Informativa sulla privacy

1. Scope and definitions

This Policy applies to information we collect, use, store, or transmit through the Service.
"Personal data" includes information treated as personal information or personal data under applicable law.
"Tracking" includes tracking as defined by Apple's App Tracking Transparency framework and other applicable platform rules.

2. Controller

Company: CLOViZ Inc.
Address: 4-13-7 Akatsutsumi, Setagaya-ku, Tokyo 156-0044, Japan
Representative: Sotaro Masaki, Representative Director
Privacy contact: info@cloviz.co.jp

3. Information we collect

We may collect the following information as needed to provide the Service.

Category	Examples
Account and contact information	Name or display name, email address, profile image, language, country or region, and authentication-provider information
Identifiers and device information	Our user ID, session information, device ID, advertising identifier, AppsFlyer ID, push token, IP address, operating system, browser, app version, and device settings
Usage and analytics information	App launches, pages viewed, clicks, session duration, referral source, advertising campaign, approximate country or region, cookies, and similar technologies
Learning and gameplay information	Quiz answers and results, learning history, played hands, actions, game results, matching, rankings, leak analysis, and other study or gameplay records
AI and user content	AI chat prompts, hand reviews, conversation history, AI responses, feedback, voice input or transcription data, and content submitted through support or surveys
Purchase and subscription information	Products, subscriptions, price, currency, purchase, renewal and expiration dates, refunds, storefront, transaction IDs, receipt-validation results, entitlements, and coin or credit balances and usage
Diagnostics and security information	Crash, error, performance, network, audit, and fraud-prevention information

Payment card details may be handled directly by Apple, Google, Paddle, or another payment provider and not collected by us. We receive transaction information needed to verify purchases and provide entitlements.

4. How we collect information

We collect information:

when you register, submit content, make a purchase, or contact us;
automatically through the app, website, cookies, SDKs, and logs when you use the Service;
from Apple, Google, Paddle, authentication providers, advertising and measurement providers, and other partners; and
from external services when you choose to connect or share through them.

5. How we use information

We use information to:

create accounts, authenticate users, and maintain security;
provide quizzes, lessons, gameplay, rankings, AI chat, and other Service features;
verify purchases, grant coins and entitlements, manage renewals, cancellations and refunds, and prevent purchase fraud;
analyze learning progress, personalize the Service, provide recommendations, and improve our products;
send push notifications, service communications, campaigns, and other permitted messages;
measure advertising, installs, attribution, and purchase journeys;
diagnose failures, improve quality and performance, and prevent misuse;
respond to support, privacy requests, disputes, and legal obligations; and
create and use aggregated or de-identified statistics.

6. Service providers and external transmissions

We use third-party services including those below. The information sent depends on your device, settings, features used, and consent choices.

Category and representative providers	Information	Purpose
Google Analytics and Google Signals	User ID, IP address, device and browser information, page and interaction data, approximate location	Analytics, product improvement, advertising measurement
AppsFlyer	AppsFlyer ID, our user ID, hashed email address, device or advertising identifiers, campaign, product, transaction ID, revenue and currency	Install and advertising attribution, fraud prevention
Meta Platforms	Device or advertising identifiers, hashed email address, usage and campaign information	Advertising measurement and, with required consent, tracking
Firebase services and Sentry	Device and push-token information, crashes, errors, performance and diagnostic interactions	Notifications, diagnostics, quality improvement
Cloudflare, Vercel, and Microsoft Azure	IP address, network logs, account information, and Service data stored on our behalf	Delivery, security, hosting, and storage
Ahrefs Web Analytics	Page views, referrals, browser and device information, country or region statistics	Traffic and content analytics
Anthropic, DeepSeek, or OpenAI	AI prompts, conversation context, hand information, and identifiers or pseudonymous information needed to provide a feature	AI responses, analysis, transcription, and related AI functionality
Apple, Google, and Paddle	Account or storefront identifiers, products, transactions, amounts, currencies, subscriptions, and refund information	Payments, verification, subscription management, refunds, fraud prevention

We review service providers as appropriate and use contracts or other measures to supervise their handling of information. A provider's own privacy policy and terms may also apply.

7. Advertising, tracking, and cookies

The Service may use cookies, device identifiers, advertising identifiers, and SDKs for analytics, advertising measurement, and fraud prevention.
On iOS, we request permission through App Tracking Transparency before performing activities that require tracking permission. If you decline, we may still perform measurement that does not use the advertising identifier or is otherwise permitted by platform rules.
You can manage available choices through device privacy settings, browser cookie settings, notification settings, and settings provided in the Service.
For Google users who have consented to personalized advertising, Google Signals may associate Service usage with information held by Google.

See Privacy Choices and Data Requests for instructions.

8. AI features

Content submitted to AI features may be sent to us and an AI provider to generate responses, maintain conversation history, manage usage, protect safety, and improve service quality.
Do not submit sensitive personal data, confidential information, or third-party information you are not authorized to provide in a free-form AI field.
Provider retention, data use, and processing locations may vary according to the provider, our contract and settings, and the feature used.

9. Disclosure to third parties

We do not disclose personal data to third parties without consent except:

as required or permitted by law;
to protect life, health, safety, or property where consent is impracticable;
for public-health or child-protection purposes permitted by law;
to cooperate with a lawful government request;
to service providers acting within the purposes described in this Policy;
in connection with a merger, reorganization, financing, or transfer of all or part of our business; or
through another arrangement, such as joint use or an opt-out disclosure, where permitted and properly notified under applicable law.

10. International processing

Information may be processed by providers or on servers located outside Japan. We take measures required by applicable law, which may include contractual safeguards, reviewing provider security, and providing required information.

11. Retention and account deletion

We retain information for as long as needed for the purposes in this Policy, our contracts, legal obligations, dispute resolution, fraud prevention, and security.
When you delete your account, we disable sign-in and delete or replace direct account details such as your name, email address, profile image, and authentication credentials so that the account is anonymized.
Purchase, refund, accounting, audit and fraud-prevention records, learning or gameplay history, and records required to preserve Service integrity may be retained after removing or pseudonymizing direct identifiers where legally and operationally necessary.
Deletion from backups and service-provider systems may take a reasonable period.

12. Security

We use reasonable organizational and technical safeguards, including access controls, authentication, protection of data in transit and at rest, logging, monitoring, and oversight of personnel and service providers.

13. Access, correction, restriction, and deletion

Subject to applicable law, you or an authorized representative may request notice of purposes, access, correction, addition, deletion, restriction, erasure, cessation of third-party disclosure, or disclosure of third-party disclosure records. We may request information needed to verify identity or authority.