Privacy policy

The short version

Your goals, the messages your circle sends you, and your archive live in your own iCloud account. Kotozute does not run servers that store them, cannot read them, and does not sell or share them with anyone. There is no account to create and no email to give us.

Who we are

Kotozute is developed by Victor Manuel Lagunas Franco, an independent developer based in Japan (“we”). For anything in this policy, write to victormanuelfrancodev@gmail.com.

What is stored, and where

• Your private data — goals, milestones, photos, messages you keep, your circle, your display name and profile photo — is stored on your device and synced through Apple iCloud (CloudKit) under your Apple ID. Only you, and devices signed in to your Apple ID, can access it. We have no access to your private database.
• Shared goals. When you invite someone through iCloud, Apple creates a shared record holding the goal title, cover, milestones and the messages that person writes. Members you invite see the goal and their own messages. You can remove any member, or stop sharing entirely, from the app at any time.
• Messages from the web. When someone writes to you from your link, their name and message are placed in a temporary public CloudKit inbox tied to an unguessable token. Your app collects it and deletes the public copy, usually within seconds. We can technically read that inbox while a message waits there; we do not, and we keep no copy.
• Subscriptions. Purchases are processed by Apple. We use RevenueCat to validate them; RevenueCat receives an anonymous app-generated identifier and purchase receipts — never your name, email or content. See RevenueCat's privacy policy.
• On-device intelligence. Suggestions, summaries, covers and voice features run on your iPhone using Apple's on-device models. Nothing you write is sent to us or to a third-party AI service.

The web page for guests

The page someone opens from your link sets no cookies and loads no analytics or trackers. To limit abuse, our hosting provider (Vercel) and our rate limiter see the sender's IP address for the duration of the request; it is held in memory for up to an hour and is never stored with the message. Standard server logs may retain IP addresses and request metadata for a short period as part of normal hosting operation.

What we do not collect

No account, no email, no analytics, no advertising identifiers, no location, no contacts. We do not track you across other apps or websites, and we do not use your data for advertising.

Notifications and widgets

Delivery is scheduled locally on your device. To learn that a new message exists, the app receives a silent push from Apple's CloudKit; the push carries no message content. Widgets and the Lock Screen read from the app's own storage on your device.

How long data is kept

As long as you keep it. Messages you let go of are deleted, not archived. A message waiting in the public web inbox is deleted as soon as your app collects it, and in any case within 30 days. Deleting your account (below) removes everything at once.

Deleting your data

In the app, open Settings → Delete my account and data. This removes every goal, message and member from your device and from your iCloud, stops all sharing, and revokes your web links. You can also remove the app's data from iCloud in your device's iCloud settings. Subscriptions are managed by Apple and are unaffected.

Your rights

Because your data sits in your own iCloud, you can already see, export (the book), correct and delete all of it yourself. If you are in the EU/EEA, the UK, California or Japan, you also have the rights your local law gives you — access, correction, deletion, portability and objection — and you can exercise any of them by writing to victormanuelfrancodev@gmail.com. We do not sell personal information.

Reporting abuse

You can block or mute anyone in your circle from the app, and report a message to victormanuelfrancodev@gmail.com. Blocked people are removed from your shared goal and their new messages are discarded before you see them.

Children

Kotozute is not directed at children under 13 and does not knowingly collect information from them.

Changes

If this policy changes in a way that matters, the date above changes and the app links here. Continued use after a change means you accept it.

Contact

victormanuelfrancodev@gmail.com