Privacy Policy

Introduction

Narravie ("we", "us") values your privacy. This Privacy Policy explains what personal information we collect, how we use it, and how we protect it.

1. Information We Collect

• Account information: email address, display name, avatar image
• Content: timelines, events, photos, videos, memos, voice memos, time capsule contributions (text, images, audio, video), media comments, feedback text and screenshots
• Photo metadata and location data: EXIF data (capture date, GPS coordinates, camera model), user-entered location information (place names, addresses, coordinates), and AI-estimated locations — EXIF location data can be opted out
• Usage data: page views, feature usage, session information (via PostHog, no cookies)
• Payment information: processed via Stripe (card details are not stored by us)
• Activity logs: action types, timestamps, IP addresses, browser information

2. How We Use Your Information

• Providing and operating the Service
• Providing AI features (chat, image analysis, voice processing)
• Service improvement and analytics
• Sending invitation and notification emails
• Detecting and preventing misuse
• Customer support

3. Third-Party Data Sharing

We share data with the following third-party services (country of operation in parentheses):

• Supabase, Inc. (USA): account information, content, all application data (database, authentication, storage)
• Google LLC (USA): text, images, audio data, photo metadata including EXIF/GPS data, time capsule contributions, contributor display names, location search queries (Gemini AI — chat, image analysis, voice processing, time capsule AI summaries; Places API — location autocomplete)
• Stripe, Inc. (USA): email address, payment information (payment processing)
• PostHog, Inc. (USA): pseudonymized usage data (analytics, opt-out available)
• Resend, Inc. (USA): email address, display name (email delivery)
• fal.ai, Inc. (USA): image data (image upscaling)
• Vercel, Inc. (USA): access logs (hosting)
• Inngest, Inc. (USA): job metadata (background processing)
• OpenStreetMap Foundation (UK): IP address, map tile coordinates (map display)

4. Your Rights

You may exercise the following rights:

• Right of access: Access your data through the personal data export feature
• Right to rectification: Correct your account information through profile settings
• Right to erasure: Delete all your data by deleting your account
• Right to withdraw consent: Withdraw consent for AI features, analytics, EXIF location processing, and email at any time
• Right to data portability: Export your personal data in JSON format
• Right to restriction: Request restriction of processing of your personal data
• Right to object: Object to processing based on legitimate interests
• Right not to be subject to automated decision-making: You will not be subject to decisions based solely on automated processing that significantly affect you
• Right to lodge a complaint: Lodge a complaint with a supervisory authority in your country of residence

4-1. Data Handling in Collaboration and Transfers of Owner Authority

The Service includes timeline sharing and collaborative editing features that may allow invited members to access events, descriptions, photos, videos, memos, voice memos, and other content contained within the relevant timeline. If you post content to a timeline, that content may be displayed to other members in accordance with the sharing settings and permissions granted for that timeline. If Owner authority for a timeline is transferred to another member in accordance with our designated procedures, the recipient user will obtain administrative authority for that timeline within the Service. As a result, content contained in that timeline and certain information related to that content may become available to the new Owner to the extent necessary for access management, service operations, support handling, and other purposes required to provide the Service. We do not treat a transfer of Owner authority as a transfer of copyright or other intellectual property rights in User Content. Rights in each item of User Content remain with the user who posted that content or the rightful rights holder. For security, fraud prevention, dispute response, and legal compliance, we may record and retain audit logs relating to timeline sharing, member invitations, permission changes, and transfers of Owner authority, including operation history and approval history. If you request deletion, export, or other exercise of rights regarding your personal data or posted content, we will respond in light of applicable law, the Service's specifications, the rights and interests of other users, and system integrity. Backup data and other information that cannot be erased immediately for technical reasons will be deleted or irreversibly anonymized within 30 days.

4-2. Handling of Personal Data in Rescue Export upon Plan Downgrade or Account Closure

The Service provides a "Rescue Export" feature that allows a shared timeline Owner to download photos and videos ("Media Content") posted by members of that timeline, solely for rescue purposes when the Owner can no longer continue to use the Service. Recognizing that Media Content may contain personal data of third-party Subjects and uploading members, we make this feature available only when the relevant member has provided prior explicit opt-in consent. Consent is recorded as explicit consent under Article 6(1)(a) of the GDPR and the spirit of the Act on the Protection of Personal Information of Japan, and may be withdrawn at any time via the settings screen or other methods designated by us. Withdrawal of consent applies retroactively to all subsequent Rescue Export processing, and any Media Content previously uploaded is also excluded from the scope of export, including any download links that may have been issued previously. In operating this feature, we record audit logs of consent state changes, export executions, download-link issuance, and similar events, and retain them for the purpose of preventing misuse and complying with applicable laws. The recipient of personal data under this feature is limited to the current Owner of the relevant shared timeline; we do not provide such data to any other third party except in cases falling under exceptions designated by us (such as the emergency Owner-authority escalation procedures set forth in Section 4-1).

4-3. Handling of Data Featuring Third-Party Subjects

When content posted by a user includes persons other than the user (including minors; "Subjects"), personal data relating to such Subjects will be handled in accordance with the uploader warranty set forth in Section 4-3 of the Terms of Service. We do not currently perform automated subject tagging, identity recognition, facial recognition, age estimation, or other active subject-identification processing, and we do not collect personal data about Subjects as an independent processing target. If a Subject, the Subject's legal guardian, or any other party with a legitimate interest makes a request for deletion of content containing the Subject, exclusion from the scope of export, suspension of processing, or other exercise of rights, we will, after verifying the legitimacy of the request, respond in principle within 30 days from receipt. Such requests should be directed to our designated inquiry channel (see "Contact" at the end of this Policy). We may, based on reports from interested parties, internal policies, or legal requirements, restrict access to, unshare, or delete content where there is a concern of infringement of rights relating to a Subject, to the extent necessary.

5. Data Retention

Account information and content are retained until account deletion. Audit logs are retained for up to 3 years for security purposes and then anonymized. Consent logs are retained as required by law.

6. Security

We employ technical measures to protect your data, including encrypted communications (TLS), row-level security (RLS), access controls, and audit logging.

7. International Data Transfers

Through the third-party services listed above, your personal data may be transferred to and processed in the United States. The United States does not have a comprehensive federal privacy law equivalent to Japan's Act on the Protection of Personal Information or the EU GDPR; however, each service provider has implemented appropriate data protection measures, such as SOC 2 certification, Standard Contractual Clauses (SCCs) with the EU, or compliance with the EU-US Data Privacy Framework (DPF). For details, please refer to each provider's privacy policy (Supabase: supabase.com/privacy, Google: policies.google.com/privacy, Stripe: stripe.com/privacy). For questions about international data transfers, please contact us through the in-app feedback feature.

8. Cookies and Tracking

The Service uses cookies for authentication purposes. Analytics do not use cookies — only memory-based tracking is used (opt-out available).

9. Minors

Users under 16 years of age must obtain parental consent before using the Service. We do not intentionally collect personal information from users under 16.

10. Rights of EU/EEA Residents (GDPR)

If you are located in the EU/EEA, the legal bases for processing your personal data are: (a) your consent (AI features, analytics, marketing emails, EXIF location processing), (b) performance of our contract with you (account management, service provision, payment processing), and (c) our legitimate interests (security, fraud prevention, service improvement). You may withdraw consent at any time without affecting the lawfulness of prior processing. To exercise any of your rights, please contact us through the in-app feedback feature. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

11. California Residents' Rights (CCPA)

We do not sell your personal information. To exercise your rights under the California Consumer Privacy Act, please contact us through the feedback feature.

12. Changes to This Policy

This Policy may be updated as needed. Significant changes will be notified within the Service.

13. Contact

For privacy-related questions, please use the feedback feature within the Service.