Privacy Policy

1. Information We Collect

OTOHAKO may collect the following information through the website and mobile app.

• Location information, with device permission, for nearby event search
• Event response information, stored in cookies on the web and on the server in the app
• App authentication information, including the email address, name, and user ID provided through Sign in with Apple. Browsing the website does not require a login
• Profile information such as Instagram ID, display name, avatar image, bio, area, and favorite genres
• Follow relationships between users
• Going activity, follow and block relationships, and reports submitted in the app
• Notification information: an installation-level device identifier, Apple push token, notification environment, language, and preferences for each notification category, linked to the account and login session
• Event information such as organizer and performer Instagram IDs
• Public Instagram post captions and images used for event information extraction
• Contact information such as email address, inquiry message, and category
• In-app feedback: user ID, display name, Instagram ID, and diagnostics including app version and build, device model, OS, language and region, display settings, memory, and Low Power Mode
• Website page views and related usage data if Google Analytics is configured. The current iOS app does not include Firebase Analytics

2. Purpose of Use

Collected information is used for the following purposes.

• Providing event search and display features
• Providing nearby event search
• Improving and analyzing the service
• Providing aggregated attendance interest data to organizers and venues
• Displaying the in-app timeline and reviewing reported content
• Delivering selected push notifications and managing notification preferences
• Responding to inquiries
• Sending event information and campaign emails

3. Sharing with Third Parties

For push delivery, we send the push token, recipient user ID, notification ID, event or profile destination, and notification text to Apple Push Notification service (APNs). Notification data is stored in Cloudflare. Notification text may appear on the lock screen or other device surfaces according to device settings.

In-app feedback and its attached account and device information are stored in Cloudflare and sent to the team’s Discord channel. Operational notifications may also include profile display names and Instagram IDs, event information, and the targets and reasons of reports. The app uses Apple for authentication and Cloudflare for APIs, data storage, and media delivery. If a user chooses to save an event to Google Calendar, a URL containing its title, date and time, venue, description, and event URL opens Google’s event creation page. The user reviews and saves the event on Google’s page. OTOHAKO does not obtain Google account credentials or read the save result or existing calendar events. If a user chooses automatic event form filling from an Instagram post URL, the public post’s caption is sent to Google Gemini to generate suggestions. Names and Instagram IDs in the caption are also sent. Aggregated attendance counts may be shown to organizers or venues.

4. Cookies and Local Storage

The website may use cookies or local storage for display preferences and analytics. The app stores OTOHAKO authentication credentials in the device Keychain, and saved events and viewing history on the device. It does not obtain or store Google Calendar credentials.

5. External Services

The service uses the following external services.

• Sign in with Apple, for app authentication
• Apple Push Notification service (APNs), for app push notifications
• Cloudflare, for APIs, database, and image storage
• Discord, for feedback and operational notifications to the team
• Apple MapKit, for the app map
• Google Gemini, for optional event form suggestions
• Google Analytics, if configured on the website
• Google Places, for venue search on the website
• Google Calendar, where users save events on the browser’s event creation page

6. Location Information

The nearby events feature and venue search may use device location. The website uses the browser location API, and the app uses device location services.

The app uses current location to display the map. Venue searches using Google Places on the website send search parameters to Google. The app does not save device coordinates to OTOHAKO's Account API.

7. Notifications

iOS app versions that support notifications deliver pushes according to device permission and in-app preferences. Categories include new events matching favorite genres and areas, reminders for events marked Going, events hosted by or featuring someone you follow as a DJ, Going activity from followed accounts, new followers, Going activity on events you host, and publication of events featuring you as a DJ.

You can enable or disable each category in the app's notification settings and change device notification permission in iOS Settings. The notification device identifier is generated per installation; we do not use an advertising ID or IDFV. Notification data is not used for advertising tracking.

8. Analytics

The website uses Google Analytics 4 if configured. The current iOS app does not include analytics SDKs such as Firebase Analytics. Actions such as account registration, event posting, Going, follows, and reports are recorded on the server for operational notifications and usage counts.

9. Data Retention

Feedback records in our database are deleted with the account. Messages already sent to Discord, including feedback and operational information, are not deleted automatically; contact us to request their deletion.

Reports submitted in the app are used for moderation and deleted after 90 days. Blocks, follows, and Going activity are deleted with the account. Backups under our control that contain personal data are deleted within 30 days of creation. Deletion records are retained only as needed to confirm processing status.

Device registrations and their queued notifications are deleted on logout, deletion of the login session, or account deletion. We do not send to expired sessions. We periodically delete device registrations not updated for over 30 days, delivery records more than 30 days past notification expiry, and source records more than 30 days after processing. Notification preferences are deleted with the account.

10. User Rights

Users may request disclosure, correction, addition, deletion, or suspension of use of their personal data. OTOHAKO will respond within a reasonable period after verifying the user's identity.

11. Account Deletion

Users can start account deletion in My Page > Account Management. Profile data, Going activity, follows, blocks, and login records are deleted. Events and images published through the app are deleted in a follow-up process. Public caches and backups may retain copies temporarily. External provider disconnection is also processed after the request.

12. Contact

For privacy inquiries, please contact us via the support page or email contact@otohako.com.