Privacy Policy

The Service collects the following information.

• Information received when you sign in: when you sign in with your Google or Apple account, the email address and an identifier used to distinguish users that we receive from the sign-in provider you choose. We do not receive your password
• Content you register: Places (name, address, links, estimated cost, notes, tags, etc.), Itineraries (routes and costs), and Proposals
• Usage status: your current plan, the date and time you started using the Service (used to decide whether to show ads on the Free plan), and the number of operations you make (how many times you added, changed, or viewed content on a given day; used to apply the rate limits). It does not include what you registered
• Inquiries: the message you submit through the contact form and, if you provide one, your reply-to email address
• Images you upload: the images themselves that you choose to upload as thumbnails for Places, Itineraries, and Proposals (a paid plan feature)

Uploaded images do not contain metadata (Exif) such as the location or date and time a photo was taken. Because images are re-created inside your browser before they are sent, this information is never transmitted. The Service also has no feature that collects your location.

We use the information we collect only for the following purposes.

• Providing the Service (saving, displaying, and sharing the content you register)
• Responding to your inquiries
• Preventing misuse and investigating the cause of outages
• Showing ads to users on the Free plan (deciding whether to show them)
• Applying the rate limits (Article 4 of the Terms of Service) and detecting extremely heavy use

We do not use the content you register (Places, Itineraries, Proposals, notes, images, etc.) to deliver ads or to analyze your behavior.

Except as required by law, we do not provide the information we collect to third parties. This does not apply, however, where information is sent outside the Service as a result of your own actions, such as creating a share link or connecting an external AI assistant (see the sections below for each).

To operate the Service, we use the services of the following providers. The information entrusted to us is stored on these providers’ systems.

• Amazon Web Services (Amazon Web Services, Inc.): storage of the content you register and running the Service (Tokyo Region)
• Google (Google LLC): sign-in (authentication is exchanged with Google only when you choose “Sign in with Google”), analytics, and showing ads on the Free plan in the iPhone app (Google AdMob; for details, see the “Cookies and analytics” section)
• Apple (Apple Inc.): sign-in (authentication is exchanged with Apple only when you choose “Sign in with Apple”), and payments for paid plans in the iPhone app (App Store; your payment information is held directly by Apple, and the Service neither collects nor stores it)
• RevenueCat (RevenueCat, Inc.): managing records of subscriptions purchased in the iPhone app (App Store) and switching on the paid plan (iPhone app users only; it does not receive payment information)
• Cloudflare (Cloudflare, Inc.): storage and delivery of images you upload (used only when you upload an image)
• LocationIQ (Unwired Labs): finding locations from addresses, and addresses from locations, for places outside Japan (only the address or location is sent, and only when it can’t be found through the Geospatial Information Authority of Japan (GSI) or is outside Japan)
• Stripe (Stripe, Inc. and Stripe Payments Japan, Ltd.): payments for paid plans (used only when you sign up for a paid plan). Your credit card information is held directly by Stripe; the Service neither collects nor stores it. The Service keeps only identifiers for your Stripe customer record and subscription, and the status of your subscription (plan, next renewal date, etc.).

The content you register is stored on servers in Japan (Tokyo Region). However, uploaded images are stored in storage in the Asia-Pacific region (Cloudflare R2), and the country of storage cannot be specified. In addition, all of the providers above are headquartered outside Japan, and information may be handled outside Japan for some processing, such as authentication and incident response. Information on each country’s personal information protection system is available in the privacy policies published by each provider and in materials published by the Personal Information Protection Commission (Japan).

A share link for a Proposal can be viewed by anyone who knows the URL (no sign-in required). You can set a password and an expiration date, and you can revoke a link at any time. Shared pages are read-only, and viewers cannot write to them.

Please take care not to include information that should not be disclosed, such as the names, contact details, or addresses of people other than yourself, in the content you register.

When you add a URL to a Place, the Service’s server may access it, save the page title or the location (URL) of its image, and use that information for display. We do not copy or store the linked image itself (images you upload yourself are different; the Service stores those). Fetching is triggered only by your action; we do not crawl or fetch in bulk.

With the feature that imports places in bulk from files (CSV or zip), the selected files are read only inside your browser. The files themselves are never sent to the Service and are not stored. The Service keeps only the information about the places you decide to import (name, note, link, tags, address, phone number, want to go / been there, type, and favorite).

The Service provides a way (MCP) for you to connect to and operate the Service from the AI assistant you use (such as Claude or ChatGPT). This connection is enabled only when you authorize it.

Once you authorize a connection, that AI assistant can, on your behalf, view, add, change, and delete your Places, Itineraries, and Proposals, and create share links. When it does, some or all of the content you have registered is sent to the AI service you use (what is sent depends on what you ask the AI assistant to do). How that information is handled after it is sent is governed by the privacy policy of that provider.

The Service stores, in encrypted form, the information needed for the connection (a record of your authorization and information for authentication). This information has a retention period and is automatically deleted 30 days after the connection was last used (after deletion, you will need to authorize again to keep using the connection). If you have not authorized a connection, no such information is sent.

To understand how the Service is used and to improve it, the Service uses Google Analytics (GA4), an analytics tool provided by Google LLC. Measurement is limited to the following pages: the introduction (home), the guide to using ikutoco with AI assistants, FAQ, plans, Contact, and legal pages. We do not send data about the screens you use while signed in or about views of pages opened through share links.

When you open a page that is measured, the following information is sent from your device to Google LLC.

• The address (URL) of the page viewed and the address of the page viewed before it
• The date and time of viewing and the time spent on the page
• IP address (handled by Google in a partially masked form)
• The type and version of your device, OS, and browser, screen size, and language setting
• Approximate region (at the level of country and prefecture/state)
• A number stored in a cookie that identifies your browser

The recipient that receives and handles this information is Google LLC. The purpose of sending it is to understand how the Service is used and to improve the Service based on the results, and it is not used for any other purpose. We do not send information that directly identifies you, such as your name or email address, or the content of the Places or Itineraries you register. Google’s handling of the information it receives is governed by Google’s privacy policy.

You can disable collection by installing the Google Analytics Opt-out Browser Add-on.

In addition, links registered on Places are shown with the icon of the linked site (a small mark for the site). To display these icons, the following information is sent from your device to Google LLC.

• The domain name of the linked site (e.g. “tabelog.com”; not the full page address)
• IP address
• The type and version of your device, OS, and browser

The sole purpose of this transmission is to retrieve and display the icon of the linked site, and it is not used for any other purpose. We do not send which page of the Service you were viewing.

In the iPhone app, users on the Free plan see a full-screen ad when they return to a list. Ads are not shown on the website, on pages opened through share links, or on the screens of users on a paid plan (Pro). To show ads, the following information is sent from your device to Google LLC.

• IP address
• The type and version of your device, OS, and app, screen size, and language setting
• A number generated on your device for each app
• That an ad was displayed or tapped

The recipient that receives and handles this information is Google LLC (Google AdMob). The purposes of sending it are to display ads, to count how many times ads are displayed and tapped, and to prevent fraudulent impressions and clicks. We do not send information that directly identifies you, such as your name or email address, or the content of the Places or Itineraries you register.

We do not show ads based on information from other apps or websites (tracking).

When you open the purchase screen for the paid plan in the iPhone app, or make or restore a purchase, to sell the paid plan and check its status, the following information is sent from your device to RevenueCat, Inc.

• A number the Service assigns to your account (it does not include your name or email address)
• Records of purchases, renewals, and cancellations on the App Store (product, price, currency, and date)
• IP address
• The type and version of your device, OS, and app, and your language and region settings

The recipient that receives and handles this information is RevenueCat, Inc. The purposes of sending it are to sell the paid plan, to check the status of your subscription and turn on the paid plan, and to prevent fraudulent purchases, and it is not used for any other purpose. We do not send the content of the Places or Itineraries you register.

If you use the Service from the European Economic Area (EEA), the United Kingdom, or Switzerland, we will ask for your consent to the transmission of information for ads through a consent management screen certified by Google. Even if you do not consent, you can continue to use all features of the Service. You can change your consent at any time from “Ad privacy choices” on the Account page in the app.

If an inappropriate ad is shown, please let us know through the contact form.

To keep you signed in, authentication information is stored in your browser’s storage area (local storage). It is used only to display the Service and is never sent to third parties. It is erased when you sign out.

The content you register is kept until you delete it. To delete your entire account, you can do so yourself from “Delete account” on the Account page after signing in. When you delete your account, your registered content and sign-in information are deleted immediately (this cannot be undone).

If this does not work, or if you would like any deletion other than deleting your account, please let us know through Contact.

The Service is operated by KOHE Labs (a trade name).

The name and address of the operator will be provided without delay, after verifying your identity, upon a request made under the Act on the Protection of Personal Information (Japan).

If you wish to request disclosure, correction, deletion, or suspension of use of the personal information we hold, please contact us through Contact. After confirming that you are the person concerned, we will respond in accordance with applicable laws.

We may revise this Policy as necessary without prior notice. The revised Policy takes effect when it is posted on this page.