Privacy Policy
This English version is provided for convenience. If it differs from the Japanese version, the Japanese version prevails.
Artlet Lab ("we", "us") sets out this privacy policy for how your information is handled in the application "MeowGuard" (the "App").
1. Operator
| Operator | Artlet Lab |
|---|---|
| Address | Wind Ebisu Bldg. 8F, 2-4-8 Ebisunishi, Shibuya-ku, Tokyo 150-0021, Japan |
| Representative | Ko Kimura |
| Contact | support@artlet-lab.com |
2. Our approach
What you save in the app (logins, cards, notes, attachments, cat names, settings and so on — "your saved data") is encrypted and stored on your device.
We have no servers and do not collect your saved data. The master password used to open the app and the recovery key used if you forget it are never sent to us either. No one without your master password or recovery key, including us, can read your saved data.
The app connects to the internet only for features such as sync, Breach Check and getting site logos, and for purchases and ads (see section 5).
3. Information stored on your device
- Your saved data: stored encrypted. It is deleted when you delete the app.
- Settings and membership status (the date you started the free trial, your purchase status, and the type and ID number of the service you used to sign in): stored unencrypted. These do not include your saved data.
- If you use device backups (iCloud Backup, Google backup and so on), your saved data (still encrypted) and your settings and membership status may be included in those backups.
When you choose "Export", the app turns your saved data into a file and hands it to the location or recipient you choose. You decide where it goes; we are not involved.
4. Sync (only if you choose it)
If you choose to sync, the app saves your saved data to your own Google Drive (in an area reserved for the app) or iCloud.
- Your saved data is encrypted on your device before it is saved. Neither we, Google nor Apple can read its contents.
- The sync destination also holds, unencrypted, the names, sizes and last-modified dates of the files, and a value used to check that your master password is correct (not the master password itself).
- Using Google Drive requires signing in with your Google account. The app neither stores nor sends the name or email address that Google provides at that time.
Files saved to the sync destination are not deleted by "Erase everything" in the app. To delete them, use "Manage apps" in your Google Drive settings, or the iCloud section in Settings on your iPhone or other device.
5. Information sent to external services
The app communicates with external services only for the following purposes. Except when syncing (section 4), your saved data itself is not sent to these recipients.
| Recipient | Information sent | Purpose |
|---|---|---|
| Google AdMob (Google LLC) | IP address, device type and OS, app information, ad views and taps, etc. | Showing ads, preventing fraud, measuring ad performance (only on iPhone, iPad and Android, and only when using the app for free) |
| App Store (Apple Inc.) / Google Play (Google LLC) | Information needed to process a purchase and to check whether you have purchased | Purchasing paid features and checking purchase status |
| RevenueCat (RevenueCat, Inc.) | Purchase record number (see section 6), the products purchased and their expiry dates, device type and OS, app version, IP address | Managing purchase records and letting you use your purchases on other devices |
| Stripe (Stripe, Inc., including Link, the Stripe service that acts as the seller for payments) | Card or other payment details and the email address you enter on the web payment page for Windows | Processing payments on Windows |
| Sign in with Apple (Apple Inc.) / Sign in with Google (Google LLC) | Information needed to sign in | Signing in to share your purchase records with other devices |
| Have I Been Pwned (Breach Check; on by default, can be turned off in Settings) | Only the first 5 characters of a value made by converting a password into an irreversible form (SHA-1) | Checking whether a password appears in past data breaches |
| Sites whose URLs you enter (getting site logos; on by default, can be turned off in Settings) | IP address, device and app information, and the fact that you accessed the site | Showing the site's name and logo in the list. If the logo is hosted on another site, the app also accesses that site |
| Apple Maps (Apple Inc.) | The address you tapped | Opening an address in Maps (only when you tap an address) |
Ads. Ads are shown only on iPhone, iPad and Android, and only if you are not a member. Only non-personalized ads (ads not based on your interests) are shown. The app does not use advertising identifiers (Android Advertising ID or iOS IDFA). On iPhone, the app does not ask for permission to track you across other apps and websites. On Android, if you are in the European Economic Area (EEA), the UK, Switzerland or a similar region, we ask for your consent to how information is used for ads through Google's consent screen before showing ads. You can change your consent at any time from Ad privacy settings in the app settings. On iPhone and iPad, the app does not show this consent screen, and in these regions Google shows only limited ads that do not use information linked to you. No ads are shown on Mac or Windows.
For how Google handles information, see How Google uses information from sites or apps that use its services.
Purchases. Payments are processed by Apple, Google or Stripe. We do not receive your credit card or other payment details.
Text recognition (Android). The feature that reads text from photos does the reading on your device. The recognized text and images are not sent. However, the Google component used for recognition (ML Kit) may send information about how it is working (performance and error information) to Google.
Transfers abroad. The recipients above are mainly companies based in the United States, where data protection rules may differ from those in Japan.
6. Sign-in and purchase records
The app asks you to sign in only when you become a member and when you restore purchases. Signing in is used only to share your purchase records with your other devices and has nothing to do with your saved data.
- Sign in with Apple: the only thing the app receives from Apple is a number that identifies you. The app does not ask for your name or email address.
- Sign in with Google: the app converts your Google account number into an irreversible form before using it. The app neither stores nor sends your name or email address.
These numbers ("purchase record numbers") are sent to RevenueCat, which manages purchase records. When you open the membership information screen or the cat adoption screen, RevenueCat may create a temporary number, even before you sign in.
7. Device features
- Face and fingerprint recognition (including Windows Hello): used to open the app. Face and fingerprint information is handled by your device; neither the app nor we receive it.
- Camera: used to scan QR codes, read text and take photos to attach. Photos you take are stored only on your device.
- Photos: used to choose images to attach or to read text from.
- Notifications: used to let you know about items that are about to expire.
- Display over other apps (Android): used to show the cat that floats at the edge of the screen (only if turned on in Settings).
- AutoFill: used to fill in your ID and password in sign-in fields in other apps and websites (only if turned on in Settings).
- Clipboard: content you copy is cleared after a set time. The app prevents copied content from going into clipboards shared with other devices or into clipboard history.
The app does not use your location, contacts or microphone.
8. Analytics
The app does not use analytics or any tools for collecting usage data.
9. Age
The app is not directed at children under 13.
10. Deleting your account and your requests
Deleting your account. From "Delete account" in the app's Settings, you can request that your sign-in records and purchase records be deleted. Within 30 days of receiving your request, we will delete the records held by RevenueCat and Stripe and notify you by email. Payment records (when and how much was paid) are kept to the extent required by law.
If you used Sign in with Apple, stop using it for the app under "Sign in with Apple" in Settings on your iPhone or other device.
Information on your device. Your saved data and settings can be erased with "Erase everything" in the app's Settings. This also erases your sign-in records. The record of the date you started the free trial and the files in your sync destination (section 4) remain.
Your requests. We do not hold your saved data. For requests to disclose, correct or delete your purchase records, and for questions about this policy, please contact us at the address in section 1.
11. Changes to this policy
We may change this policy. If we make important changes, we will announce them on this page.