Privacy Policy
Daruma (“Daruma: Moving to Japan”) · Last updated 28 July 2026
This policy explains what Daruma collects, why, who it is shared with, and how to get rid of it. Daruma helps people relocate to and settle in Japan, which means it handles some sensitive information — immigration status, nationality, and identity documents. We have tried to be specific rather than vague about that.
1. Who we are
Daruma is operated by the developer of Daruma: Moving to Japan (“we”, “us”). For any privacy question, or to exercise any right described below, contact privacy@darumajapanlife.xyz.
2. What we collect
| Category | Examples | Why |
|---|---|---|
| Account | Email address, first and last name, password (stored hashed by our authentication provider), or an Apple/Google sign-in identifier | To create and secure your account |
| Relocation profile | Nationality, visa status and visa expiry date, whether you are in Japan or abroad, destination city, arrival date and timing, Japanese language level, employment status, housing needs, whether you are moving with others, stated goals and purpose | To generate your task list and personalise guidance |
| Documents | Files you choose to upload to the Vault — which may include passports, residence cards, visa paperwork, contracts and official forms — plus photos you capture or select | To store them for you and, if you ask, to analyse them |
| AI Coach conversations | The questions you type or speak, and the replies you receive | To answer you and show your history |
| Voice input | Speech is converted to text on your device. The audio itself is never uploaded or stored by us. | To let you ask questions by voice |
| Check-ups and progress | Your responses to in-app check-ups, resulting scores, tasks, completions, streaks, XP and badges | To track progress and tailor recommendations |
| Subscription | Subscription and trial status, which store account made the purchase | To unlock paid features and restore purchases |
| Device and diagnostics | Crash reports, error diagnostics, app version, device model and OS version, and in-app events such as screens viewed | To fix crashes and understand how the app is used |
Calendar, camera, microphone and photos
Daruma asks for these only when you use a feature that needs them, and you can refuse or revoke any of them in your device settings.
- Calendar — to add deadlines you choose to save. Calendar contents are written to your device and are not transmitted to us.
- Camera and photo library — to capture or select documents for the Vault.
- Microphone — to let you speak a question to the AI Coach. The speech is converted to text on your device; no audio is uploaded.
What we do not collect
We do not collect precise GPS location, contacts, health or fitness data, or advertising identifiers. We do not use third-party advertising and we do not track you across other companies’ apps or websites.
3. Legal bases
Where the GDPR or the UK GDPR applies, we rely on: contract (to provide the service you signed up for), legitimate interests (to keep the app secure, fix crashes and improve it), and consent (for device permissions and for optional features such as document analysis). Where the information you upload reveals immigration status or nationality and is treated as a special category of data, we process it on the basis of your explicit consent, which you give by choosing to enter or upload it — and which you can withdraw by deleting it or your account.
4. Who we share it with
We do not sell your personal information, and we do not share it for advertising. We use the following processors:
| Provider | What it receives | Role |
|---|---|---|
| Supabase | All account, profile, task, check-up, conversation and document data | Database, authentication and file storage hosting |
| Google (Gemini API) | The text of your AI Coach questions and relevant profile context; the contents of any document you explicitly submit for analysis | Generates coaching replies and analyses documents |
| RevenueCat | A pseudonymous user identifier and your purchase and entitlement state | Subscription management |
| Apple | Payment details, which are handled entirely by Apple | Payment processing. We never see your card details |
| Sentry | Crash reports and error diagnostics, with an opaque user identifier only | Crash reporting |
| PostHog | Product analytics events and an opaque user identifier | Usage analytics |
We may also disclose information where we are legally required to, or to establish or defend legal claims.
5. International transfers
Our providers process data outside Japan, the EEA and the UK, including in the United States. Where required, transfers are covered by Standard Contractual Clauses or an equivalent safeguard offered by the provider.
6. How long we keep it
We keep your account and profile data for as long as your account exists. Documents remain in the Vault until you delete them. AI Coach conversations are retained so you can see your history, and you can clear them. When you delete your account, we delete your personal data from our systems within 30 days, except where we must keep records for legal or accounting reasons. Backups are overwritten on a rolling basis.
7. Security
Data is encrypted in transit. Documents are held in a private storage bucket, and database access is enforced per-user by row-level security so one account cannot read another’s data. No system is perfectly secure, and we cannot guarantee absolute security.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to receive a portable copy, and to withdraw consent. You can edit most profile data in the app, and delete documents individually.
To delete your account and all associated data, use the delete option in the app’s profile settings, or email privacy@darumajapanlife.xyz and we will action it within 30 days. If you are in the EEA or UK you also have the right to complain to your local data protection authority.
9. Children
Daruma is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us information, contact us and we will delete it.
10. Changes
If we change this policy materially we will update the date above and notify you in the app before the change takes effect.