Kokage Cloud account privacy policy

This policy covers signing in to your Kokage Cloud account and the devices and sessions signed in to it. What you create with a service, such as chats, voices and avatars, is covered by that service’s own policy.

The account is run by 鯱哲工合同会社 (Orcalogy LLC) on Google Cloud, with its servers and database in Tokyo.

Kokage

Chats, cloud voices, motion, avatars and purchases in the Kokage app. Kokage privacy policy

minori.study

Your answers, reports and study plan on minori.study, kept by that service under this account. minori.study

Your ID at Apple or Google

An identifier the service issues for your account, the same each time you sign in.

Your email address, if shared

The address Apple or Google shares, and whether the service has verified it. Apple lets you hide your address and then shares a relay address that forwards to you.

Apple’s revocation token

A token from Apple, kept only so that we can ask Apple to end the sign-in when you delete your account, as Apple requires.

Sign-in times

When the sign-in was first used and when it was last used.

We never receive your Apple or Google password. If the service also sends your name or profile picture, we do not keep them.

For each device or browser signed in, we keep which app or website it is, whether it signed in with Apple, Google or the device’s own key, when it started and when it was last used.

A device signs in with a key the app creates on it, and we hold only the public half. A browser’s sign-in token is stored only as a one-way fingerprint (a hash).

• To sign you in and give each of your devices the same account.
• To show your email address in the app, so you can see which account you are signed in to.
• To answer you when you contact us about your account.

We do not use your email address to find or join accounts or to match purchases, and we keep it out of our logs. We do not use any of this for advertising, and we do not sell it.

When you move a device’s Leaf into the account you signed in to, we keep a record of the move with both accounts’ IDs. The device’s old account is then deleted as described below.

Apple and Google can tell us when you stop using your Apple ID with our apps, or when your account is deleted, disabled or may have been taken over. When they do, we mark the sign-in as ended and sign out the browsers that used it. Devices stay signed in, because each holds its own key. Signing in again with the same account restores it.

Apple

Runs Sign in with Apple under its own privacy policy. Apple privacy policy

Google

Runs Sign in with Google under its own privacy policy. Google privacy policy

Google Cloud

Hosts our servers and database under the Google Cloud Privacy Notice. Google Cloud Privacy Notice

Like every request to our servers, a sign-in is recorded in Google Cloud’s request logs with the IP address, the time, the address requested and the app or browser that made it.

Deleting your Kokage Cloud account deletes your sign-in details: the IDs, the email addresses and Apple’s token, which we delete once Apple confirms the sign-in has ended. Every device and browser is signed out.

A browser session is deleted when it expires, or shortly after it is signed out. A signed-out device keeps a record of its public key and times, so that it can be told it was signed out or that its account was deleted.

After an account is deleted, we keep records that hold no content: the closed account’s ID, those device records, the Leaf and billing records including moves between accounts, and audit logs. They are kept for accounting, fraud prevention and legal obligations, with no fixed deletion date.

You can sign out any device and delete the account in the Kokage app. To ask what we hold about you, or to have it corrected or deleted, email contact@orcalogy.com.

If this policy changes, we will update this page and the date above.