Privacy Policy

Overview

Bokuju is a mobile app where you photograph wildlife and transform them into collectible cards with AI-generated sumi-e artwork. This policy explains what data we collect, how we use it, and your rights.

Information We Collect

Photos You Take

• Photos are sent to Google's Gemini AI to identify the creature and generate card artwork
• Original photos and generated artwork are stored in Cloudflare R2
• Photos are only used to create your cards and are not shared publicly unless you choose to share them

Account Information

• Email address and username (via Google sign-in or Apple sign-in)
• Profile avatar (if provided)
• Authentication handled by Clerk

Purchase Information

• Records of Daku credit purchases (our in-app currency)
• Transaction history for credit usage
• Purchases are processed by the Apple App Store or Google Play Store. Payment information (such as credit card numbers) is handled entirely by Apple or Google and is never collected, stored, or accessible by Bokuju
• RevenueCat is used to manage purchase records and credit fulfilment across platforms

Fitness & Step Data

• With your permission, Bokuju can read your step count to award passive XP to your battle team cards
• On iOS, step data is read from Apple CoreMotion. On Android, step data is read via Health Connect
• Step counts per time period are stored on our servers linked to your account to calculate and distribute XP rewards
• Step data is not shared with any third parties
• You can enable or disable step tracking at any time from the app settings. If you delete your account, all step data is permanently deleted

Game Data

• Your card collection and card statistics
• Battle history and multiplayer activity
• Region preference (you may optionally select a region from a dropdown to associate yourself with for the Bokupedia; this is a manual selection and no location data is collected from your device)

How We Use Your Data

• Photos: Processed by AI to identify creatures and generate unique card artwork
• Account info: To save your progress, cards, and enable multiplayer features
• Purchase history: To track your credit balance and process transactions
• Game data: To provide gameplay features like battles, breeding, and collections
• Step data: To calculate and award XP to your battle team based on your physical activity

We do not sell your personal data to third parties.

Tracking & Advertising

Bokuju does not track you across other companies' apps or websites. We do not collect or use advertising identifiers (such as Apple's IDFA or Google's Advertising ID). We do not display third-party advertisements. We do not use any analytics or advertising SDKs that track your activity outside of Bokuju.

Third-Party Services

We use the following services to operate Bokuju. Each has their own privacy policy:

• Clerk - User authentication and account management
• Supabase - Database and backend services (PostgreSQL)
• Google Gemini - AI for creature identification and artwork generation
• Fal.ai - AI video generation for card animations
• Cloudflare R2 - Photo and artwork storage
• RevenueCat - In-app purchase management and receipt validation
• Firebase Cloud Messaging - Push notification delivery (no analytics or tracking data is collected via Firebase)
• Google Health Connect - Step data access on Android (with user permission)
• Apple App Store / Google Play Store - App distribution and payment processing

Push Notifications

With your permission, Bokuju may send push notifications via Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS). A device push token is stored to deliver notifications. You can disable push notifications at any time through your device settings.

Data Processing Consent

Before processing your first photo, Bokuju will ask for your explicit consent to send images to Google's Gemini AI for creature identification and artwork generation. You may decline, in which case photo-based features will not be available. This consent can be managed within the app.

Data Storage & Security

Your data is stored securely using industry-standard encryption and security practices. We use:

• Row-level security policies to isolate user data
• Encrypted connections (HTTPS/TLS) for all data transmission
• Secure token storage on your device
• Rate limiting to prevent abuse

Data Retention

We retain your data for as long as your account is active. Photos and cards are stored indefinitely unless you delete them or your account. Transaction logs are kept for accounting and legal compliance.

Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Delete your account and all associated data
• Export your data

Account Deletion

You can delete your account at any time from within the app settings. This will permanently remove your account, cards, photos, and all associated data. Alternatively, contact us at the email below and we will process your request within 30 days.

Children's Privacy

Bokuju is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes via the app or email. Continued use of Bokuju after changes constitutes acceptance of the updated policy.

Contact Us

For privacy-related questions, data requests, or concerns:

support@bokuju.app