Privacy Policy

Effective date: November 14, 2026 (previous version: November 10, 2026) / Operator: YS Studio (Japan) / Contact: ys_studio_info@sketch-surgeon.com

YS Studio ("we", "us" or "our") provides the smartphone and tablet app "FamShare" and its web version for browsers at https://famshare.pages.dev (the "Web Version"). In this policy, the "App" includes the Web Version unless we say otherwise. This policy explains what information the App collects, how we use it, who can see it, and the choices and rights you have. It applies to everyone who uses the App, including users in the United States, Canada, Australia, New Zealand and Singapore.

This is an English translation of our Japanese privacy policy (プライバシーポリシー). Both describe the same practices. If the two versions differ, the Japanese version prevails. This does not limit any right you have under the mandatory privacy or consumer protection laws of the place where you live.

1. Information we collect

• Account information: the email address, display name and user ID you use to sign in (with Apple, Google or an email address). If you choose Apple's "Hide My Email", this is the relay address issued by Apple.
• Content you enter: events, birthdays and anniversaries (name, month and day, and the year of birth or the year it started), lists (such as Shopping, To-Do and Payments), notes, Board posts, date polls (title, proposed dates and answers), links, members' display names, colors, profile photos and "About you" notes (such as a role or affiliation; visible to Group members), labels (including which Groups they are shown in and whether editing is allowed), amounts and similar content. Your personal settings (nicknames you give to other members, your own names and colors for other people's labels, posts you have hidden, and so on) and your app settings (color theme, whether tips are shown, notification times and on/off, background type and so on; text size and the photo you use as a background are not included) are visible only to you and are also applied on your other devices.
• Photos and files: photos you attach to notes, events and Board posts (stored in a reduced size), and PDF files you attach to notes.
• Other calendars (optional): only if you turn on "Other Calendars" in More, the App reads events from the calendars on your device (such as iCloud or Google Calendar) and shows them on the FamShare month, week and day views. The App only reads them and never writes to the original calendars. Events shown this way are displayed only on that device's screen; they are not sent to our server or to any third party, are not shown to your Group members, and are not used for Export Events or notifications. Only events you choose to "Import" are copied (title, date and time) as FamShare events and are then stored and shared like events you entered yourself (you choose Shared or Private when importing). You can withdraw calendar access at any time in your device settings.
• Using the App without signing in (before you sign up): if you choose "Use without signing in", your events, to-dos, notes, Board and other data are stored only on that device and are not sent to our server. During this time we do not collect registration information such as your email address. (However, information related to advertising is sent to Google as described under "Information related to advertising" below.) Whether that data carries over depends on your device. On iPhone, it is included in iCloud and computer backups of the device, so it may carry over when you restore from such a backup or use one to change devices (those backups are kept by Apple or on your computer and are not sent to our server). On Android, it is not included in device backups or device-to-device transfers and does not carry over. If you sign up with an email address, Google or Apple to use the App on other devices, the data on that device is moved to that account and, from then on, is also stored on our server and synced. If you do not sign up, deleting the App or choosing "Erase Data on This Device" in More removes the data from the device, and we cannot recover it (on iPhone, restoring a device backup made before it was removed may bring back the data as of that backup). Inviting people to a Group or joining a Group requires an account, because data is exchanged with other people.
• Home Screen widget (earlier versions): earlier versions of the App saved a summary of the titles and dates of events, birthdays and anniversaries in an area on the device reserved for the App, to show it in the widget. The current version has no widget. A summary saved by an earlier version was never sent to our server or to any third party, and is erased when you delete the App.
• Export Events: when you choose "Export Events" in More, the App creates a file (.ics) containing your events (title, date and time, note, assigned person's name and link, including Private events) and hands it to the destination you choose (a storage location or another app). We do not receive the exported file.
• Camera and photo library: on iPhone and iPad, the camera is used only to scan an invitation QR code; the camera image is not saved or sent. Permission to add to your photo library is used only to save shared photos to your Photos app when you choose to. On Android, the App scans invitation QR codes with Google's code scanner in Google Play services: the App does not get access to the camera and receives only the text of the scanned code. Google may collect usage information about the scanner under its own policies.
• Information related to advertising: the App shows ads from Google AdMob. To deliver ads and measure their performance, Google may collect advertising identifiers (such as the IDFA on iOS or the Android advertising ID), your IP address (which is used to estimate your approximate location), information about the ads shown and your interactions with them, and information about how the App runs (crashes and performance). On iOS, you choose whether to allow the App to track you; if you do not allow it, you can still use every feature (ads are still shown). If you choose to watch a video ad (rewarded ad) to the end, banner ads are hidden until the end of that day. See section 5 for your choices.
• Web Version (in a browser): the Web Version uses the same account as the app (sign-in with Apple, Google or an email address) and reads and writes the same data. So that it shows up quickly and you can still see your data if your connection drops while it is open, it saves the content your account can see (such as events, to-dos, notes and Board posts), changes not yet sent, and your editing period in your browser (IndexedDB). So that it can open without a connection, it also saves the Web Version's own page files in your browser (the Service Worker cache). These files are the same for everyone and contain none of your content. If you choose "Shared computer" on the sign-in screen, neither is saved. Display settings such as light or dark, text size, the holiday region, the first day of the week, the calendar view, the Japanese holiday table (public data), filters, collapsed categories, recently attached items and when you last read News from FamShare are saved in your browser (local storage) and are not sent to our server. Your sign-in state is saved in your browser by Firebase Authentication (you stay signed in until you sign out). When you choose "Sign Out", the events and other content saved in the browser, unsent changes and remembered filters and similar items are erased (your light or dark, text size, holiday region, week-start and calendar view (such as month or week) settings, the Japanese holiday table (public data) and when you last read News from FamShare stay until you clear this site's data in your browser settings). On a shared computer, always sign out when you are done. The Web Version shows no ads and does not use cookies for advertising or analytics. When you sign in with Apple or Google, that company's sign-in window opens, and Apple, Google and Firebase may use their own cookies or similar technologies. The Web Version is delivered by Cloudflare, which processes connection information such as your IP address to deliver it.
• The Web Version video (rewarded ad): if you watch the Web Version video to the end in More > Web Version in the app, you can edit on the Web Version until 11:59 PM that day. The App passes your user ID and your device's time zone (for example America/New_York, used to decide when "that day" ends) to Google AdMob, and AdMob sends our server a notice that you finished the video (signed by Google, including a transaction ID and the ad unit). Our server verifies it and records your editing period, the last day you watched the video, and the time zone. We use these records only to decide whether you can edit on the Web Version.
• Days you use the App: to check Invite Reward conditions and to delete accounts that have not been used for a long time, when a signed-in user opens the app (iPhone or Android) or the Web Version, we record the user ID, the time and date (in Japan time) it was opened, and whether it was the app or the Web Version. The app also sends a number that tells devices apart (a random number the app creates; it is not a device identifier or an advertising identifier) and your app store's country or region (for example, USA).
• Invite Rewards: we record each user's invite code, who entered which code and when, and the status and end date of rewards. To avoid giving rewards between accounts used on the same device, we compare the device numbers above.
• Send Feedback: when you send feedback, a request or a bug report from "News from FamShare" in the App, the text, the type you selected, your user ID, the App version and the type of device (iOS / Android) are sent to us (and, so that we can review it, also arrive in our email inbox, which uses Google's Gmail). Other members cannot see what you send.
• Notifications about family changes: on devices with "Events and To-Dos" turned on, we notify you when someone you're connected with adds or changes a shared event or adds a to-do. If "Show Message Preview" is on, the notification includes their name and the title, and passes through the same services as Board notifications. Private items are not included. On devices with "New Notes" turned on, we also notify you when someone adds a shared note; with previews on, the first line of the note is included.
• Notification tokens: to send notifications such as new Board posts (push notifications), we store on our server a device registration token for notifications (a Firebase Cloud Messaging token), your user ID, the type of device (iOS / Android), the App version, your "New Board Posts" setting, your "Show Message Preview" setting, your "Events and To-Dos" settings, your device's time zone (so that we don't notify you at night), and whether the device can receive change notices. We store this token even on devices where notifications are not allowed, and use it for "change notices" that are not displayed on screen (these tell the device that events or other items were changed by people you are connected with or on your other devices, so that it syncs right away; they contain only a number identifying which calendar changed, and no event content). If "Show Message Preview" is on (it is on by default), a notification includes the sender's name and the beginning of the post (about 50 characters; "sent a photo" for posts with only photos). To deliver the notification, this content passes through Google's Firebase Cloud Messaging and Apple's Push Notification service (the connection is encrypted, but the content passes through these services before it reaches your device). It may also appear while your screen is locked. If you turn off "Show Message Preview" in More, notifications do not include the content of posts (they only say that there is a new post on the Board). We use this token only to send notifications and change notices.
• Checking for a new version: to let you know when a newer version is available, on iPhone and iPad the App checks the version information that Apple publishes on the App Store (sending only the App's identifier), and on Android it asks Google Play whether a new version is available. We do not collect any personal information through this check.
• App integrity checks: to prevent unauthorized access, the App uses Apple (App Attest) and Google (Play Integrity, Firebase App Check) to confirm that it is the genuine App, and sends the result (an attestation token) to our server.
• Preventing abuse: to prevent floods of requests and guessing of invite codes, we count requests per IP address (for IPv6, the first part of the address). For wrong invite codes, we store the IP address and, if you are signed in, your user ID, and delete these records automatically within about 2 days.
• Japanese holiday table: when your holiday region is set to Japan, the App downloads public holiday data from holidays-jp.github.io. Connection information such as your IP address reaches that site. Nothing you entered is sent.
• Reports: when you report a Board post, the post's ID and content (text, up to 1,000 characters), the reason, the reporting user's ID, and the ID of the calendar the post belongs to are sent to us (and, so that we can review it, also arrive in our email inbox, which uses Google's Gmail).

We do not collect your contacts, precise location, health information, browsing history or payment information. The App has no in-app purchases.

Sources: we collect this information from you (what you enter), from your device (for example the notification token and App version), and through the service providers listed in section 4. Information related to advertising is collected directly by Google through the AdMob software in the App.

2. How we use information

• To provide the App's features (sharing with family and partners, sync and notifications).
• To sign you in and confirm that it is you.
• To show ads (to cover the cost of providing the App for free).
• To manage your editing period on the Web Version (confirming that you watched the Web Version video).
• To provide Invite Rewards (checking conditions, managing when benefits end, and preventing misuse).
• To delete accounts that have not been used for a long time.
• To investigate problems, respond to inappropriate posts, and answer your questions.

We do not use the contents of your events, lists, notes, Board posts or photos for advertising, and we do not pass them to Google AdMob.

We do not send marketing emails or newsletters. News about the App is shown only in "News from FamShare" in the App. Apart from emails needed to sign in (such as an email to verify your address or reset your password), we email you only to reply to a message you sent us.

3. Who can see your information

• What you enter is saved in your own calendar.
• When you invite other people and connect with them in a "Group", Group members can see: members' display names, colors, profile photos and "About you" notes; the Group's Board and date polls; events, lists and notes added in the Group without a label; and the events, lists, notes, photos and files under each member's labels that the member has chosen to show in that Group.
• The person who created a label decides which Groups it is shown in and whether members of each Group may edit (add, change and delete) its items. Items added or changed by members allowed to edit are also stored in the label creator's calendar. Items added in a Group without a label belong to the Group, and any Group member can edit or delete them. Deleted items also disappear from other members' screens (they can be restored for 30 days, as described under "How long we keep information, and deletion").
• Events, notes, lists and photos you enter as "Private", and items under labels you have not shown in any Group, are visible only to you and are not visible to Group members.
• When you leave a Group, you can no longer see that Group's items (items added in the Group and items under other members' labels), and your labels are no longer shown in that Group. Earlier Board posts remain readable (see "How long we keep information, and deletion"). Items under your labels stay in your own calendar. When leaving, you can copy items under other members' labels that were shown in that Group into your own calendar as a label only you can see (the copies become your data).
• To ask the remaining members whether they want to take over the items that a leaving member showed in the Group under their labels, we keep a copy of those items as of the time of leaving (including photos and files) on our server for up to 30 days. The copy goes to the first member who chooses to take it over, as that member's label and data; it is deleted when everyone declines or after 30 days. The original items in the leaving member's calendar stay as they are.
• When only one member is left, the Group ends, and the items added in the Group without a label and its date polls are deleted. Earlier Board posts remain readable by the former members, as when someone leaves.
• Any Group member can remove any other member from the Group (the person who created the Group has no special rights). A removed member is treated the same as a member who left.
• An invite code is valid for 7 days, and anyone who has it can join that Group during that time (before joining, they can see the Group's name and the members' display names). The person who issued a code can cancel it. Please handle invite codes with care.
• Nothing in the App is public. There are no public profiles, and people outside your Group cannot search for you or see what you enter. Only the people you invite to your Group can see your Shared items.

4. Service providers

The App uses the following services. Each company handles information under its own policies.

• Cloudflare, Inc.: storing and delivering data (events, lists, notes, posts, date polls, photos and PDF files), and delivering the Web Version (Cloudflare Pages).
• Google LLC (Firebase Authentication, Firebase Cloud Messaging, Firebase App Check): managing sign-in, delivering notifications, and checking that the App is genuine.
• Google LLC (AdMob): delivering ads, and notifying our server when you finish the Web Version video.
• Google LLC (Gmail, Google Apps Script): delivering feedback and reports to us.
• Apple Inc.: Sign in with Apple, delivering notifications (APNs), checking that the App is genuine (App Attest), and distributing the App.

Except where required by law, we do not provide or sell your personal information to any third party other than these companies.

5. Advertising and your choices

FamShare is free and shows small banner ads, plus an optional video ad you can choose to watch. The ads are provided by Google AdMob. Google may use the information described in section 1 to show ads, including ads based on your interests, to limit how often an ad is shown, to measure ads, and to prevent fraud. Learn more in How Google uses information from sites or apps that use its services.

• iPhone and iPad: the App asks once whether you allow tracking (App Tracking Transparency). If you choose "Ask App Not to Track", the App and Google cannot access your device's advertising identifier (IDFA). You can change this at any time in Settings > Privacy & Security > Tracking.
• Android: you can reset or delete your advertising ID, or opt out of ads personalization, in your device's settings (for example Settings > Privacy > Ads, or Settings > Google > Ads, depending on the device).
• Users in certain US states: if you live in a US state whose privacy law gives you the right to opt out of the "sale" or "sharing" of personal information or of targeted advertising, the App shows a "Privacy Choices" entry in More (More > Privacy Choices). There you can opt out of the sale or sharing of your personal information for targeted advertising. This choice is provided through Google's User Messaging Platform. If you opt out, Google limits how it uses your information for the App's ads (restricted data processing), and you will no longer see ads in the App that are based on your interests. You can change your choice at any time from the same entry. The App does not show a pop-up for this.
• Users in Canada: when your device's region is set to Canada, the App asks Google AdMob to show only non-personalized ads, from the start and without you having to change anything. Non-personalized ads are chosen from context (such as the App and your general location estimated from your IP address) instead of your past activity or interests. Google may still use identifiers to limit how often an ad is shown, for aggregated ad reporting and to prevent fraud. The App decides this from your device's region setting, so if you live in Canada but your device region is set to another country, please use the device settings above.
• Ads are still shown if you limit tracking or personalization, but they may be less relevant to you. Every feature of the App works either way.
• The App does not use cookies for advertising, and the Web Version shows no ads, so we do not respond to browser "Do Not Track" signals.
• What kind of ads: because family members, including children, may see the screen, we limit ads in the App to content rated for general audiences with parental guidance (Google's "PG" maximum ad content rating), and we block sensitive ad categories such as dating and gambling. The App does not show full-screen (interstitial) or pop-up ads. It shows only small banner ads, and a video ad only when you choose to watch one.

6. How long we keep information, and deletion

• When you choose More > Account > Delete Account in the App, we delete your own calendar on our server and everything you entered in it (including events, lists, notes, photos and PDF files under your labels), your Board posts, date polls and answers in Groups, any copies kept for the "take over?" question after you left a Group that nobody has taken over yet, and your sign-in account. What you entered also disappears from other members' screens. Events, to-dos and notes you added in a Group without a label move to the Group's Recently Deleted, where Group members can restore them for 30 days; after that they are permanently deleted from our server. What other members entered and copies other members have already taken over or copied remain theirs or the Group's (changes you made to items in other members' calendars remain as they are).
• Events, notes, to-dos, categories, note tabs, labels, birthdays and anniversaries, and Quick Events that you delete in the App stay on our server for 30 days so they can be restored, and are then deleted automatically (photos and files on deleted notes are removed by the cleanup that follows). During that time they appear under More > Recently Deleted, together with who deleted them. Shared items are visible to, and can be restored by, the members who were connected when the item was deleted. Private items are visible only to you. The owner of a calendar can permanently delete items before the 30 days are up (for Private items, only you can). If a calendar reaches its storage limit, the oldest of these items are deleted first. Board posts are not kept (once you unsend a post, it can't be restored). If you delete your account, the items in your own calendar and your Private items are deleted without waiting for the 30 days.
• Photos posted to the Board are automatically deleted 30 days after posting (the text of the post remains).
• Photos and PDF files attached to notes are automatically deleted once 30 days have passed since the note was marked Done, the next time the Notes screen is opened in the app (unless you chose to keep them).
• If the creator deletes a date poll, everyone's answers are no longer visible. Your own answers are deleted when you delete your account.
• Records of reports are kept for as long as needed to handle them.
• What you send through Send Feedback is kept to respond and to improve the App, and is deleted for that user when the account is deleted. Copies that arrived in our email inbox are deleted within one year after we have handled them.
• After you leave a Group, and after a Group ends, earlier Board posts remain readable by both you and the other members (read-only, under "Groups You Left" on the Board; events, lists and notes are no longer visible). Choosing "Delete All Messages" removes them from your screen. If you delete your account, your posts also disappear from other people's screens.
• Notification tokens are deleted when you sign out or delete your account. Tokens not used for 90 days are also deleted automatically.
• Records of your Web Version editing period are deleted when you delete your account. Transaction IDs of video notices are kept to prevent the same notice from being counted twice, and are deleted automatically after 30 days.
• Day-by-day records of when you used the App are deleted automatically after 60 days. The time you last used the App is kept until your account is deleted. Device numbers are deleted automatically 400 days after they were last used.
• Invite records are deleted automatically 400 days after the reward is given (or after the invite ends without meeting the conditions), and benefit records 30 days after they end. When you delete your account, your own records are deleted (however, to keep counting the inviter's reward limit correctly, records of invites that earned a reward are kept with the user ID replaced by a different marker).
• Accounts where neither the app (iPhone or Android) nor the Web Version has been opened for 2 years are deleted without notice, in the same way as when you delete your account yourself.
• What the Web Version saved in your browser is erased when you choose "Sign Out" on the Web Version (and when someone signs in with a different account in that browser). Your light or dark, text size, holiday region, week-start and calendar view (such as month or week) settings, the Japanese holiday table (public data) and when you last read News from FamShare stay until you clear this site's data in your browser settings.
• Deleted data (including items whose 30 days under Recently Deleted have passed) may remain in our service providers' backups (such as the database's point-in-time recovery) for up to 30 days, after which it is removed automatically. We use these backups only to recover from failures. In addition, according to Google, sign-in information (Firebase Authentication) is removed from Google's live and backup systems within 180 days of a deletion request.

7. Where your information is stored (international transfers)

YS Studio is based in Japan. Our service providers (Cloudflare, Google and Apple) are based in the United States and operate data centers in many countries, so your information may be stored and processed outside your country (and, for Canadian residents, outside your province), for example in the United States and Japan. Our main database and our photo and file storage (Cloudflare D1 and R2) are located in Cloudflare's Asia-Pacific (APAC) region. When information is sent to or from your device, it may also pass through, and be temporarily cached in, Cloudflare's data centers in other countries. Firebase Authentication (sign-in) runs only from data centers in the United States. Privacy laws in these countries may differ from those where you live. We use these providers only to run the App as described in this policy.

8. Children

You must be at least 13 years old to use the App yourself. The App is not directed to children under 13, and we do not intend to collect personal information from children under 13. Children under 13 should not create an account or use the App themselves; instead, a parent or guardian can represent them in the App with a label (for example, to show which events are a child's). Information that parents and guardians enter about their children (such as a name, a label or a birthday) to plan family life is handled as content they enter. In Quebec, users under 14 may use the App only with the consent of a parent or guardian. If you believe a child under 13 has given us personal information, a parent, guardian or the child can contact us at ys_studio_info@sketch-surgeon.com. After confirming the request, we will delete the account and the information that person entered, including shared events and board posts in their calendar and photos they sent to other people's calendars. We don't record who made each edit to another person's items, so we look for those edits from the details you give us and delete them after checking with the owner of that calendar.

Laws of certain US states: on iPhone and iPad, when your device's region is the United States and Apple treats you as covered by these laws, we receive your age category from the App Store. If you are under 18, or your category is unknown, the App does not show personalized ads or ask for permission to track. We use your age category only on your device, to comply with these laws and to apply this setting. We do not store it or send it to our servers or to third parties (ad requests only carry a setting that asks for non-personalized ads). On Android, when your device's region is the United States, we may receive your age category from Google Play. We use it only to comply with these laws, not for advertising, and we do not store it or send it to our servers or to third parties. If it shows that the Google Account on the device is under 13, the App stops new sign-ins and registration; if you are already signed in, it shows a notice and a way to delete the account, and does not delete or sign out automatically. When your device's region is the United States, the App shows only non-personalized ads to everyone on Android, whatever your age, because Google's rules do not allow age categories to be used for advertising.

If we learn a user is under 13 (iPhone and iPad): if the App Store's age category shows that the Apple Account on the device is under 13, the App does not load ads. It also stops new sign-ins and registrations, so the App can be used only without signing in, with data kept on the device. If an account is already signed in, the App does not delete it automatically, because a parent's account may be in use on a child's device; instead it shows a notice and a way to delete the account. The only thing kept on the device is a mark that the notice was closed, which does not include the age category. We rely only on the App Store's age category and do not check age in any other way.

9. Security

Communication is encrypted, and our server restricts access so that only you can access your personal data. However, no method of transmission or storage on the internet is completely secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to cause serious harm, we will notify you and the relevant authorities as required by applicable law.

10. Your rights

You can ask us for access to, correction of, or deletion of your personal information. You can also edit and delete your information in the App, and delete all of it with "Delete Account". For other requests, please email us at the address below from the email address linked to your account (so that we can confirm the request comes from you). We will respond within the time required by applicable law. We will not treat you differently for exercising your rights.

You can also use the App without signing in, and you may use any display name you like (you do not have to use your real name).

11. Additional information for US residents

Some US states (such as California, Virginia, Colorado, Connecticut, Utah and Texas) give their residents specific privacy rights. Depending on where you live, you may have the right to know what personal information we collect and how we use and disclose it, to access it, to correct it, to delete it, to opt out of the "sale" or "sharing" of personal information or of targeted advertising, and to appeal our decision on your request.

• Categories we collect: identifiers (email address, display name, user ID, notification token, advertising identifiers, IP address); customer records (name and email address); photos you upload; internet or other electronic activity (information about ads and your interactions with them, collected by Google AdMob; App diagnostics; whether and when you finished the Web Version video, and your device's time zone; the days you open the App); approximate location estimated from your IP address (by Google AdMob); and the content you enter. See section 1 for details and sources, section 2 for purposes, and section 6 for how long we keep each type.
• Sensitive personal information: the only sensitive personal information we handle is your account sign-in information, which we use only to sign you in. We do not use or disclose sensitive personal information to infer characteristics about you.
• Disclosure: we disclose personal information to the service providers in section 4 to operate the App, and to the people you share with, as described in section 3.
• "Sale" and "sharing": we do not sell personal information for money. However, when Google AdMob uses advertising identifiers and related information to show ads based on your interests across apps, this may be treated as a "sale", "sharing" for cross-context behavioral advertising, or "targeted advertising" under some state laws. You can opt out in the App with More > Privacy Choices, or by using the device settings (see section 5).
• How to make a request: email ys_studio_info@sketch-surgeon.com from the email address linked to your account. An authorized agent may make a request for you if we can confirm that you gave them permission. If we deny your request, you can appeal by replying to our response; we will reply to your appeal within the time required by law.

12. Additional information for Australian residents

We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). You can use the App without signing in or under a pseudonym (any display name). Information may be disclosed to the overseas service providers described in sections 4 and 7, for example in the United States and Japan. If you have a complaint about how we handled your personal information, please contact us first; we aim to respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

13. Additional information for New Zealand residents

We handle personal information in line with the Information Privacy Principles under the Privacy Act 2020. You have the right to ask for access to, and correction of, your personal information, and we will respond within 20 working days. Information may be disclosed to the overseas service providers described in sections 4 and 7. If you have a complaint, please contact us first. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at www.privacy.org.nz.

14. Additional information for Canadian residents

We handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for residents of Quebec, the Act respecting the protection of personal information in the private sector (as amended by Law 25).

• Person in charge of the protection of personal information: Owner, YS Studio (Japan). Contact: ys_studio_info@sketch-surgeon.com.
• Consent: we collect, use and disclose personal information as described in this policy. You can withdraw your consent at any time, for example by deleting your account, turning off Other Calendars or notifications, or changing the advertising settings in section 5. Some features may not work without certain information.
• Technologies that can profile or locate you: Google AdMob uses advertising identifiers and your IP address (for approximate location) and can use them to show ads based on your interests. For users whose device region is Canada, ad personalization is off by default: the App asks Google AdMob for non-personalized ads only (see section 5). On iPhone and iPad, the App also asks for your permission before it can access the advertising identifier (App Tracking Transparency). The App does not collect your precise location.
• Storage outside Quebec and Canada: before you give us your information, we want you to know that it is stored and processed outside Quebec and Canada, for example in the United States and Japan, by the service providers in section 4 (see section 7). While it is there, it may be accessible to the courts, law enforcement and national security authorities of those countries under their laws. Before communicating personal information outside Quebec, we carry out a privacy impact assessment that considers the sensitivity of the information, the purposes, the safeguards (including the providers' contractual obligations) and the legal framework of the destination, and we use these providers only where the assessment shows that the information will be adequately protected.
• Children: you must be at least 13 years old to use the App yourself. In Quebec, users under 14 may use the App only with the consent of a parent or guardian, and we do not knowingly collect personal information from children under 14 in Quebec without that consent (see also section 8 and our Terms of Use).
• Your rights: you can ask for access to and correction of your personal information, and withdraw consent. Quebec residents can also ask for a copy of the personal information they provided in a commonly used technological format. We do not make decisions about you based only on automated processing. We will respond within 30 days.
• Privacy breaches: if a breach creates a real risk of significant harm (or, in Quebec, a risk of serious injury), we will notify you and the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec, as required by law. We keep a record of privacy breaches as required by law.
• Complaints: please contact us first. If you are not satisfied, you can contact the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or, in Quebec, the Commission d'accès à l'information (www.cai.gouv.qc.ca).

15. Additional information for Singapore residents

We handle personal data in line with the Personal Data Protection Act 2012 (PDPA).

• Data Protection Officer: Owner, YS Studio (Japan). Contact: ys_studio_info@sketch-surgeon.com (checked on business days; Japan time is one hour ahead of Singapore time).
• Purposes and consent: we collect, use and disclose personal data only for the purposes in section 2. You can withdraw your consent at any time by deleting your account, turning off the relevant features, changing your device's advertising settings (section 5), or contacting us. We will tell you what may happen if you withdraw (for example, some features may no longer work).
• Transfers outside Singapore: your personal data may be stored and processed outside Singapore, for example in the United States and Japan, by the service providers in section 4 (see section 7). The providers that store or process personal data on our behalf are bound by legally enforceable data processing terms that require them to process the data only on our instructions and to keep it secure: Cloudflare, under the Cloudflare Data Processing Addendum, which is part of our service agreement with Cloudflare; and Google, under the Google Cloud Data Processing Addendum (for Firebase Authentication and Firebase App Check) and the Firebase Data Processing and Security Terms (for Firebase Cloud Messaging). Google AdMob collects advertising information directly through the App and handles it as an independent controller under Google's own privacy policy and data protection terms (see section 5). Apple handles Sign in with Apple, notifications and App Attest under its own terms and privacy policy. Feedback and reports reach us through Gmail and Google Apps Script on a personal Google account; Google provides these under its general terms of service and privacy policy.
• Advertising: in Singapore, ads in the App may be personalized unless you limit this. You can limit ad personalization at any time in your device settings (section 5).
• Access and correction: you can ask for access to, and correction of, your personal data. We will respond as soon as reasonably possible, generally within 30 days.
• Data breaches: if we assess that a data breach is likely to cause significant harm to the people affected, or affects 500 or more people, we will notify the Personal Data Protection Commission within 3 calendar days of that assessment. If it is likely to cause you significant harm, we will also notify you.
• Complaints: please contact us first. You can also contact the Personal Data Protection Commission (www.pdpc.gov.sg).

16. Additional information for Hong Kong residents

We handle personal data in line with the Personal Data (Privacy) Ordinance (Cap. 486).

• Purposes: we collect and use personal data only for the purposes in section 2. We do not use what you write in the App for advertising, and we do not sell personal data.
• Transfers outside Hong Kong: your personal data may be stored and processed outside Hong Kong, for example in the United States and Japan, by the service providers in section 4 (see section 7).
• Advertising: in Hong Kong, ads in the App may be personalized unless you limit this. You can limit ad personalization at any time in your device settings (section 5).
• Access and correction: you can ask for access to, and correction of, your personal data. We will respond within 40 days.
• Complaints: please contact us first. You can also contact the Office of the Privacy Commissioner for Personal Data, Hong Kong (www.pcpd.org.hk).

17. Additional information for Malaysia residents

We are based in Japan and have no office or equipment in Malaysia. Even so, we follow the main principles of the Personal Data Protection Act 2010 (PDPA) for people in Malaysia.

• Purposes and consent: we collect and use personal data only for the purposes in section 2. You can withdraw your consent at any time by deleting your account, turning off the relevant features, changing your device's advertising settings (section 5), or contacting us.
• Transfers outside Malaysia: your personal data may be stored and processed outside Malaysia, for example in the United States and Japan, by the service providers in section 4 (see section 7).
• Advertising: in Malaysia, ads in the App may be personalized unless you limit this. You can limit ad personalization at any time in your device settings (section 5).
• Access and correction: you can ask for access to, and correction of, your personal data. We will respond within 21 days.
• Contact and complaints: Owner, YS Studio (Japan), ys_studio_info@sketch-surgeon.com. You can also contact the Personal Data Protection Department (www.pdp.gov.my).

Ringkasan dalam Bahasa Melayu: YS Studio (Jepun) mengumpul dan menggunakan data peribadi anda hanya untuk menyediakan FamShare seperti yang diterangkan dalam dasar ini. Data anda mungkin disimpan dan diproses di luar Malaysia, contohnya di Amerika Syarikat dan Jepun. Iklan dalam aplikasi mungkin diperibadikan melainkan anda menghadkannya dalam tetapan peranti. Anda boleh meminta akses atau pembetulan data anda, menarik balik persetujuan dengan memadam akaun anda, atau menghubungi kami di ys_studio_info@sketch-surgeon.com.

18. Changes to this policy

When we change this policy, we will post it on this page, and we will let you know about important changes in the App.

19. Contact

YS Studio (Japan) / ys_studio_info@sketch-surgeon.com
We accept messages in English or Japanese.