Privacy Policy

1. Data Controller

HOSHIDOU ("the Service") complies with Japan's Act on the Protection of Personal Information (APPI) and handles user data responsibly. The Service is operated by a sole proprietor based in Japan.

2. Information Collected

The Service collects the following information:

• Account information: Email address, display name
• Birth data: Names, birth dates, birth times, and birth locations entered by the user
• Usage data: Chart calculation requests (server logs)

3. Purpose of Use

Collected personal information is used only for the following purposes:

• Providing chart calculation and display services
• Account authentication and security
• Email verification and password reset notifications
• Service quality improvement and incident response

4. Third-Party Sharing

We do not share personal information with third parties without user consent, except as required by law. We share data with the following sub-processors only to the extent necessary:

Email delivery: Resend, Inc. (USA) - Email addresses are shared for the purpose of sending verification and password reset emails.

Server infrastructure: Fly.io, Inc. (USA) - Data is stored on servers in the Tokyo region (Japan).

5. Security Measures

The Service implements the following security measures to prevent unauthorized access, loss, or damage to personal information:

• Encryption in transit: All communications are encrypted using TLS (HTTPS)
• Password protection: Passwords are hashed using bcrypt and never stored in plain text
• Access control: Access to personal information is limited to what is necessary for operations
• Data location: Data is stored on servers in Japan (Tokyo region)

6. Data Retention

Account and birth data are retained as long as the account exists. When an account is deleted, all associated data is permanently removed. Server logs are retained for a maximum of 90 days before automatic deletion.

7. Cookies

The Service uses cookies solely for session management (keeping you logged in). No advertising or tracking cookies are used.

8. Your Rights (APPI Articles 27-33)

Under Japan's Act on the Protection of Personal Information, you have the following rights regarding your personal data:

• Right to disclosure: You may request to know what personal information we hold about you
• Right to correction: You may request correction of inaccurate information
• Right to deletion and suspension: You may request deletion or suspension of use of your personal information
• Right to stop third-party transfer: You may request that we stop transferring your data to third parties
• Self-service: You can update your profile, edit or delete birth data, and delete your entire account at any time from account settings

9. Privacy Contact

For requests regarding disclosure, correction, deletion, or suspension of personal information, or for any privacy-related questions, please contact us at support@hoshidou.com or via the in-app feedback feature. We will respond within a reasonable period (generally within 30 days).

10. Complaints

For complaints about how we handle your personal information, please contact us first at support@hoshidou.com. If the matter is not resolved, you may submit a complaint to Japan's Personal Information Protection Commission (https://www.ppc.go.jp/).

11. Policy Updates

This policy may be updated to reflect changes in law or service features. We will notify users of any significant changes through the app or website before they take effect.