音声（iPhone アプリの「声で調べる」）: マイクと Apple の音声認識を使い、話した言葉を文字にします。端末の中で認識できる言語は端末の中で、できない言語は Apple のサーバーで処理されます（Apple のプライバシーポリシーが適用されます）。運営者が音声そのものを受け取ったり保存したりすることはなく、本サービスで使うのは文字にした結果だけです。マイクと音声認識は、端末で許可した場合だけ使います
AI による解析と生成: 写真、単語、母語・学習言語、日記の本文、復習の結果を送ります。送り先は運営者が選ぶ次のいずれかです: Google（Gemini）、OpenAI、Anthropic、DeepSeek、Moonshot AI（Kimi）、OpenRouter（その先の AI 事業者を含む）、OpenAI 互換の API を提供する事業者。また、TypeSafe（Jev）に単語・例文・候補の語・復習の結果を送り、判定と記憶の予測に使います
読み上げ音声: 読み上げる文字（単語・例文）だけを送ります。Microsoft（Azure AI Speech）、Google（Gemini の読み上げ、Cloud Text-to-Speech）、ElevenLabs、OpenAI 互換の API。作った音声は、利用者と結びつかない共有の音声として保存します
地図: Apple（Apple のマップ）。地図の表示と場所の名前の検索は、端末から Apple へ緯度・経度を送って行います（運営者のサーバーを通りません）
Apple（iPhone アプリ）: Apple でログインした場合の認証、声で調べるときの音声認識（端末の中で認識できない場合の音声）、場所の名前の検索（緯度・経度）、アプリ内課金（始めた場合の購入の記録）
広告: Google（AdMob）。動画広告を表示するとき、端末の情報と広告の表示・視聴の記録が Google に渡ります（第6条）
AI への送信の同意: iPhone アプリは、初めて AI の機能を使う前に、送るもの（写真・写真アプリから選んだ画像・スキャンの画面・単語・入力した文章・声で調べた言葉を文字にしたもの・学ぶ言語などの設定）、送り先、使い道を示した画面で同意をいただきます。同意しない場合は、AI を使う機能（カメラ・スキャン・カードの作成・日記の添削など）は使えず、何も送りません。集めた単語の閲覧と復習はそのまま使えます。同意は設定の「プライバシー」→「AIへのデータ送信の同意」からいつでも取り消せます。AI に送る情報には、メールアドレスや名前を含めません。運営者自身が、利用者の写真や日記を AI の学習に使うことはありません。
各国の制度: 米国には連邦の包括的な個人情報保護法はなく、分野ごとの連邦法とカリフォルニア州消費者プライバシー法（CCPA）などの州法があります。EU には一般データ保護規則（GDPR）があり、個人情報保護委員会は EU を日本と同等の水準にあると認めています。中国には個人情報保護法がありますが、政府による情報の取得を広く認める法律（国家情報法など）もあります。詳しくは、個人情報保護委員会が公表している「外国における個人情報の保護に関する制度等の調査」で確認できます。
Noriyuki Kondo (“the operator”) handles information about users of CatchWords (the iPhone app; “the Service”) as described below, in accordance with Japan's Act on the Protection of Personal Information and other applicable laws. This is a translation; if it differs from the Japanese version, the Japanese version prevails.
1. Information we collect
Account information: email address, display name and profile photo (if you set one). If you sign in with Google or Apple, the email address and similar details we receive from that service
Photos: photos you take or choose, the selfie after a capture (if you turn on “Selfie mode” in Settings) and photos you add to your diary. The iPhone app reads only the images you pick from the Photos app. If you turn on “Save to Camera Roll” in Settings, photos are added to the Photos app on your device (the app does not read your library)
Voice (“Search by voice” in the iPhone app): the microphone and Apple's speech recognition turn what you say into text. Languages that can be recognised on the device are handled on the device; others are processed on Apple's servers (Apple's privacy policy applies). The operator never receives or stores the audio itself; the Service uses only the resulting text. The microphone and speech recognition are used only if you allow them on your device
Words and study records: the words you catch, cards with meanings, examples and explanations, your collection, diary text, your review answers and results, and your review schedule
Usage: when you open the app, which screens you use, how many captures, scans and reviews you do and how long they take, and how often AI is used and fails
Advertising: when an ad is shown, Google (AdMob) receives device information (model, OS, IP address and similar) and a record of the ad being shown and watched. The Service does not use the advertising identifier (IDFA) and does not ask for App Tracking Transparency permission
Location: your device's location (latitude and longitude) when you take a photo, only if you allow location access on your device. If you turn on “Location reminders” in Settings, your current location when you open the app is compared with saved places (that current location is not stored). In the iPhone app, “Location reminders” are triggered by the device (iOS) when you come near a saved place; your current location is not sent to the operator
Language and settings: display language, native and study languages, your device's language (to choose the first display language), and settings such as theme and sound
Paid plan information: whether you are on Pro. If in-app purchases start in the iPhone app, we receive the purchase record (product, period and transaction identifiers) from Apple to check that it is valid (not your payment details)
Error reports: what you send when you report an error in a word
Technical information: to deliver the Service, your IP address, device type and similar details are processed on the servers of the providers listed below
2. How we use it
To provide and operate the Service (sign-in, saving, syncing between devices)
To analyse objects and text in your photos and to generate word cards, explanations, examples and quizzes with AI
To generate pronunciation audio
To turn words you say into text and look them up (iPhone app)
To find or generate images that match a word
To show maps and place names, and to send location reminders
To schedule reviews (including memory predictions)
To provide paid plans and manage payments and cancellations
To prevent abuse, investigate bugs and improve the Service. The operator views and analyses per-user usage figures (such as the number of captures and reviews, active days and screen usage). To investigate bugs and answer your enquiries, the operator may also view the photos you capture and the place names where they were taken. Your email address, exact location (coordinates) and diary text are not included
To produce overall statistics (such as the number of users and how many keep using the app), handled in a form that does not identify individuals
To show ads (only when you choose to, after using up the free captures; see section 6)
To respond to enquiries
3. Sharing with third parties
The operator does not provide your personal information to third parties without your consent, except where required by law. This includes cases where it is needed to protect a person's life, body or property and your consent is hard to obtain, and cooperating with government bodies performing duties set by law. If the Service is taken over through a merger or business transfer, your information will be handled to the same standard as this policy. Providing information to the providers in section 4 is done to entrust them with work needed to run the Service. The operator does not sell your information.
4. Service providers, by purpose
Which providers are used depends on the feature and on the operator's settings. This list also includes providers that are not in use now but would be used if the settings were switched.
Hosting, database and sign-in: Supabase (database, authentication, photo storage and the server functions; the data is kept on servers in Tokyo), and Google or Apple (if you sign in with that account). All information in the Service is stored or processed here
AI analysis and generation: photos, words, native and study languages, diary text and review results are sent to one of the following, chosen by the operator: Google (Gemini), OpenAI, Anthropic, DeepSeek, Moonshot AI (Kimi), OpenRouter (including the AI providers behind it), or a provider of an OpenAI-compatible API. Words, example sentences, candidate words and review results are also sent to TypeSafe (Jev) for judgements and memory predictions
Pronunciation audio: only the text to be read aloud (words and example sentences) is sent: Microsoft (Azure AI Speech), Google (Gemini speech, Cloud Text-to-Speech), ElevenLabs or an OpenAI-compatible API. The audio is stored as shared audio that is not linked to you
Images: only the word (search term) is sent: Unsplash, Wikimedia Commons, Wikipedia, Openverse (WordPress.org; it indexes freely licensed photos such as Flickr, and your device loads their thumbnails), and Higgsfield (image generation)
Maps: Apple (Apple Maps). Maps are shown and place names are looked up by sending the coordinates from your device to Apple (not through the operator's servers)
Apple (iPhone app): sign-in with Apple, speech recognition for search by voice (audio, when it cannot be recognised on the device), place-name lookup (coordinates), and in-app purchases (the purchase record, once they start)
Advertising: Google (AdMob). When a video ad is shown, device information and a record of the ad being shown and watched go to Google (see section 6)
Consent to sending data to AI: before you use an AI feature for the first time, the iPhone app shows a screen explaining what is sent (photos, images picked from Photos, scan frames, words, text you enter, words you said as text, and settings such as your study language), where it goes and what it is used for, and asks for your consent. If you do not consent, AI features (the camera, scanning, card creation, diary correction and so on) are unavailable and nothing is sent; browsing your words and reviews still work. You can withdraw consent at any time in Settings → Privacy → “Consent to send data to AI”. Your email address and name are never sent to AI providers. The operator itself does not use your photos or diary to train AI.
5. Transfers outside Japan
Many of these providers are located outside Japan, and your information may be processed and stored on servers outside Japan. The main countries of the providers that receive personal information are:
United States: Supabase, Google, Apple, OpenAI, Anthropic, OpenRouter, Microsoft, ElevenLabs
China: DeepSeek, Moonshot AI (only if the settings use them)
Their systems: the United States has no comprehensive federal privacy law, but has sector-specific federal laws and state laws such as the California Consumer Privacy Act (CCPA). The EU has the General Data Protection Regulation (GDPR), and Japan's Personal Information Protection Commission recognises the EU as providing an equivalent level of protection. China has a Personal Information Protection Law, but also laws that broadly allow government access to data (such as the National Intelligence Law). For details, see the survey of foreign systems published by Japan's Personal Information Protection Commission.
The operator uses each provider after confirming that, through its terms or data processing agreements, it takes measures equivalent to those required by Japan's Act on the Protection of Personal Information (such as security measures and no use beyond the purpose). Providers that receive only the text of a word (such as image search) receive nothing that identifies you. For the country of a provider not listed above, or for more about the measures providers take, contact us (section 12) and we will tell you without delay. By agreeing to this policy and using the Service, you consent to your information being provided to providers in these countries.
6. Advertising
When you have used up the free captures, the Service shows a video ad from Google AdMob only if you choose to (watching it to the end gives you one more capture). Google uses device information and the record of the ad being watched to deliver ads, measure them and prevent fraud, and may show ads personalised to your interests. To learn how Google uses information, see How Google uses information from sites or apps that use our services. The Service does not use the advertising identifier (IDFA). Users in the European Economic Area, the UK and Switzerland are asked for consent through Google's consent message, and can change it at any time in Settings → “Legal” → “Ad privacy choices”.
7. Retention and deletion
We keep your information while you have an account. You can delete it yourself at any time from “Delete account” in Settings. Deletion cannot be undone. It erases: your profile and sign-in account, your photos (captured photos and profile photo), word cards, collection and review records, diary, scan and usage records, AI usage records and error reports.
The following remain after deletion:
Dictionary entries you added (headwords, meanings and so on). They are part of the dictionary shared with other learners, so they are kept, but unlinked from you
Cached pronunciation audio, made from the text of words and shared; it is not linked to you
Copies in database backups and server logs, which are erased when each provider's retention period ends
Information already sent to providers, which they handle under their own terms
When you delete your account in the iPhone app, the app also erases the information stored on your device (section 10). Deleting the app also removes it from your device.
Deleting your account does not cancel a paid plan automatically. If you bought it with an in-app purchase, cancel it before deleting, in the iPhone Settings app → your name → Subscriptions.
8. Your rights
You may ask for disclosure of the information the operator holds about you, for its correction, addition or deletion, for its use to stop or for it to be erased, and for its provision to third parties to stop. You can edit your display name, photos and words in the app, and delete your account and its data from “Delete account” in Settings. For other requests (including notice of the purposes of use and disclosure of records of provision to third parties), use the contact in section 12. We will respond without delay in accordance with the law after confirming that you (or your agent) are making the request. There is no fee. If the law does not allow us to comply, we will tell you why.
9. Children
The Service is not directed at children under 13, and children under 13 may not use it (Terms of Service, section 2). If you are under 18, please get your parent's or guardian's consent before using the Service (including buying a paid plan). If we learn that we have collected information from a child under 13, we will delete it.
10. Storage on your device
The Service does not use cookies for tracking or advertising. When ads are shown, Google's AdMob component stores on your device the information it needs to deliver ads and to remember your consent.
The iPhone app stores the following on your device: what keeps you signed in (the Keychain), display and sound settings, the state of your consent to sending data to AI (date and version), the words, small photo thumbnails and review count shown in home screen widgets (a storage area shared by the app and its widgets), scheduled notifications (review reminders and location reminders), photos waiting to be sent while offline (“Photo waiting to be analyzed”) and unsaved diary drafts, and cached images and audio. None of this is sent to the operator's servers, except photos and diary entries that are sent once you are back online.
11. Security
The operator takes the following measures to prevent leaks, loss or damage of personal information.
Basic policy: we set out this policy and follow the relevant laws and guidelines
Handling rules: for each stage (collection, use, storage, provision and deletion) we set how information is handled and who is responsible
Organisational measures: a responsible person is appointed, with procedures for reporting and responding to handling that breaks the law or this policy, or to signs of a leak
Personnel measures: anyone handling personal information is required to keep it confidential and handle it properly
Physical measures: devices that handle personal information are protected against theft and loss, with screen locks and encrypted storage
Technical measures: connections are encrypted (HTTPS), and the database restricts access per user so that only you can read and write your own information. Keys for external services are held only on the server, never in the app, and when the operator looks at usage, the scope is limited as described in section 2
Understanding the external environment: before using providers in other countries, we check those countries' systems (section 5) and take security measures accordingly
12. Operator and contact
Questions about this policy or how we handle personal information, requests for disclosure and similar, and complaints are received at the operator's contact below.
Operator
Noriyuki Kondo
Address
Disclosed without delay upon request (please request it at the email address below)
Phone
Disclosed without delay upon request (please request it at the email address below)
We will announce changes to this policy in the Service. For significant changes that add new purposes of use, we will ask for your consent again before you continue using the Service.
14. Additional information by region
Users in Taiwan
Under Article 8 of Taiwan's Personal Data Protection Act: the collector is the operator (section 12). The purposes are those in section 2, mainly falling under Taiwan's categories of performance of contractual relationships, consumer and customer management and services, education and learning services, information (communication) services and e-commerce services. The types of personal data are listed in section 1. The period of use is as in section 7; the regions are Japan and the countries in section 5; the users are the operator and the providers in section 4; the method is electronic storage, processing and transmission. You may request to inquire into and review your data, receive copies, supplement or correct it, stop its collection, processing or use, and delete it (section 8). Without required information such as an email address you cannot create an account, and without photos, location or voice the related features cannot be used.
Users in the European Economic Area, the UK and Switzerland
Where the GDPR or the UK GDPR applies, the operator processes personal data on these legal bases: performance of a contract (providing the Service, accounts and the paid plan); consent (location, microphone and photo access, sending data to AI providers, and personalised ads; you can withdraw consent at any time); legitimate interests (preventing abuse, security, improving the Service and statistics); and legal obligations (such as keeping transaction records). You have the rights of access, rectification, erasure, restriction of processing, data portability and objection, and may complain to the supervisory authority in your country. Transfers outside the EEA and the UK rely on appropriate safeguards such as the European Commission's standard contractual clauses.
Users in California, United States
The operator does not sell personal information for money. When ads are shown, Google may collect device information and use it for interest-based ads (section 6), which may count as “sharing” under state law; ask us at the contact in section 12 to opt out. You have the rights to know, to delete, to correct and to opt out of sale or sharing, and you will not be treated unfavourably for using them.
語音（iPhone App 的「用語音查詢」）：使用麥克風與 Apple 的語音辨識，把你說的話轉成文字。可在裝置上辨識的語言會在裝置上處理，無法在裝置上辨識的語言會在 Apple 的伺服器上處理（適用 Apple 的隱私權政策）。經營者不會取得或保存聲音本身，本服務只使用轉成的文字。麥克風與語音辨識僅在你於裝置上允許時使用
主機、資料庫與登入：Supabase（資料庫、身分驗證、照片儲存與伺服器處理；資料存放在東京的伺服器），以及 Google 或 Apple（以該帳號登入時的身分驗證）。本服務的所有資料都在此儲存或處理
AI 分析與產生：照片、單字、母語與學習語言、日記內容、複習結果，會送到經營者選擇的下列其中之一：Google（Gemini）、OpenAI、Anthropic、DeepSeek、Moonshot AI（Kimi）、OpenRouter（包含其背後的 AI 業者），或提供 OpenAI 相容 API 的業者。另外，單字、例句、候選詞與複習結果也會送到 TypeSafe（Jev），用於判斷與記憶的預測
朗讀語音：只送出要朗讀的文字（單字與例句）：Microsoft（Azure AI Speech）、Google（Gemini 語音、Cloud Text-to-Speech）、ElevenLabs 或 OpenAI 相容 API。產生的語音會以與你無關聯的共用語音儲存
同意將資料傳送給 AI：iPhone App 在你第一次使用 AI 功能前，會以畫面說明要傳送的內容（照片、從照片 App 選的圖片、掃描的畫面、單字、輸入的文字、用語音查詢的詞轉成的文字、學習語言等設定）、傳送對象與用途，並取得你的同意。若不同意，就無法使用 AI 功能（相機、掃描、建立字卡、日記批改等），也不會傳送任何資料；瀏覽已收集的單字與複習仍可照常使用。你可以隨時在設定的「隱私」→「同意將資料傳送給 AI」中撤回同意。傳送給 AI 的資料不包含電子郵件地址與名字。經營者本身不會用你的照片或日記訓練 AI。
用完免費拍攝次數後，只有在你自行選擇時，本服務才會顯示 Google AdMob 的影片廣告（看完後可增加 1 次拍攝）。Google 會使用裝置資訊與廣告觀看紀錄來投放廣告、衡量成效與防止詐欺，也可能依你的興趣顯示個人化廣告。關於 Google 如何使用資料，請參閱「Google 如何使用採用 Google 服務的網站或應用程式所收集的資訊」。本服務不使用廣告識別碼（IDFA）。位於歐洲經濟區、英國與瑞士的使用者，會透過 Google 的同意畫面確認是否同意，並可隨時在設定的「條款與標示」→「廣告隱私設定」中變更。