Privacy Policy

Sansaku helps you explore Japan — public events, famous spots, food, and trip planning. This policy explains what data the Sansaku app and the sansaku.app website involve, why, who we share it with, and the choices you have.

You can use Sansaku without an account. The sansaku.app website is a free public-events map that needs no sign-up; the account, sync, analytics, and advertising practices below apply to the Sansaku mobile app.

We do not track youacross apps or companies: no advertising identifier (IDFA), no “Allow tracking” prompt, and any ads are non-personalized.

Collected only in the mobile app, and only if you choose to:

• Account (Sign in with Apple). Optional and skippable. Apple gives us a stable app-specific identifier and — only if you share them — your name and email. Used solely to run your account and sync your content. We never receive your Apple password.
• Saved content & trips. Places and dishes you save, trips you create, and places you mark as visited. Synced to your account when signed in; otherwise kept on your device.
• Trip-planning preferences. The cities, dates, interests, pace, party, budget, and any dietary or must-do notes you enter are sent to generate your itinerary, tied to a pseudonymous install identifier rather than your name unless you are signed in.

• Approximate location (only when you request it).When you use a “near me” feature, the app reads your approximate location (~100 m) to find nearby content; our server resolves it to a region and does not store the raw coordinates. On the website, location is used only in your browser to center the map and is not sent to our servers.
• Usage analytics (app; opt-out).To improve the app we collect a random per-install identifier and basic, non-identifying events (e.g. app launched, a place saved), plus your app version and device locale. The identifier is created on your device and resets if you reinstall; it is not your hardware ID or the advertising identifier. Turn it off anytime with “Share anonymous usage data” in Settings.
• Service integrity. The app uses Apple App Attest to confirm requests come from a genuine copy of Sansaku (fraud prevention). This device key is not linked to your identity and contains no personal information.

We do not collect contacts, photos, health, financial, or browsing-history data.

We use a few providers, each receiving only what its function needs:

• Apple — Sign in with Apple, App Attest, and in-app purchases (the Sansaku Plus subscription, handled by Apple; we do not receive your payment details).
• Google AdMob — the in-app banner ad, configured as non-personalized (npa=1); no advertising identifier is requested and no tracking prompt is shown. Users in the EEA/UK are shown a Google consent form as required.
• TelemetryDeck — privacy-friendly usage analytics (described below).
• Vercel and Neon — host our website, backend, and database as our service providers.

We use the privacy-friendly analytics service TelemetryDeck (provider: TelemetryDeck GmbH, Von-der-Tann-Str. 54, 86159 Augsburg, Germany) to analyze usage data. The use is based on Art. 6 para. 1 lit. b GDPR, as we require reliable and efficient tools for collecting app usage data in order to fulfill the contract with you.

The data processed by TelemetryDeck is completely anonymized and does not allow any conclusions to be drawn about personal information. Collected data includes:

• An anonymized, untraceable user ID (per app installation)
• Actions defined by the app publisher (e.g., “app launched,” “settings opened”)
• A rounded timestamp (to the nearest hour)
• Device metadata (e.g., system version, app version, device type)
• Additional metadata defined by the app publisher

TelemetryDeck does not store IP addresses, cookies or tracking technologies, or persistent identifiers that could be traced back to individuals. On our own backend, the per-install identifier is associated with your account only if you sign in.

• On-device data (saved content when signed out, preferences, the install ID) stays until you delete it or uninstall the app.
• Account and synced content is kept while your account exists; deleting your account removes it and revokes the Apple sign-in token.
• Pseudonymous analytics and service-integrity logs are kept for a limited period for aggregate analysis and abuse prevention.

• Use Sansaku without an account — your data stays on your device.
• Turn off analytics with “Share anonymous usage data” in Settings.
• Grant or revoke location access in iOS Settings; the app works without it.
• EEA/UK users can adjust ad-consent choices in the app.
• Delete your account in Account → Delete Account.
• Depending on where you live (e.g. the EEA/UK under GDPR, or California under the CCPA/CPRA), you may have rights to access, correct, delete, or port your data, and to object to certain processing. Contact us and we will respond as required by law.