Shizuku

Privacy Policy

This Privacy Policy explains how Shizuku handles personal information and free-text input data in compliance with applicable Japanese laws.

Last updated: 2026-04-08

1. Information We Collect

We collect information you provide directly, including free-text input, account details, inquiry content, and other submitted data. We may collect technical and usage data such as IP address, device or browser identifiers, operation logs, crash logs, and analytics identifiers. Free-text input may contain personal information or sensitive personal information. Please do not enter unnecessary personal information, especially third-party or highly sensitive data.

2. Purposes of Use

We use collected information for service provision (processing, display, storage, synchronization), user support, identity verification where necessary, security and abuse prevention, and incident response. We also use information for service quality improvement, statistical analysis, feature improvement, and operational monitoring. If we use free-text or related data for AI/model improvement beyond response generation, we will do so only based on lawful basis such as your prior opt-in consent where required.

3. AI/LLM and External Processors

To provide AI features, we may send input data to external AI/LLM providers for inference and response generation. We contractually and technically assess whether providers process data only within instructed scope, including whether data is used for training, retention period, access controls, and subcontracting conditions. Where processing is outsourced, we provide necessary and appropriate supervision of processors.

4. Third-Party Provision and Cross-Border Transfer

Except as permitted by law, we do not provide personal data to third parties without your consent. If we provide personal data to a third party in a foreign country where consent and additional disclosures are required, we will provide legally required information (such as destination country and protection measures) and obtain consent as required.

5. External Transmission (Analytics/SDK)

If our app or website sends user-related information from your device to external services via analytics tools, SDKs, or tags, we will make available the categories of transmitted information, recipient service names, and purposes in an easily accessible notice. Shizuku uses Google Analytics 4 provided by Google LLC / Google Ireland Limited. When enabled, this tool may receive information such as page views, page URLs, referrer URLs, approximate device and browser information, language settings, and pseudonymous identifiers stored in analytics cookies. We use this information to understand aggregate usage trends, measure feature adoption, improve service quality, and troubleshoot operational issues. Google Analytics is disabled by default until you make a choice through our consent banner, and you can later change your decision by clearing the stored cookies in your browser. You may be able to control certain analytics or personalization settings through in-app controls or your device/browser settings.

6. Security Measures

We implement necessary and appropriate security measures, including access control, authentication, encryption in transit and at rest where applicable, logging and monitoring, vulnerability management, and personnel training. We also establish internal rules, incident response procedures, and processor oversight frameworks according to data risk and business operations.

7. Retention and Deletion

We retain personal data only as long as necessary for the stated purposes and legal obligations, using category-based retention criteria (for example: core content, derived data, and operational logs). When data is no longer necessary, we will delete or anonymize it without undue delay unless retention is required by law.

8. Data Subject Rights and Contact

Subject to applicable law, you may request access, correction, suspension of use, deletion, or other rights regarding retained personal data. Requests are handled after identity verification under our procedures. If fees are required by law or policy, we will notify you in advance. Contact: Please use the support contact listed in the app. Operator details and procedural information are made available in a form accessible to users.

9. Data Breach Response

If a data breach or similar incident occurs, we will investigate promptly, mitigate impact, and take recurrence-prevention measures. When legally required, we will report to relevant authorities and notify affected individuals in accordance with applicable law and guidelines.

10. Policy Updates

We may update this Policy as laws, services, or data handling practices change. Material updates will be notified or published through this page or in-product notice before or on the effective date.

This policy should be read together with the Terms of Use and in-product consent or notice screens.

Analytics consent

We use Google Analytics to understand aggregate usage and improve Shizuku. You can accept or reject analytics cookies, and your choice will be remembered on this device. Read our Privacy Policy for details.