01Who we are and scope
The app is published by an independent developer (“we”). This policy covers the app and this website (https://sumiire-meishidana.pages.dev). Contact: fumibako@meishidana.studio.
We run no servers and no account system. The app has no sign-in, ads, analytics or tracking, and does not read the advertising identifier (IDFA).
02What the app handles
| Data | What it is | Stored / sent |
|---|---|---|
| Card image | A photo taken with the camera, or one image picked in the system photo picker. Kept in the app's card folder after you save; a temporary copy sits in the app cache during parsing. | On device only |
| Card details (third-party data) | Name, company, department, phone numbers, email addresses, tags — only what you keep by tapping “保存 (Save)” on the review screen. | On device only |
| Meeting note | A short note such as “trade-show booth A-42”, typed or dictated. | On device Sent with consent |
| Follow-up text | A draft written by the AI that you chose to save. | On device only |
| AI coach requests & history | What you type to the coach, plus that card's activity log (parsed, saved, earlier requests). | On device Sent with consent |
| Voice | A few seconds of microphone input to dictate the meeting note. | Never stored or sent |
| Settings | AI-sharing consent state, screen position, photo-export receipt. | On device only |
We do not access location, the Contacts app, your whole photo library, or device identifiers.
03How permissions are used
- Camera — only when you photograph a card. The image is kept on device for parsing and display.
- Photo selection — uses the iOS system picker, so only the one image you choose reaches the app. No library-read permission is requested.
- Add to Photos — only when you tap “写真に保存 (Save to Photos)” on a card; add-only access.
- Microphone & speech recognition — to dictate the meeting note. Recognition is required to run on device; audio is not sent to Apple or to us, and no recording is kept. Where on-device Japanese recognition is unavailable, dictation fails and you can type instead.
- Notifications — follow-up reminders are designed as local notifications; no server is involved.
04AI data sharing (DeepSeek)
AI tidying and follow-up drafting use the cloud inference API of DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd., People's Republic of China). Nothing is sent until you tap “許可する (Allow)” on the consent screen; traffic is HTTPS-encrypted. Withdraw at any time under Settings › AI データ共有 › “クラウド推論を許可”; after that nothing is sent.
Exactly what is sent (current version)
| Feature | Sent | Not sent |
|---|---|---|
| AI card parsing | A fixed instruction plus the meeting note text only | The card image, text in the image, saved names/phones/emails |
| AI coach | Your request plus that card's activity log (including earlier requests) | The card image; the card's name/phone/email unless you type them in |
The current version does not send the card image, so AI results may not match the card. Always check the review screen before saving.
Please do not type the other person's name or contact details into the meeting note or a coach request — if you do, they are sent to DeepSeek too. Do not enter sensitive data (health, beliefs, etc.).
DeepSeek's handling (retention, training use) follows its own policy: DeepSeek Privacy Policy
05Japan's APPI and other laws
Transfer to a third party in a foreign country
If a note or request you send contains personal information, it is provided to DeepSeek, a third party in the People's Republic of China (APPI Art. 28). Tapping “Allow” is treated as consent to this transfer.
- Country: People's Republic of China.
- Its system: China has the Personal Information Protection Law (PIPL, 2021), but Japan's Personal Information Protection Commission does not recognise it as equivalent to Japan's, noting laws such as the National Intelligence Law that allow government access.
- Recipient's measures: DeepSeek describes encryption, access control and retention management in its privacy policy.
If you are in the EEA/UK, the legal basis for sending is your consent (GDPR Art. 6(1)(a)); the transfer to China relies on explicit consent (Art. 49(1)(a)).
Data of the people on your cards
Card details are data you keep for business contact after receiving the card. The app is a tool that stores them on your device; we never receive them. Use, store and share them only within the purpose for which the card was given and in line with the laws that apply to you (for example APPI and Japan's Act on Regulation of Transmission of Specified Electronic Mail).
Requests
We hold no card data, so data subject to access, correction or deletion is on your device. For data already sent to DeepSeek, contact DeepSeek. You can reach us at fumibako@meishidana.studio.
06Retention and deletion
- On-device data stays until you delete the app. The current version has no in-app way to delete an individual card; delete the app to erase everything.
- Depending on your iOS settings, app data may be included in iCloud or computer backups.
- Card images you saved to Photos are managed by the Photos app; delete them there.
- Data already sent to DeepSeek is kept and deleted under DeepSeek's policy.
07Security, children, this site
App data lives in the app's iOS sandbox, which other apps cannot read. Network traffic uses HTTPS.
The app is a business tool and is not directed to children under 13.
This site is hosted on Cloudflare Pages. It sets no cookies and runs no analytics; Cloudflare may process connection data such as IP addresses to deliver it.
08Changes
We will update this page and its effective date when the policy changes. For material changes (new data sent or a new recipient) the app will ask for your consent again.
Effective 4 November 2026