Suitoly (the "App") is an income and expense tracking app provided by an individual (the "operator"). This Policy sets forth how user information is handled by the App and related websites (app.suitoly.com / www.suitoly.com / mcp.suitoly.com).
This Policy is authored in Japanese, and other language versions are provided for reference only. In case of any discrepancy between the Japanese version and a translated version, the Japanese version shall prevail.
The operator may outsource operations such as data storage, email delivery, app and website distribution/hosting, and inquiry response to external service providers to the extent necessary to achieve the purposes of use. The operator provides necessary and appropriate supervision to ensure that personal information is handled properly by such providers.
Some service providers may be located outside Japan. In such cases, the operator takes appropriate measures in accordance with relevant laws. Details regarding service providers will be disclosed upon request via the contact information below.
Except as described above, the operator will not provide personal information to third parties without the individual's consent, unless required by law.
For the receipt photo input feature, photographed or selected receipt images and text information read from those images on the user's device are processed by an external generative AI API (a model supporting image input) to extract entry information (item name, amount, date, etc.). The service used is one whose terms ensure that submitted images and text information are not used to train the AI model. Text recognition (character reading) is completed entirely on the user's device, and images or text are not sent to an external character recognition service for this processing. Extraction results are saved after the user reviews and, if necessary, corrects the content. The image and the recognized text information are stored in the App's cloud storage as a dataset for verifying the accuracy of the automatic entry input feature (see Section 7 for the retention period).
When a user creates an API token from the App's settings, an external AI client configured with that token (such as an MCP-compatible chat service) can search and retrieve entry information and create entries, within the scope set on the token (the target ledgers and whether access is read-only or read-write). If "All ledgers" is selected as the access scope, ledgers created after that point are also included. This is an export of data initiated by the user, not a provision to a third party by the operator. The handling of exported data is governed by the terms and privacy policy of the AI client chosen by the user and its provider, and the operator is not involved. A token can be revoked at any time from the App's settings, and access ceases immediately once revoked.
Content submitted via the inquiry form (category, inquiry content, and any email address provided) is collected via a Google Form. Additionally, inquiry content (excluding email addresses) is processed by an external AI API for classification and summarization. The service used is one whose terms ensure that submitted content is not used to train the AI model. The operator reviews the classification and summarization results, which may be used to manage bug reports and feature requests. This processing does not include personally identifiable information such as names or email addresses.
User data is stored on servers of cloud providers selected by the operator. These servers may be located within or outside Japan. The operator takes appropriate security measures in accordance with relevant laws when storing data.
Communications are encrypted using TLS. The database uses row-level security (RLS) to restrict each user's access scope.
When a user shares a ledger with another user, the income and expense data contained in that ledger can be viewed and edited by the other user. Users are responsible for selecting who they share with. The user who created a ledger (the "Owner") may transfer ownership to the other user. Ownership transfer is completed solely by the Owner's action and does not require the recipient's prior consent (a notification email is sent to the recipient upon completion). Income and expense data registered in a shared ledger may remain with the other user even after the original user deletes their account, as long as the other user continues to use it (see the next section for details).
When an account is deleted, the income and expense data associated with that account is deleted. However, income and expense data registered in a ledger shared with another user is not deleted—since deleting it would cause the other user to lose their records—but only the association with the original poster (the link to the account) is removed, and the data remains in the other user's ledger. This removal of association cannot be undone. A user who is the Owner of a ledger shared with another user cannot delete their account until they transfer ownership to the other user or unshare the ledger (a ledger whose ownership has been transferred continues to exist after account deletion as long as the recipient continues to use it). Account deletion can be performed at any time by the user themselves from "Account Settings" within the app (subject to the above procedure if the user is the Owner of a shared ledger). If you are unable to use the app, please see the Account Deletion page and contact us using the information below.
Because receipt images and text information read from them are temporarily uploaded before an entry is saved, they are automatically deleted if a corresponding entry is not saved within 24 hours of upload. Additionally, when an account is deleted, any receipt images uploaded by the user and the text information read from them are deleted without exception, regardless of how the corresponding income and expense data is handled (including cases where the income and expense data itself remains due to a shared ledger).
Inquiry information (Google Form responses and inquiry content/optional email address incorporated into the operator's systems) is not linked to an account and is therefore not automatically deleted upon account deletion. It is retained for as long as necessary to respond to inquiries and manage bug reports and feature requests. If you wish to have this information deleted, please contact us using the information below. However, for inquiries submitted without an email address, we may be unable to respond to deletion requests if we cannot verify that the request comes from the original submitter.
Users may request disclosure, correction, deletion, or suspension of use of their personal information. Please contact us using the information below. To verify your identity and respond to your request, please provide your contact information in the email address field of the form. If you have an account, we will send a confirmation to your registered email address and respond once we have verified your identity.
The App and website use cookies or similar technologies (such as on-device local storage) to the extent necessary to provide the Service, including maintaining login state.
We may also use analytics tools and advertising-related technologies (including third-party tools such as Google Analytics and advertising identifiers) to maintain and improve the Service, analyze usage, and deliver advertisements. Through these, information such as IP address, device/browser type, usage patterns, and advertising identifiers may be collected and processed in accordance with the relevant third party's privacy policy.
Users may disable cookies or opt out of information collection through their browser or device settings, or through means provided by each service provider. If the operator introduces new analytics or advertising services, this Policy will be updated as necessary.
The App is not intended for children who are below the age at which parental consent is required for the handling of personal information under applicable law.
This Policy may be revised as necessary. If a material change is made, we will notify you via the App or website.
This Policy shall be interpreted and applied in accordance with the laws of the operator's location and other applicable laws.