Privacy Policy

Effective: October 19, 2026. Updated: October 21, 2026 (added steps, favor cards and the album). This is a translation of the Japanese policy; if they differ, the Japanese version prevails.

Summary

We collect your display name, workouts (type, short note, date and time), daily step totals, photos, favor cards, notification token, purchase status and anonymous usage data.
Only your partner can see your photos, workouts and steps. There is no public feed and no search.
Data is stored on Google Cloud (Firebase) in the Tokyo region.
We do not share your data with third parties, show ads or sell data. We do not use the advertising identifier (IDFA).
"Delete all data" in the app's Settings deletes your photos, workouts, steps and account.

1. About this policy

This policy explains what information the iPhone app Pairfit (the "App") handles and how. The App is operated by Process Craft AI (Sakino) ("we").

The App does not ask you to create an account. It tells users apart with a random ID created by Firebase Authentication's anonymous sign-in. We do not receive your email address or phone number.

2. What we collect

Information	Details	Why
Display name	The name you enter (up to 20 characters). It does not have to be your real name	Shown to your partner and in notifications
Workouts	Workout type, short note (up to 140 characters), date and time, emoji reactions from your partner	Weekly counts, showing to your partner, history
Steps	The daily step total counted by your iPhone's Motion & Fitness, and its date. Only when the step target is on and you allow it. No location or route	Counting days you reach the step target as active days, and showing them to your partner
Photos	Photos you take or choose when logging (plus a second back-camera photo if you turn it on), and photos you add when marking a favor done, resized to 1600 pixels on the long side	Showing to your partner, images in notifications and the widget
Pair settings	Weekly goal, step target, the favor cards you write (up to six), fallback type and text, time zone, invite code, weekly results (days, whether each of you hit the goal, the favor drawn), favors marked done, streaks	Weekly results and the wager balance
Anonymous user ID	A random ID created by anonymous sign-in	Linking your workouts to your pair
Notification token	The address Apple uses to deliver push notifications, and your language setting	Telling you about your partner's workouts, reactions and weekly results
Widget key	A random key created on your iPhone, stored only as a one-way hash (SHA-256)	Showing this week's counts and your partner's latest workout in the home screen widget
Purchase status	Apple's original transaction ID, product, expiry date, refund or revocation date, and the ID of the user who purchased	Deciding whether Pairfit Pro is active
Anonymous usage data	Screen views and taps, app version, device type (see 6)	Making the App easier to use

The App does not read your location, contacts or Apple Health data. For steps, it uses only the daily total counted by Motion & Fitness, and sends nothing in weeks when the step target is off. It sends only photos taken with the in-app camera or the single photo you choose in the photo picker. It does not read the rest of your photo library.

3. What your partner sees

The partner you paired with by invite code sees your display name, workouts, daily steps, photos, weekly counts, streak, the favor cards you write, and the favors drawn and done (including album photos). No other users and no one else on the internet can see them.

Photos are stored where only the two members of the pair can read them.
To show a photo in a notification, a link to the photo is sent to your partner's device through Apple's push notification service.
If you end your pair, your partner can no longer see your workouts or photos.
If you choose "Try with a demo partner", the partner is a bot we provide, not a person.

4. Kept only on your iPhone

The pledge signature you draw during setup is stored only on your iPhone and is never sent to our servers.

5. Where data is stored

Workouts, photos, pair settings and purchase status are stored on Google LLC's Google Cloud (Firebase Cloud Firestore, Cloud Storage and Cloud Functions) in the Tokyo region. Anonymous sign-in (Firebase Authentication) runs in Google's data centers in the United States.

6. Usage analytics (Google Analytics for Firebase)

To learn where people get stuck and make the App easier to use, we use Google LLC's Google Analytics for Firebase. It receives:

Screen views and actions (for example, how far you got in setup, paywall views and purchase results)
App launches and time in the App
Device type, OS and app version, country or region (estimated from your IP address)
An ID that Google Analytics creates for each app install (app instance ID)

We do not send your display name, notes, photos, steps, favor card or fallback text, or the advertising identifier (IDFA). Analytics data is not linked to your anonymous user ID. It is not used for ads or tracking, and the App does not ask for App Tracking Transparency permission.

See Google's Privacy Policy for how Google handles information.

7. Notifications

Only if you allow notifications, we use Apple Push Notification service (APNs) to tell you about your partner's workouts, reactions, weekly results and when a pair ends. Notifications include your partner's display name, workout type, this week's count and the fallback name. The favor drawn is never written in a notification. You can turn them off any time in iPhone Settings > Notifications > Pairfit.

8. Purchases

Apple processes subscription payments. We do not receive your name, payment method or Apple Account details.

To check whether Pairfit Pro is active, our server verifies the transaction information signed by Apple and records the expiry date on the purchaser's pair. Renewals, refunds and revocations are applied from notifications Apple sends to our server (App Store Server Notifications).

9. How we use data

We use the information we receive only to:

Provide the App (showing workouts to your partner, step days, weekly results and favor cards, notifications, the widget)
Manage purchase status
Prevent misuse
Answer your inquiries
Investigate problems and analyze usage to improve the App

We never use it for advertising and never sell it.

We do not provide your information to third parties except where required by law. Showing your workouts to the partner you chose (see 3) is a feature of the App that you start yourself.

The App uses these outside services:

Google LLC: Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Hosting), Google Analytics for Firebase
Apple Inc.: push notifications (APNs), App Store payments

11. How long we keep data

Information	Kept for
Display name, workouts, steps, photos, notification token, widget key	Until you use "Delete all data". Copies in Google's backups are removed within 180 days after that.
Pair settings and weekly results	While the pair lasts. After a pair ends, they may remain in a state that neither user can see.
Purchase status	As long as the purchase record continues, so refunds and revocations can be applied
Usage analytics	Up to 14 months, per our Google Analytics settings
Support emails	As long as needed to respond

12. Ending a pair and deleting data

End a pair: Settings > End pair. From that moment, your partner can no longer see your workouts or photos. Your partner is notified.
Delete data: Settings > Delete all data. This ends your pair, then deletes your photos, workouts, steps, favor cards, display name, notification token, widget key and anonymous account. Deleted data cannot be recovered.
Turn off notifications: iPhone Settings > Notifications > Pairfit.

Deleting data does not cancel your subscription. Cancel it in the App Store (how to cancel).

If you delete the App first, we have no way to tell which records on our server are yours. To delete them too, use "Delete all data" before deleting the App.

13. Your requests

You may ask us to disclose, correct, add to, delete or stop using your personal information, or to stop providing it to third parties, by writing to the address in 18. There is no fee.

Because we do not hold your email address, we may ask for details such as your display name or the date you subscribed to find your records. If we cannot identify them, we may not be able to complete your request.

14. Security

Policy and rules: we follow this policy and fixed rules for collecting, using, storing and deleting information.
Organization: the operator is responsible for handling information. If a leak occurs, we report it to Japan's Personal Information Protection Commission and notify you as the law requires.
People: no one other than the operator handles your information.
Physical: devices we use for administration have screen locks and disk encryption.
Technical: all communication is encrypted. The database and photo storage are readable only by the two members of a pair, and only our server can change pair settings and results.
Foreign environments: the database and photo storage are in Japan (Tokyo). Anonymous sign-in and usage analytics (Google LLC) handle information in the United States.

15. Age

The App is for people aged 13 and over. If you are under 18, get permission from a parent or guardian before using it.

16. This website

This website (pairfit.process-craft-ai.com) uses no analytics tools and no cookies. The invite page does not send the invite code it shows anywhere. The site is served by Google LLC's Firebase Hosting, which may keep access logs (such as IP addresses) to deliver it.

17. Changes

If we change this policy, we will post the new text and date on this page. If we start collecting more information, we will also tell you in the App.

18. Contact

For questions, requests or complaints about this policy and your information, write to:

rintaro.sakino@process-craft-ai.com

Operator: Process Craft AI (Sakino, responsible for personal information). We will tell you our address without delay on request.