so it does not ask for access to your whole photo library.

• Before sending, the App converts each photo to a JPEG no larger than 1600 px on its longest side and removes EXIF data, which can include where the photo was taken.
• The server also removes EXIF, XMP, and IPTC data and comments before storing the photo.
• Photos are stored in storage managed by the Developer (Cloudflare R2). Each photo URL contains a long random string that cannot be guessed, and the URL is given only to people allowed to see the photo. Anyone who has already received the URL can still open the photo after you change its visibility. After you delete a photo, a copy may remain in a viewer’s browser for up to one year.
• Photos that are not attached to a visit within 24 hours of being sent are deleted automatically.

1.5 Reports and Blocks

• When you report another user's post, we store the post, your account ID, the reason (spam or ads, offensive content, harassment, or other), and the date and time.
• When you block another user, we store who you blocked and when.

1.6 Information Collected Automatically

• The App version and OS type (attached to every request and used to notify you of updates)
• Your IP address. It is used to prevent too many accounts from being created, and is stored temporarily on the server as an hourly count
• Daily counts of certain actions (sending photos, recording visits, reporting, and changing your nickname)
• Technical information such as request logs

1.7 Maps

To show the map of nearby shrines, the App loads map images from OpenFreeMap. When the map loads, the area being shown and your IP address are sent to OpenFreeMap.

1.8 Information Stored on Your Device

The only thing the App stores on your device is the sign-in token (see 1.1). Your visits and photos are stored on the server.

1.9 "Plan a Day Together" on the Shrine Website

On the Negai shrine website (https://negaiapp.com ), "Plan a Day Together" lets you decide with friends which day to visit a shrine or attend a festival together, without creating an account. When you create a plan or reply to one, the following information is stored on the server.

• Plan: title (up to 60 characters), organizer's name (up to 20 characters), note (up to 300 characters, only if written), candidate dates (up to 30), the chosen date, and the shrine and event the plan was made from
• Reply: name (up to 20 characters), a "○", "△", or "×" for each candidate date, and a comment (up to 100 characters, only if written)
• Organizer link and reply edit key: The server stores only an irreversible form of each key (a SHA-256 hash), not the key itself. The key is saved in the browser that created the plan or sent the reply (localStorage).
• Reports: the reason and the time. To count each person's report only once, the server also stores an irreversible value (a SHA-256 hash) made from the plan ID and your IP address. Your IP address itself is not stored.

When you create a plan, reply, edit a reply, or report a plan, Cloudflare Turnstile checks that a person is operating the page. Information about your browser and your IP address is sent to Cloudflare at that time. To prevent excessive use and abuse, the server also temporarily stores the number of actions per IP address per day.

2. How We Use Information

• To provide the App's features, such as recording visits, Wish Points, and showing your records, goshuin book, medals, and prefecture progress
• To confirm that you are on the grounds and to prevent fraudulent records
• To display posts and provide wish links
• To provide "Plan a Day Together" on the shrine website
• To display the ranking
• To check the content of posts and nicknames (Section 3) and to handle reports and blocks
• To limit usage and prevent abuse
• To notify you of updates
• To investigate and fix bugs
• To comply with laws, the App's Terms of Service, and platform policies

3. Automated Content Checks (OpenAI Moderation)

To keep offensive posts and inappropriate photos out of the App, the App checks content with the OpenAI Moderation API before storing it. The following information is sent.

• The text of your note, "For," message, and nickname
• The plan title, the organizer's and repliers' names, and notes and comments on the shrine website (see 1.9)
• The photos attached to a visit (one at a time)

Posts set to "Only me" are also checked. Your account ID, location, and IP address are not sent. Text and photos judged inappropriate are not stored. The Developer's server does not keep the checked text in its logs.

Information sent to OpenAI is handled under OpenAI's policies.

4. Who Can See Your Posts

Where your post (note, photos, and wish) appears depends on the visibility you choose.

• Only posts for which you choose "Post anonymously on the shrine website" appear on the shrine website. This is off by default.
• You can change the visibility and the shrine website setting at any time with "Change visibility" on the Records screen.
• Wish links: When you add a wish to a visit, a wish link (a web page) is created. Anyone with the link can see "For," your display name, the shrine, the visit date, the message, and the photos, regardless of the post's visibility. You choose who to send the link to. Wish links are set not to be indexed by search engines.
• Ranking: Users with the most Wish Points have their display name and points shown in the ranking.
• Plan a Day Together: Anyone with the link can see a plan page (a web page), including the plan title, the organizer's name and note, and each replier's name, "○", "△", or "×", and comment. The person who created the plan chooses who to send the link to. Plan pages are set not to be indexed by search engines.
• The App does not use your photos or posts for advertising.

5. Reports and Blocks

• A post reported by 3 users is hidden everywhere: in the App, on the shrine website, and in wish links. The Developer reviews hidden posts, restores them if there is no problem, and deletes them if there is.
• A post you reported is no longer shown to you.
• A plan on the shrine website is hidden after it is reported by 3 people. The Developer reviews it, restores it if there is no problem, and deletes it if there is.
• Posts and ranking entries from users you block are not shown to you. The other user is not notified that you blocked them.

6. Advertising, Analytics, and Tracking

The App does not show ads. It does not use any services for usage analytics or crash collection. The App does not track you across other companies' apps or websites, and it does not collect advertising identifiers such as the IDFA. The App also has no in-app purchases.

7. Third-Party Services

The App uses the following third-party services. Each service handles information according to its own privacy policy.

• Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/
• OpenAI Privacy Policy: https://openai.com/policies/privacy-policy/
• OpenFreeMap: https://openfreemap.org/
• Apple Privacy Policy: https://www.apple.com/legal/privacy/
• Google Privacy Policy: https://policies.google.com/privacy

8. International Transfers

Because the App uses the third-party services in Section 7, your information may be sent to, processed, and stored by companies outside Japan (mainly in the United States).

Information on each country's personal data protection system is available on the website of Japan's Personal Information Protection Commission (https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku ).

9. Sharing with Third Parties

The Developer does not sell your information. We do not share it with third parties except in the following cases.

• With your consent (including posts you chose to make visible under Section 4)
• When we entrust processing to the service providers in Section 7, to the extent needed to provide the App
• When required by law
• When needed to protect a person's life, body, or property
• In connection with a business transfer

10. How Long We Keep Information

• Your account, visits, posts, photos, reports, and blocks are kept until you delete them (Section 12).
• Photos not attached to a visit are deleted after 24 hours.
• Plans, replies, and reports on the shrine website are deleted automatically 30 days after the last candidate date (including the chosen date).
• Usage counts and IP address records are deleted after their counting period (one hour or one day) ends.
• Other information processed on the server is kept only as long as needed for the purposes in this policy, then deleted or anonymized, unless we need to keep it longer to comply with laws, maintain security, or investigate abuse.

11. Minors

If you are a minor, please get your parent's or guardian's consent before using the App. Do not include information that could identify you, such as your real name, address, or school, in posts or your nickname.

12. Your Choices and Rights

• Location: You can change or revoke the permission at any time in your device settings. Without it, you cannot find nearby shrines or record visits.
• Camera: The App asks for permission only when you tap "Take photo." Without it, you can still choose photos to attach.
• Visibility: You can change it for each post with "Change visibility" on the Records screen.
• Deleting a post: "Delete post" on the Records screen deletes the note, photos, and wish. Wish links you sent will also stop working. The visit record (shrine, date, and location) and Wish Points remain.
• Deleting your account and records: "Delete account and records" on the Settings screen deletes your account, visits, photos, wishes, reports, and blocks from the server. This cannot be undone.
• Blocks: You can unblock users from "Blocked users" on the Settings screen.
• Plans on the shrine website: You can delete a plan and its replies from the organizer link. Repliers can edit their own reply from the browser they replied from. If you want your reply deleted, for example because you lost the key, ask the organizer or contact us (Section 14).
• Requests for disclosure, correction, suspension of use, deletion, etc.: Please contact us at the address in Section 14. We will respond in accordance with applicable laws.

13. Security and Changes to This Policy

The Developer takes reasonable measures to prevent leaks, loss, unauthorized access, and similar incidents involving your information.

We may update this policy to reflect changes in laws, the App's features, or third-party services. We will announce important changes in the App or on our website.

14. Contact

• App: Negai (com.fjsh.negai)
• Developer: fjsh (Sho Fujimoto)
• Email: zero@zerotoone.app