Privacy Policy

Operator

The following operator provides the app and is responsible for how personal data is handled.

• Name: TSURU Masashi
• Address: disclosed without delay on request
• Contact: support@costfolio.app

1. Privacy principle

This app handles subscription data that users choose to manage.

Data that identifies you, your user-level subscription history, and row- and history-level data are never sold or provided to third parties.

Costfolio does not currently generate, send, or store fixed-cost data for peer comparisons, or provide aggregate reports to third parties. If non-identifying aggregate statistics are offered in the future, Costfolio will first introduce separate optional consent, update this policy and the data-handling information shown in the App Store and Google Play, and confirm safeguards.

2. Data we store

The app stores what you enter about a fixed cost: the service name, amount, currency, billing cycle, classification, term dates, notes and change history, among others.

If you use an account or cloud save, Costfolio processes the identifier and email address provided by Apple or Google sign-in, where available, identifiers for the Costfolio account and its data area, cloud save data and its save time, registered devices, current consent state, account settings, and optional profile data. The email address is used for authentication and to show the signed-in account; it is not added as an optional profile field.

Notification preferences and a device's save state are treated as per-device settings.

Profile fields are all optional. Where a field is added, what it collects and why is shown on screen, and consent is asked first.

If you use Pro Unlock or Cloud Pass, Costfolio stores the purchasing store, transaction or purchase identifiers, purchase, renewal, cancellation and refund state, access rights, matching identifiers, and limited processing records needed for billing, deletion, and fraud prevention. Costfolio does not receive card numbers or card security codes.

If you use support email, the account-deletion Form, or the product-feedback Form, Costfolio receives what you choose to enter, such as contact details, device and issue information, an optional support code, a deletion request, or feedback. These channels do not ask for passwords, verification codes, payment details, individual fixed-cost records, or CSV data.

For troubleshooting, Costfolio processes limited diagnostic codes and operational logs that describe an operation and its result. Fixed-cost content, notes, and cloud-save content are not normal operational log fields.

3. Purposes

Data is used to provide subscription lists, analysis, history, reminders, cloud save, restore, merge, CSV import/export, account management, purchase verification and access rights, support, deletion requests, product feedback, fraud and abuse prevention, troubleshooting, service improvement, and legal or terms compliance. Optional profile data is used for account settings and service improvement. The current anonymous-statistics preference is not treated as advance blanket consent for future comparison-data transmission or external reporting. Any other purpose is stated and, where required, put to you for consent.

4. Storage location

Local use stores fixed-cost data on this device. Cloud save places saved data under the signed-in Costfolio account. Current consent state, anonymous-statistics preference, optional profile, and purchase or access information are stored separately from cloud-save content. CSV exports are files managed by the user. Authentication, cloud, store purchase, email, and Google Forms providers may process information in their environments, including outside Japan.

5. Sharing and sale

The app does not sell or provide personal data or user-level subscription history to third parties. Personal data goes outside the service only where the law requires it, where you direct it, or through the service providers described in section 7.

Costfolio does not currently provide or sell fixed-cost comparison data or aggregate reports to third parties. If non-identifying aggregate statistics are offered externally in the future, including for payment, Costfolio will define the data, purpose, safeguards, optional consent, this policy, and the data-handling information shown in the App Store and Google Play before doing so. Costfolio does not plan to place third-party ads or advertising software inside the app.

6. Anonymous statistics

An account can store an anonymous-statistics preference, but Costfolio does not currently use it to generate, transmit, store in Costfolio's systems, or display fixed-cost comparison data. Saving an optional profile is not consent to transmit fixed-cost data.

If a future comparison feature returns value to the user, the app will show the data and purpose and ask for separate optional consent. Individual users, individual fixed costs, and single history rows will not be provided externally. Safeguards such as minimum group sizes, combining small groups, rounding extreme values, and preventing identifying combinations will be settled before launch.

7. External services and platforms

Costfolio uses Firebase and Apple or Google sign-in services for authentication and cloud save, the App Store or Google Play for purchases and subscription management, Google Forms for deletion requests and product feedback, and email services for support. The public website uses Cloudflare for delivery and protection and Google Fonts for font delivery; those providers may process request information such as IP address, page URL, and browser or device details. Each provider processes information needed to provide its part of the service. Before adding a new analytics, diagnostic, or similar external service, Costfolio will review the data and purpose and update required policy, consent, and the data-handling information shown in the App Store and Google Play. Costfolio does not provide identifiable information to advertising networks or third parties for tracking.

8. Security

The app uses access control, authentication, communication protection, permission management, and data minimization to reduce leakage, loss, damage, and unauthorized access risks. Absolute security is not guaranteed.

9. Retention and deletion

Data stored on this device remains until you delete it. The informational pages on the public site — support, legal documents and the like — neither ask you to enter fixed-cost data nor store it.

Costfolio does not offer a normal user-facing action to delete only cloud-save data while keeping the Costfolio account. Deleting the Costfolio account removes the account, cloud save, registered devices, optional profile, current consent state, and account data used to provide purchases and access. Local data on this device, the Apple or Google account itself, and the purchasing-store subscription are separate.

After Cloud Pass ends, cloud save remains restorable through the end of the 30-day recovery period shown in the app. After that deadline it cannot be restored and becomes subject to deletion processing. Costfolio does not promise that physical deletion completes immediately after the recovery deadline.

Limited records needed to confirm purchase status, handle billing or refunds, prevent duplicate deletion, prevent fraud or abuse, or meet legal obligations may be kept for as long as those purposes require. These records do not include fixed-cost or cloud-save content and are deleted or de-identified when no longer needed. Account deletion may remove some information sooner.

Retention periods for support email, deletion requests, feedback, and operational logs vary with the type of information, an open request, security needs, and applicable law.

10. Choices and rights

The anonymous-statistics preference, optional profile, reminders, and cloud save can be changed in settings. Users may request access, correction, deletion, suspension of use, or inquiry where required by applicable law. If the app cannot be used, a Costfolio account deletion request can be started from the public data-deletion page. Use the support page for other requests.

11. International transfer

Cloud providers and platform providers may store or process data outside Japan. In that case, data is handled based on applicable laws and provider safeguards.

12. Children

This app is not designed as a child-directed service. Users who need guardian consent under local law should use the app only with guardian consent.

13. Changes

This privacy policy may change. A correction that does not expand data practices or reduce rights may be announced without blocking renewed consent. Important changes such as a new data category or purpose, external provision, longer retention, or reduced rights will be announced in the app or on a public page, and required renewed consent will be requested before affected cloud, purchase, or profile operations.

External transmissions

See External Transmissions for the current recipients, information sent and purposes.

Contact

For questions, get in touch through Support.