Privacy Policy

Kaikoku (PocketChime) — Established July 10, 2026

Basic Policy

This app does not collect or transmit personal information that could identify users. There is no account registration, and the developer never holds identifiable personal information. We perform only anonymous usage analytics for service improvement and show non-personalized ads (no tracking) — see "Usage Analytics" and "Advertising and Tracking" below.

Information Kept on Your Device and in Your Own iCloud

Location — Used to calculate sunrise and sunset, to retrieve the weather for your current location, and to record where you passed someone in the Rite of Encounter (rounded to about 10 metres). When "Notify even in a pocket" is enabled, "Always" location is used to detect nearby mages even while the app is stowed away. Your location itself is never sent to the developer.
Calendar — Read only for "Prophecy for Thee" (displaying the day's next scheduled event). Its contents never leave your device.
Face ID — Used for authentication in the "Rite of Countenance." Facial data is handled entirely within Apple's own framework, and the app learns only whether it succeeded or failed.
Motion (acceleration, gravity) — Used only for the pendulum and wrist-rite effects.
Bluetooth and proximity detection (the Rite of Encounter) — off by default; it runs only when you light it in settings. While lit, the radio carries only a shared identifier and a disposable token — never your byname, your location, or anything identifying your device. When you pass another Kaikoku user nearby, that token is resolved to their byname (a nickname of your choosing; we ask that it carry no real name or personal attribute), and the dial flashes to tell you. Turn on “Notify even in a pocket” and it will tell you even while stowed away, gauging nearness by iBeacon (the radio transmits only while the app is in the foreground). Encounter records (the peer's byname, the time, and the rounded place) are kept on your device and in your own iCloud, so they survive a new device or a reinstall; they are never sent to the developer. It does not work while both are stowed away.
Records such as settings, the Incantation Record, and Achievements — all are stored on your device (and in your iCloud backup).

External Services

Apple Weather (WeatherKit) — To retrieve weather, location coordinates are sent to Apple's service. Apple Weather data sources.
Cloud Firestore (Google Firebase, public record) — used to look up a peer's byname for the Rite of Encounter. Only an anonymous ID minted on your device, a disposable token, and the byname are placed there; no real name, location, or identity. The record expires automatically about 15 minutes after its last renewal, and is removed when you turn the rite off. Writes use Firebase Anonymous Authentication — no account and no sign-in are required. Nothing is written while the rite is off. Two further records that hold no name (only the anonymous ID and the public ID) remain so the same person can reclaim their entry; they are deleted 30 days after last use.
Firebase Crashlytics (Google) — To fix app issues, technical information at the time of a crash (device model, OS version, crash location, etc.) is sent. It does not include personal information such as name, contact details, or location.
Firebase Analytics / Google Analytics (Google) — Anonymous usage analytics to improve our service. It aggregates statistics such as which features are used, in a form that does not identify individuals. We do not use an advertising identifier (IDFA), and ad personalization is disabled.
App Store (StoreKit) — Payments are processed through Apple's payment infrastructure, and the developer never handles card information or the like.

Advertising and Tracking

This app displays ads through Google AdMob. All ads are non-personalized — we do not use an advertising identifier (IDFA), and we do not carry out cross-app or cross-device ad tracking (subject to App Tracking Transparency), so no tracking-permission dialog appears. To deliver ads, cap how often they appear, and prevent fraud, the ad provider (Google) may process device and approximate information, but it is never shared with the developer in a form that identifies you, nor used to track you across other apps. Ads come as a small banner at the bottom of some screens, occasional full-screen interstitials (daily-capped, never during sleep or an alarm), and a rewarded “Farsight” ad you may choose to watch to remove ads for a while. In the EU and UK, a Google User Messaging Platform consent form is shown before ads appear; while ads are removed (via the Pact or Farsight) none are shown.

Usage Analytics

To improve our service, we conduct anonymous usage analytics (Firebase Analytics / Google Analytics). This aggregates statistics such as which features are used most, in a form that does not identify individuals, and is not tracking for advertising purposes. Ad personalization is disabled. Our website likewise conducts anonymous analytics (Google Analytics), and in regions where consent is required, such as the EU, we request consent in advance.

About the Android Version

The following applies to the Android edition. Apple Weather (WeatherKit) and the App Store (StoreKit) above are used only in the iOS edition. Cloud Firestore, Crashlytics, advertising (AdMob), and usage analytics above are common to both editions.

External Services (Android)

Firebase Anonymous Authentication / Cloud Firestore / Cloud Functions (Google, project tomori-bunko) — Used for the Rite of Encounter, the Pact, and invitations. Only an anonymous ID minted on the device and your byname are handled; no name, address, or identity is retained.
Google Play Billing — One-time purchases are processed through Google’s payment infrastructure (the counterpart to iOS’s StoreKit). The developer never handles card information or the like.

App Permissions (Android)

Alarms and notifications (exact alarm, full-screen intent, post notifications, restore after reboot, foreground service, wake lock, vibrate) — Used to ring exactly on time, show the ringing screen even while locked, restore alarms after a restart, and keep the ringing going.
Bluetooth and location — Used for the Rite of Encounter (passing nearby) and to record the spot of an encounter on the device. On Android, a BLE scan itself requires location permission. The location itself is never sent to the developer.
Camera — Used only to sense brightness for the Waking Rite. No image is saved or transmitted.
Calendar, biometrics, and network — Used to cross-reference the calendar (your day’s omen), authenticate the Rite of Countenance, and communicate with the services above.

Data Deletion (Android) You can delete your anonymous account at any time from the in-app “Encounter” screen, which also removes the server-side record.

Contact

Inquiries regarding this policy: info@cavemen.jp

← Return to the Cover