Fugaki Privacy Policy

大金 怜史 (“we” or “us”) handles Users’ personal information in “Fugaki”, a music score creation service (https://fugaki.app/; the “Service”), as follows.

1. Information We Collect

When you sign in The email address, Google user ID, display name and profile image URL provided by Google when you sign in with a Google account. The Service uses only the email address for display.
When you apply for a paid plan The plan type, the contract period, and the customer ID and subscription ID issued by the payment processing service (Stripe).
Payment information such as credit card numbers is collected and stored directly by Stripe; we do not receive card numbers.
When you import a PDF The PDF file sent for the import. It is stored temporarily on our server only while it is needed for the conversion, and it is deleted when the conversion ends (likewise if the conversion fails). The conversion result (score data) is erased from the server when the User receives it in the browser, or at most 30 minutes after the conversion ends. We do not view the content of PDFs or conversion results, and we do not use them for training or any other secondary use.
We also record the number of files imported each month (to manage plan limits; kept until the account is deleted).
When you contact usYour email address and the content of your inquiry. Feedback submissions may include score state data that you choose to paste.
Information collected automatically To provide the Service and to handle failures, our hosting providers (Vercel, Cloudflare) record IP addresses, browser types, access dates and times, etc. as access logs for a certain period. We do not use behavior-tracking advertising or analytics tools (such as Google Analytics).
In addition, to detect and investigate unauthorized access, we record access logs for our PDF conversion server containing the source IP address, the date and time of access, the user ID (when logged in), and the type and result of the operation. We also keep copies of the hosting providers’ access logs. Access logs do not include email addresses or the contents of PDFs or scores.

Score data created by Users is saved in your browser. In normal editing and saving, it is not sent to our servers. The exceptions are when you send a PDF for PDF import and when you choose to attach score state data to feedback.

2. Purposes of Use

  1. Providing the Service (keeping you signed in, managing plans and the number of files used, converting PDFs)
  2. Processing payments and issuing receipts, etc.
  3. Responding to inquiries
  4. Preventing and investigating fraudulent use and unauthorized access, and investigating failures
  5. Communicating important notices about the Service (changes to fees or terms, termination of the Service, etc.)
  6. Keeping records as required by law (such as keeping books and records for tax and accounting purposes)

We do not use personal information for any purpose other than the above (such as delivering advertisements, selling it to third parties, or sending marketing emails).

3. Provision to Third Parties and Service Providers

We do not provide personal information to third parties without the User’s consent, except where required by law. To provide the Service, we entrust the handling of information to the following companies.

Supabase, Inc. (United States)Storage of account information (email address, Google user ID, display name, image URL) and plan information. Authentication infrastructure and database. Data is stored in Japan (Tokyo region)
Stripe (Stripe Japan K.K. and Stripe, Inc. (United States))Credit card payments, subscription management, and issuing receipts. What we provide is the email address and user ID. Card information is entered by the User directly on Stripe’s screen (Stripe’s privacy policy)
Google LLC (United States)Sign-in with a Google account. Users enter their sign-in information directly with Google, and we receive the email address, etc. from Google (Google’s privacy policy)
Vercel Inc. (United States)Hosting of the Service’s website and API. Access logs (IP addresses, etc.), and email addresses and user IDs during API processing
Cloudflare, Inc. (United States)Domain management, the communication path to the PDF conversion server (PDFs and conversion results pass through it), and forwarding of inquiry emails

Entrustment to businesses located in a foreign country: Each of the companies above is a business based in the United States (for Stripe, its Japanese entity is the point of contact), and some data may be processed in the United States. We entrust the handling of information to them after confirming that each company continuously implements measures for the protection of personal information equivalent to those under Japanese law (data processing agreements, standard contractual clauses, etc.), and we handle the information on the basis of the “system necessary for continuously taking equivalent measures” under Article 28 of the Act on the Protection of Personal Information. Information on the systems of the country where each company is located and on the measures they take is available on request through the contact in Section 7.

4. Cookies, etc.

The Service uses the browser’s local storage to keep you signed in. Stripe on its payment page, and Cloudflare for communications with the PDF conversion server, may each use cookies to prevent fraudulent use and unauthorized access. We do not use cookies for advertising purposes.

5. Retention Period

  1. Account information and plan information are kept until the account is deleted.
  2. PDF files are deleted when the conversion ends (likewise if the conversion fails). Conversion results are erased when the User receives them, or at most 30 minutes after the conversion ends.
  3. Inquiry emails are kept after the response is complete in order to respond to similar inquiries, and are deleted when they are no longer needed.
  4. The hosting providers’ access logs are erased after the period set by each company (generally from several weeks to several months).
  5. Access logs that we record and keep (Section 1, “Information collected automatically”) are erased after 90 days. However, the parts needed to investigate unauthorized access or suspected unauthorized access are kept for up to 400 days for investigation and countermeasures, and then erased. Where required by law, or where necessary to cooperate with investigative authorities or for legal proceedings, they are kept until no longer needed.
  6. Records relating to payments (transaction date, amount, email address, etc.) are kept by Stripe and by us for the period required by law (the obligation to keep books and records; in principle 7 years).

6. Security Measures

To prevent unauthorized access to, leakage of, and alteration of personal information, we take measures such as encrypting communications (HTTPS), limiting access permissions, appropriately selecting service providers, and monitoring for unauthorized access using access logs. If a leak, loss or damage of personal information occurs or may have occurred in cases specified by law, we will report to the Personal Information Protection Commission and notify affected users as required by law.

7. Requests for Disclosure, etc. and Account Deletion

Users may request, regarding their own personal information, notification of the purposes of use, disclosure, correction, addition or deletion of its content, suspension of its use or its erasure, and suspension of its provision to third parties. Send your request to feedback@fugaki.app from the email address you use to sign in, describing what you request (identity is verified by this email address; for a request made by an agent, we may ask for documents showing the authorization). Disclosure is in principle provided by email, and no fee is charged. If we cannot respond under the law, we will tell you the reason.

You can delete your account (withdraw) yourself from “Delete account” on the “Plan” screen in the app (we also accept requests by email to the same contact). When you delete your account, we immediately delete the account information and plan information on Supabase that we manage and the customer information on Stripe. However, the records relating to payments described in Section 5 (kept as required by law) and information that service providers keep based on their own legal obligations are kept for their respective periods. If you are using a paid plan, it is canceled at the time of deletion (for refunds, see Article 8 of the Terms of Service).

8. Changes to This Policy

We may change this Policy as necessary. If we change it, we will announce the content of the change and its effective date by posting it on the Service or by email. For changes that require the User’s consent under the law, such as significantly changing the purposes of use or starting a new provision to third parties, we will obtain your consent in advance.

9. Business Information and Contact

Business operator: 大金 怜史
Contact: feedback@fugaki.app
If you request the address and phone number at the email address above, we will send them to you by email without delay (the same applies to the Legal notice under the Specified Commercial Transactions Act).

Revision to apply from December 1, 2026 (scheduled)

From December 1, 2026 (scheduled), Sections 1 and 5 are revised as follows. If the effective date changes, we will announce it again.

  1. In Section 1, “When you import a PDF”, the sentence “We also record the number of files imported each month (to manage plan limits; kept until the account is deleted)” is changed to “We also record the number of pages imported each month (to manage plan limits; kept until the account is deleted)”.
  2. The following sentence is added to the same row: “In addition, to settle the allowance (restoring to the allowance the number of pages that failed to import, etc.), we record, for each import, the receipt number issued by the conversion server (the identifier of the receipt; recorded linked to the account) and the number of pages that were actually read. These are kept until the end of the month following the month in which the import started, and are then erased.”
  3. The following paragraph is added to Section 5: “Records of the receipt number and the number of pages read for each import are kept until the end of the month following the month in which the import started, and are then erased.”