Privacy Notice

田淵 秀人 (Hidehito Tabuchi) ("we", "us") is the data controller for personal information processed through the Travel Safety JP service ("Service"). This notice explains what we collect and why.

We may collect: - Account data: email address, identifiers from auth providers (e.g. Google), display name. - Profile data: language preference and similar settings. - Medical translation card data: conditions, allergies, medications, blood type, emergency contacts you choose to enter, and any photos of your medications you upload. This is health-related, sensitive information you provide voluntarily; we store it in a private area accessible only to your account and use it, based on your consent, solely to provide this feature. - Location: approximate location obtained with browser permission to show nearby contacts (not stored on our servers). - Usage and technical data: IP address, browser/device info, timestamps, referrer, error logs. - Support messages you send us. - Payment-related data submitted to Paddle (we do not store your card number).

We use personal data to: - Provide and operate the Service (authentication, storing your medical card, etc.). - Provide customer support. - Detect and prevent fraud and abuse; keep the Service secure. - Improve and troubleshoot the Service. - Comply with legal obligations. - Send product updates (only where you have consented).

Where GDPR or similar law applies, we rely on: - Performance of a contract (accounts, subscriptions). - Legitimate interests (fraud prevention, service improvement). - Consent (optional fields, marketing). - Legal obligations.

We share data only with the following categories of recipients: - Hosting / backend provider (Supabase) that stores account and medical card data on our behalf. - Merchant of Record (Paddle) for payment processing, invoicing, tax, and subscription management. - OAuth providers (Google) when you sign in with them. - Map services (Google Maps) when you open a directions link. - Authorities where required by law. For information handled by Paddle in connection with payments, see Paddle's privacy notice: https://www.paddle.com/legal/privacy.

Our processors may be located outside your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

We keep personal data for as long as necessary for the purposes described above or as required by law, and then delete or anonymize it. If you delete your account, we delete your user content (including medical card entries) within a reasonable period. Billing records are retained for accounting and tax purposes.

We use appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or loss, including transport encryption (TLS), access controls, and log monitoring.

The Service uses cookies, browser local storage, and a Service Worker to keep you signed in, remember language preferences, and cache content for offline mode. These are essential for the Service and are not used for third-party advertising. Restricting them in your browser may break some features.

Subject to applicable law you may have the right to: - Access, correct, or delete your personal data. - Restrict or object to processing; portability. - Withdraw consent where processing is based on consent. - Lodge a complaint with your supervisory authority (EU/UK residents). To exercise these rights contact benriya.hide@gmail.com. We aim to respond within one month.

The Service is not intended for children under 13 (or the age set by your local law). If we learn we have collected data from such a child we will delete it.

We may update this notice from time to time. We will announce material changes in the Service or by email.

Questions about this notice or your data: benriya.hide@gmail.com.