Last updated: October 28, 2026
This is a translation for convenience. If it differs from the Japanese version, the Japanese version prevails.
The provider of Tapless (the "App"; "we") handles users' personal information in accordance with the Act on the Protection of Personal Information of Japan (the "APPI") and other applicable laws. This policy explains what information the App collects, how it is used and shared, and the choices you have.
AI chat and creating events from photos send the text and photos you enter, related events, and other information to the Gemini API provided by Google LLC in the United States. The App uses the paid Gemini API service. Google does not use your inputs or responses to improve its products or train models. Google may retain records for a limited period for abuse prevention and other safety purposes. In version 26.0.0 and later, we explain the handling and obtain your explicit consent before the first submission. See Section 3.
1. Information we collect
Information you enter or send
- Account: email address, password (stored hashed; we never see it), display name, and profile image. If you use Sign in with Apple, the identifier and email address provided by Apple (which may be a private relay address)
- Calendars: calendar names and colors; event titles, notes, dates and times, all-day setting, location, color, icon, time zone, recurrence, and how the event was created (manually, by AI, etc.)
- Sharing: members of shared calendars, records of invitation links issued and accepted, and invitation permissions
- AI chat: the text and photos you send. Photos are reduced in size on your device before sending
- Search terms: words you search for event locations and for cities in the weather view, and the latitude and longitude of the city you choose
- Surveys: ratings and comments you choose to submit, the app version, and the language
- Inquiries: what you send us by email and the email address needed to reply
Information recorded when you use the App
- AI usage records: time of use, tokens processed and estimated consumption, whether a photo was included, which function was run, success or failure, restriction reasons, request and affected-event identifiers, and a hash of the photo used to confirm a follow-up refers to the same photo (not the photo itself). We do not store conversation text or photos in our database
- Input habits: per event name, typical duration, start time, color, icon, reminder timing, and similar habits (Section 4)
- Purchases: Tapless Plus subscription status, product identifier, and expiration date. We do not receive payment details such as card numbers (Apple processes payments)
- Crash information: technical details of crashes, unresponsive states and similar faults, device model, OS and app versions, and an installation identifier used to group diagnostic reports
Information stored only on your device
- A copy of your events for faster display, upcoming events shown in widgets and on the Lock Screen, event reminders, records of your edits used to work out input habits, and whether surveys or review prompts have been shown, and the AI consent status, disclosure version, acceptance time, and your declaration that you are at least 18. These are not sent to us
The App does not collect your device's location, contacts, access to your whole photo library, or the advertising identifier (IDFA). Only the single photo you choose is read.
2. How we use information
- To provide calendars, sharing, notifications, widgets, weather, public holidays, and other features
- To create, edit, delete, and find events with AI, and to read events from photos
- To suggest defaults based on your input habits
- To manage the limits of the free plan and Tapless Plus, and to provide the subscription
- To prevent abuse and excessive use, and to keep the service secure
- To investigate bugs and improve the service based on surveys
- To respond to inquiries and send important notices
We do not use your information for advertising and do not sell it to third parties.
3. AI features and sharing with Google
What is sent
When you use AI chat (including creating events from photos), the following is sent through our server to the Gemini API of Google LLC (United States):
- Your current message and recent conversation (up to 12 messages), and the photo if you sent one
- Event information needed for the operation (such as titles, dates, and locations when the AI looks up or edits events)
- Displayed calendar names, the selected date, the default calendar for new events, references to recently found events (such as identifiers, titles, times, and edit permissions), and your device’s time zone and language
- Relevant input habits (Section 4)
- Your profile display name (to find your own row in a table that lists several people, such as a shift roster)
Your account email address, password, and purchase information are not sent to Google as authentication information. However, information you include in messages, images, or event notes is part of the submitted content. Recent event references are used only as needed to identify the subject of the conversation.
How Google uses it
The App accesses the paid Gemini API service through a Google Cloud project with an active billing account. Under the paid-service terms, Google does not use prompts or generated responses to improve its products or train models, and handles them under its data processing agreement. Google may retain records for a limited period to detect or prevent abuse, maintain service safety, or meet legal requirements. This paid API arrangement is separate from the App’s free and Plus plans; the same provider handling applies to all users of the AI features.
Do not enter or send information unnecessary for scheduling, or sensitive information (such as health or medical history, financial information, or passwords) in AI chat. When sending photos that show other people's names (such as shift rosters), keep them to what is necessary.
Consent
In version 26.0.0 and later, before the first AI submission, we show the recipient, information sent, and Google’s handling, and ask you to confirm that you are at least 18 and explicitly consent. No AI submission is made without consent. Consent is stored in the App on your device for each account and is not transferred to another account. We ask again if the information sent or its handling changes materially. In Settings, open “AI data sharing” to review or withdraw consent. Withdrawal stops new AI submissions. It does not itself immediately erase information already sent to Google, which is subject to Google’s retention and deletion terms. You can still create and edit events manually without consenting to AI data sharing.
4. Input habits (AI learning)
The App works out your input habits from events you create and edit (for example, "Gym" usually lasts 90 minutes and starts at 18:30) and uses them as defaults when you create events later. Preferences you state in AI chat are also stored.
- Habits are calculated on your device, and only the results are stored on our server
- Ask "What do you remember?" in AI chat to see them, and say "Forget it" to stop using them. A record that use was stopped is kept so the habit is not applied again automatically
- Stored habits are never shared with other users
- Habits are not used to decide which calendar an event goes into
5. External services (service providers, etc.)
The App uses the following services to provide its features. Each receives only the information needed for its function.
| Service (provider, country) | Purpose | Information shared |
|---|---|---|
| Supabase (Supabase, Inc., USA; data stored in the Tokyo region) | Authentication, database, file storage, server processing | Information in Section 1 that is stored on our server |
| Resend (Plus Five Five, Inc., USA) | Delivery of sign-up confirmation, password reset, and other authentication emails | Recipient email address, message content including authentication or reset links, and delivery status. AI chat text and selected images are not sent |
| Gemini API (Google LLC, USA) | Interpreting events with AI | As described in Section 3 |
| Google Places API (Google LLC, USA) | Searching event locations | Search terms and language |
| Apple WeatherKit (Apple Inc., USA) | Weather forecasts | Latitude and longitude of the chosen city, time zone, and language (through our server) |
| Nominatim (OpenStreetMap Foundation, UK) | Searching cities for weather | Search terms |
| Nager.Date (Austria) | Public holidays by country | Country code and year (no personally identifiable information) |
| RevenueCat (RevenueCat, Inc., USA) | Subscription management and analysis of purchases and renewals | Your App account identifier and purchase information |
| App Store (Apple Inc., USA) | Purchases and payments | Collected directly by Apple |
| App Attest (Apple Inc., USA) | App authenticity verification and abuse prevention | Keys and verification data needed to verify the App. Our server handles public keys and verification records |
| Sentry (Functional Software, Inc., USA) | Crash reporting and investigation | Diagnostic information in Section 1, including an installation identifier |
Service providers also handle connection information, such as IP addresses, needed for communications. Diagnostic information may be associated with an installation identifier; we do not describe it as anonymous. Resend processes authentication emails and delivery records under its retention policies. We also use Resend for developer AI-budget alerts; those alerts do not contain users’ chat text, images, or email addresses.
6. Provision to third parties in foreign countries
As listed in Section 5, the App uses services of providers located in the United States, the United Kingdom, and Austria.
- Google (Gemini API): with your explicit consent, we send information to Google’s processing infrastructure outside Japan for the AI purposes in Section 3, under the paid-service terms and data processing agreement. It may be temporarily stored or processed in the United States or other countries where Google or its processors maintain facilities. The United States has no comprehensive federal privacy law equivalent to the APPI; personal information is protected by state laws and sector-specific laws (see the Personal Information Protection Commission of Japan's survey of foreign data protection systems). Google's handling is governed by Google's Privacy Policy and the Gemini API Additional Terms of Service
- Other services: these process information on our behalf to provide features. Their terms of service and data processing terms restrict use of the information for other purposes
For more information about the systems of these countries or the measures taken by recipients, please contact us (Section 11).
7. Storage and security
- Information stored on our server is kept in Supabase's Tokyo region, and communications are encrypted
- The database uses row-level access control, so users can access only their own data and the data of shared calendars they belong to
- Access keys for AI and other services are not kept on devices and are handled only on the server
- The AI features have limits on the number and size of requests to prevent mass automated sending
8. What other members of shared calendars can see
- Members of a shared calendar see your display name, profile image, and the events you add to that calendar. Your email address is not shown
- Profile images are stored where anyone with the URL can view them, so they can be shown to members. Do not use an image you would not want others to see
- Anyone who receives an invitation link can join while it is valid. Please handle links with care
Short-term abuse prevention records
To prevent repeated free allowances and excessive AI use, we transform verified email addresses and Apple identifiers with a secret-keyed hash and retain the hashes with usage counts and estimated consumption. This ledger does not contain the original email address, Apple identifier, chat text, or photos. The short-term AI usage and operation records are retained after account deletion until a deletion deadline 35 days after the first day of the month following use, and removed by scheduled processing. These records may include in-app user, request, and affected-event identifiers, restriction reasons, and verification results. Hashed identifiers are still matched for abuse prevention; we do not publish or sell them as anonymous information. App Attest public keys become eligible for scheduled deletion 70 days after last use, and key-to-authentication-identifier associations 70 days after creation. Temporary verification records are also removed after a short period. Unsupported devices are not automatically blocked.
9. Retention and deletion
- Normal account information, such as events and profiles, is kept until you delete your account. Normal AI usage records are deleted with the account. The short-term abuse-prevention records described above are retained for the stated periods and removed by scheduled processing after their deadlines
- You can delete your account at any time in the App's settings. Deletion removes your authentication account, profile image, the events and calendars you created, your shared calendar memberships, input habits, AI usage records, and survey answers. Shared calendars you own will no longer be visible to other members
- You can delete individual events while keeping your account, and stop the use of input habits by saying "Forget it"
- Deleting your account does not cancel Tapless Plus. Cancel it in Apple's subscription settings
- The copy of your events, widgets, and reminders on your device are removed when you sign out or delete your account. All information on the device is removed when you delete the App
- Records kept by external services such as Google, Apple, RevenueCat, and Sentry are subject to their own retention and deletion policies. Deleting your App account does not itself immediately erase Google’s records. Contact us about requests relating to those records; we will address them under applicable law and the relevant service terms
10. Requests for disclosure, correction, suspension of use, etc.
You may request notification of the purpose of use, disclosure, correction, addition, or deletion, suspension of use or erasure, suspension of provision to third parties, and disclosure of records of provision to third parties regarding your personal information that we hold. You can change or delete your display name, profile image, and events in the App at any time. For other requests, please contact us (Section 11). After confirming your identity, we will respond without delay in accordance with the law.
11. Contact
For questions or complaints about this policy or the handling of personal information, please contact:
Email: 31foresight@gmail.com
12. Children
The App is intended for people aged 18 and over. People under 18 may not use it. Before enabling AI, we ask you to declare that you are at least 18; we do not collect your birth date or identity documents. If we learn that information from someone under 18 has been collected, we will review the matter through our contact channel and take appropriate action, such as restricting use or deleting information.
13. Changes to this policy
We may change this policy to reflect changes in law or features. The updated policy takes effect when posted on this page. If how we use or share information changes significantly, we will notify you in the App. When features in preparation (such as Gmail integration) become available, we will add how they handle information to this policy.