Hibinoko (ひびのこ) Privacy Policy

Effective / last updated: October 17, 2026

This policy explains how the iOS app "Hibinoko" (ひびのこ, "the App") handles your information. The App uses AI to create an imaginary creature illustration, name and short line from a photo, mood and one-line diary of a day. AI processing is provided by Cloudflare, Inc. ("Cloudflare").

1. Consent

On first launch the App shows what is sent, where, and how long it is kept, and asks for your consent before you start. You can withdraw consent at any time in Settings → "AIへの送信" (Sending to AI). After withdrawal the App sends no further photos or diaries and makes no new AI creations. Withdrawal does not by itself delete data already sent; see section 5 for deletion.

2. Information sent or collected, and why

Information	When	Purpose
A downscaled copy of the one photo you choose (JPEG, longest side 768 px)	After consent, as soon as you select the photo, so analysis can start while you enter your mood and diary. The original photo is never sent.	Reading the place, light and objects in the photo and reflecting them in the creature
Selected moods and one-line diary	When you start a creation	Generating the creature's look, name and line
On-device photo labels and colors, target date, generation parameters, recent generated lines (up to 7) and names (up to 14)	At creation	Tuning the result and avoiding repeated names/lines
Anonymous install key (a random value created on your device)	With each request in the HTTPS authorization header; the server only uses a hash of it	Retrieving/deleting your temporary results, enforcing the 3-per-day limit, preventing abuse
Time, count and status of creations	Recorded on the server at creation	Rate limits, duplicate prevention, cost and abuse control
Device tilt (motion sensor)	On device only, while viewing cards	Card shimmer effect. Never sent or stored.

Photo access is used only to show photos by date and let you choose one. There is no sign-in and no registration of name, email, phone number or location. The App does not read Apple Health (HealthKit) data. If other people appear in your photos, please be considerate of them.

3. Service provider

Sent information is processed by Cloudflare Workers and Workers AI (photo reading, text and image generation) and Cloudflare R2 and Durable Objects (temporary storage and counters). Cloudflare is a U.S. company and processing may take place on its global network, including outside Japan. Cloudflare states that Workers AI inputs and outputs are not used to train AI models without explicit consent. Cloudflare's privacy policy (https://www.cloudflare.com/privacypolicy/) also applies. The developer uses Cloudflare as a provider offering protection equal to this policy. Your information is not sold or provided to any other third party.

4. Storage and retention

On your device: a copy of the chosen photo, moods, diary and the generated illustration, name and line are stored in the App's private area on your iPhone and are removed when you delete the App.
Photo analysis (server): observations read from the photo (not the photo itself) are kept for up to 15 minutes and deleted once used for a creation.
Generated results (server): so that you can still receive a result after a network interruption, the generated illustration and its name, line, photo observations and the parts of your diary/moods used are stored temporarily. The App requests deletion as soon as the result is saved on your device; unreceived results become inaccessible at most 7 days after creation and are then removed by periodic cleanup. The downscaled photo itself is not stored.
Counters and processing records (server): records without content (hashed key, date, status) are kept for roughly up to 14 days to enforce limits and make deletions reliable.
Operational logs and backups on Cloudflare's infrastructure are managed under Cloudflare's policies. Cloud storage is temporary and is not a backup or device-transfer feature.

5. Deletion and withdrawing permission

Settings → Data → "クラウドの一時保存を削除" (Delete cloud temporary copies): deletes illustrations and text temporarily stored on the server (your on-device memories remain).
Settings → Data → "端末の思い出をすべて削除" (Delete all on-device memories): deletes all photos, diaries, names and illustrations on the device.
Settings → Sending to AI → "取り消す" (Withdraw): stops future sending.
Photo access can be changed in iOS Settings → Privacy & Security → Photos.
There are no accounts; the anonymous key exists only on your device. For other deletion requests, contact us (section 10). Because the service is anonymous, we may be unable to identify your data.

6. Advertising, tracking and analytics

The App contains no advertising, no tracking across other companies' apps or websites, and no third-party analytics or crash-reporting SDKs. Your information is never used for advertising or marketing.

7. AI-generated content

Creatures, names and lines are AI creations and do not accurately describe the people or events in your photos. If you see an illustration or text you find inappropriate, please report it as described on the support page. Reports are reviewed and used to improve generation rules.

8. Children

The App is not directed at children under 13. If a child uses the App, a parent or guardian should review this policy and the consent screen.

9. Changes

If our handling changes, we will update this page and its date. For significant changes, such as sending additional information, we will ask for your consent again in the App.

10. Contact

Developer: Masatora Atarashi
Email: atarashi.masatora@gmail.com