Privacy Policy
daitaienn (the "Operator") handles information about users of the expense-tracking service "waruni" (the "Service") in accordance with this Privacy Policy.
This English version is a translation provided for convenience. If there is any difference between the Japanese version and this translation, the Japanese version prevails.
1. Information we collect
- Account information: email address, display name, language setting, and the version and time you agreed to the Terms of Service
- Records: expenses recorded by you and your group members (amount, date, category, who paid, memo), categories, recurring expenses, cost-splitting ratios, and the group's currency and time zone
- AI assistant information (if you use it): conversation content, images you send such as receipts, and usage counts
- Sign-in and security information: information about signed-in devices (IP address, browser type), operation counts, and sign-in codes (stored as hashes and invalid after 10 minutes)
- Access logs: logs used to investigate failures and protect the Service (time, URL, error details, etc.). We take care not to include expense contents, email addresses or sign-in codes in these logs
The Service does not use passwords, so we do not collect them. We currently do not collect credit card or other payment information.
2. How we use information
- To provide the Service (sign-in, saving and showing records, sharing within groups, the AI assistant)
- To email sign-in codes and important notices about the Service
- To prevent abuse and protect the Service
- To investigate failures and improve the Service
- To respond to inquiries
The Operator does not look at the contents of records except when necessary, for example to investigate a failure. We do not use records for advertising and do not sell them.
3. Sharing with group members
Records are visible to every member of the same group. Your display name is also visible to members. Your email address is not shown to other members.
4. Service providers
To run the Service, the Operator entrusts the handling of information to the following companies. Both are based in the United States, and information may be handled outside Japan.
| Company | What they do | Information handled |
|---|---|---|
| Cloudflare, Inc. (US) | Servers, database, email delivery, bot checks (Turnstile) | All information in the Service |
| Anthropic, PBC (US) | AI assistant processing | Conversations, images and necessary records when you use the AI assistant |
- Anthropic's terms state that it does not use information sent from the Service to train its AI. The information is kept for a short period for abuse monitoring and then deleted.
- The United States does not have a personal information protection system equivalent to Japan's. The Operator uses these companies after confirming that their contracts and terms require appropriate handling of personal information. Information about other countries' systems is available on the website of Japan's Personal Information Protection Commission.
5. External transmission
The sign-in screen uses Cloudflare Turnstile to check that you are not a robot. Information about your device and browser is sent to Cloudflare for this purpose. See Cloudflare's privacy policy for how Cloudflare handles it.
6. Cookies
The Service uses only a cookie that keeps you signed in and a cookie that remembers your language. We do not use cookies for advertising or tracking.
7. Retention
- Account information and records are kept until you delete your account or group.
- Signed-in device information is kept for up to 90 days after sign-in, or until you sign out.
- Sign-in codes become invalid after 10 minutes and are deleted after use.
- AI assistant conversations are deleted after a certain time has passed since the last exchange.
- Records of AI usage counts and costs are kept to manage limits and check costs.
- Deleted information may remain in recovery backups for up to 30 days.
8. When you delete your account
- You can delete your account at any time from your account settings.
- If you are the owner of a group with no other members, the group and all of its records are deleted too.
- In groups where other members remain, records stay as the group's records. Expenses you recorded or paid are shown as "Former member", and your email address and display name are not kept. Your conversations are deleted. Records of AI usage counts and costs are kept in a form no longer linked to you, so that usage and cost limits keep working.
- Group expenses can be exported as CSV.
9. Requests for disclosure, correction or deletion
To request disclosure, correction, suspension of use or deletion of your information, contact support@waruni.app. After confirming your identity, we will respond in accordance with the law. You can also change your display name and email address, and delete your account, from your account settings.
10. Security
We protect information through encrypted connections, hashed sign-in codes, limits on sign-in attempts, separation of records by group, and minimizing what is written to logs.
11. Changes to this policy
The Operator may change this policy when necessary. For important changes, we will announce them in the Service and ask for your agreement again.
12. Contact
Operator: daitaienn
Contact: support@waruni.app
Effective: 2026-10-18