Privacy Policy

Last updated: October 8, 2026

Atta? (hereinafter the "App") respects the privacy of its users and is committed to protecting personal information. This Privacy Policy explains the information the App collects, uses, and protects.

Data Controller

Data Controller: Kosuke Kaya (individual developer)
Japan
Email: kayakou123@gmail.com

1. Information We Collect

1.1 Account Information

Using the App requires you to register an account. You can choose from the methods below (Sign in with Apple is available in the iPhone app, and signing in with Google in the Android app). In every case authentication is managed by Firebase Authentication (Google).

Email address and password: We store your registered email address in order to identify and authenticate your account. The password itself is managed securely by Google (Firebase); we never obtain it in plain text.
Sign in with Apple: We receive from Apple a user identifier issued by Apple, together with the name and email address you choose to share. If you choose "Hide My Email", what we receive is a relay email address issued by Apple, and your real email address is not disclosed to us. The name (given name) we receive is used as your initial display name (Section 1.2). We never obtain your Apple password.
Signing in with Google (Android app): When you choose a Google account on your device, we receive from Google your Google account identifier (user ID), name, email address and the URL of your profile picture, and these are recorded in Firebase Authentication. The name we receive is used as your initial display name (Section 1.2). The App does not display or use your profile picture. We never obtain your Google password.

The email address and identifier we receive are used solely to identify and authenticate your account and to respond to your enquiries.

1.2 Display Name (User Name)

The display name you set in the App is shown to the other members of your group when you use the "Group" feature described below. If you register with Sign in with Apple, the initial value is the name (given name) received from Apple, or, if you did not share your name, the part of your email address before the "@". In the Android app, the initial value is the name received from Google if you sign in with Google, or "You" if you register with an email address. You can change your display name at any time from the settings screen.

1.3 Shopping Lists, Stock, Purchase History and Group Information

In order to provide the App's core feature — creating and sharing shopping lists — we collect the following information.

The contents of your shopping list, such as item names, quantities and notes
The contents of items you register as stock (things you do not want to run out of)
Purchase history (who purchased what, and when)
The name, member composition and invitation code of your group (family, housemates, etc.)

When you register an account, a group for your own use is created automatically (only you use it unless you invite other members). All of this is stored on Google Cloud (Cloud Firestore) under our management. The App is not designed to work with local storage alone: the data above is always transmitted to and stored on our cloud servers. If you belong to a group, this information is shared with all members of that group.

Important: Anything you enter into a group (item names, notes, etc.) is shared with every member of that group. Please take care not to enter information that could identify an individual, or information about other people, without the consent of the people you share it with.

1.4 Information Used for Push Notifications

In order to notify you of updates to your group's shopping list and similar events, we obtain the Firebase Cloud Messaging (FCM) device token and store it in a database under our management. You can change the notification permission at any time in your device settings (Settings on iPhone, or Settings > Apps > Atta? > Notifications on Android).

1.5 Voice Input

The feature that lets you add items to your shopping list by voice uses the standard iOS speech recognition framework (SFSpeechRecognizer). Audio picked up by the microphone is processed by Apple's speech recognition in order to convert it into text. Audio data is never transmitted to servers under our management. For how Apple handles this processing, please refer to Apple's privacy policy. Using the microphone and speech recognition requires iOS permissions (microphone use and speech recognition). You can change these permissions at any time in your iOS settings. On Android, the feature uses the device's speech recognition (SpeechRecognizer). This service is provided by Google, and audio data is processed on Google's servers. For how Google handles this, please refer to Google's Privacy Policy. On Android, using this feature requires the microphone permission.

1.6 Camera (Reading Invitation QR Codes)

The App's camera feature is used solely for the purpose of reading invitation QR codes for groups. We do not store the images captured by the camera, nor do we transmit them to our servers or to any third party. Using the camera requires a device permission (iOS or Android).

1.7 Purchase Information (Premium Plan / Subscription)

We use a service provided by RevenueCat, Inc. to manage the purchase and renewal status of the paid "Atta? Premium" plan.

Payment is processed through Apple's App Store in the iPhone app, and through Google Play in the Android app. Apple or Google processes the payment under its own privacy policy, and neither we nor RevenueCat obtain payment information such as your credit card number.
The following information is sent to RevenueCat: the history of purchases, renewals and cancellations, the type of product purchased, an anonymous identifier for the App (such as your Firebase authentication ID), and information such as your device and app version.
RevenueCat handles this information as a processor acting on our behalf. For details, please see the RevenueCat Privacy Policy.

1.8 Data Collected Automatically by Third-Party Services

The following third-party services used in the App may automatically collect certain data.

Google AdMob (advertising):

Advertising identifier (IDFA on iPhone; as described in Section 7 below, the App does not request tracking permission, so access to it is restricted. On Android, the advertising ID and app set ID)
IP address
Device identifiers and device information (model, OS version, screen size)
Ad interaction data (impressions, clicks)
Approximate region (estimated from the IP address; the App does not obtain your device's precise location)
Diagnostic information (crashes, performance, etc.)

This data is not obtained or stored by us directly; it is collected and managed by Google.

Firebase (data storage, authentication, push notifications): In addition to the information each feature needs to work, diagnostic information about how the SDK is running (error and usage statistics) is sent to Google. It does not include information that identifies an individual. The App does not include Firebase Analytics (a usage analytics tool).

Firebase Remote Config: Used to switch app settings, such as showing or hiding advertisements, without requiring an app update. The minimum information needed to identify a device (such as the app instance ID) is sent to Google, but we never use it for the purpose of identifying an individual.

1.9 Shopping Check (Use of Generative AI)

The shopping check feature uses Google's generative AI (the Gemini API) to build shopping suggestions. When you use this feature, the goal you enter (for example, "I want to make curry") and the names of items to exclude from the suggestions (those already on your shopping list or in your stock) are sent to Google.

Only the information above is sent. Your account information (email address, user ID), display name, group information and purchase history are not sent. For how Google handles this, please refer to Google's Privacy Policy and the Gemini API Terms of Service.

This feature is optional. The first time you use it, the App explains that the information above will be sent to Google, and it is sent only if you agree. If you do not agree, or do not use the feature, none of the information above is sent.

On the free plan you can use it up to three times a day; beyond that, you can use it by watching a rewarded advertisement (Section 7.1).

1.10 Usage Data and Session Recordings (iPhone version)

To find and fix what is hard to use, the iPhone version sends the following information to an analytics service provided by PostHog, Inc. (PostHog). The Android version does not send it.

Usage data: the names of the screens you open, and the kinds and counts of actions you take (for example: added one item, marked items as bought, changed a stock count, opened the Premium plan screen). This does not include item names, message text, display names or email addresses.
Session recordings (session replay): images of the App's screens, and where and when you tapped. What is shown on your shopping and stock lists (item names, counts and notes), the goal you enter in the shopping check, and text recognized from voice input are recorded as is (we use them to check that predictions and shopping check suggestions fit how the App is actually used). Display names of members such as family, group names, email addresses, invitation QR codes and messages are blacked out on your device before sending, so they cannot be read. However, because of how the system draws them, the input fields for changing your display name or group name in Settings, and the names shown in the menu for switching groups, are not blacked out and are recorded. Camera images are not sent.
Both are linked to your App account identifier (Firebase authentication ID). Display names and email addresses are not sent.
PostHog estimates and records your approximate country and region from the IP address used when sending (your device's precise location is not sent).

If you turn off "Share usage statistics" in Settings, usage data is no longer sent (and session recording stops as well). Session recording happens only if you choose "Count me in" in the "Help Improve Atta?" request shown after you finish shopping, and stops if you turn off "Send how you navigate the app" in Settings.

1.11 What We Do Not Collect

The App does not collect or use the following information.

Your device's precise location (such as GPS; the App does not ask for location permission. However, the advertising SDK (Section 1.8) and PostHog (Section 1.10) may estimate your approximate region from your IP address)
Access to your photo library (the camera is used only to read QR codes; captured images are neither stored nor transmitted)
Contacts

2. How We Use Information

The information we collect is used solely for the following purposes.

Recording shopping lists, stock and purchase history, and sharing them between group members
Providing the group features (invitations, joining, member management)
Sending push notifications about updates to shopping lists and similar events
Adding items to a list by voice
Building shopping suggestions with the shopping check (generative AI)
Managing purchases and usage status of the Premium plan
Identifying problems and keeping the App running reliably (anonymous diagnostic information sent by each SDK)
Finding and fixing what is hard to use (usage data and session recordings in Section 1.10)
Displaying advertisements (Google AdMob)

3. Legal Basis for Processing (if you use the App from the EEA or the UK)

The App is offered primarily to users in Japan. However, if you use it from the European Economic Area (EEA) or the United Kingdom, we process personal data on the following legal bases under the General Data Protection Regulation (GDPR).

Performance of a contract: We process account information and shared data in order to provide the core features of the App, such as account registration and sharing shopping lists within a group.
Consent: The microphone, speech recognition, camera and notifications are used only where you have given explicit consent through the device (iOS or Android) permission prompt. You may withdraw that consent at any time in your device settings. Information is also sent to generative AI by the shopping check (Section 1.9), and session recordings (Section 1.10) are made, only with your consent given in the App.
Legitimate interests (usage data): We process usage data (Section 1.10) to improve the App. You can stop it at any time with "Share usage statistics" in Settings.
Legitimate interests: We process data to the minimum extent necessary in order to prevent misuse, to provide the App reliably, and to identify problems based on anonymous diagnostic information.

The App does not carry out tracking across users or devices using the advertising identifier (the IDFA on iPhone or the advertising ID on Android). See Section 7 for details.

4. Data Storage and Management

4.1 Where Data Is Stored

Shopping lists, stock, purchase history, group information, user names and push notification tokens are stored in Cloud Firestore, provided by Google, within a project under our management. Account information (your email address, Apple or Google account identifier, etc.) is managed by Firebase Authentication. Purchase and subscription status is managed by RevenueCat (Section 1.7). In addition, the data described in Section 1.8 is transmitted to the servers of Google AdMob and the Firebase SDKs.

4.2 Deleting Data

The App has no feature that deletes your data or account automatically.

Individual items: You can delete them at any time from within the App.
Leaving a group: You can remove yourself from a group's members at any time from "Leave group" on the settings screen. Note that content you shared with the group before leaving (records in the shopping list, etc.) may remain as the data of the other members who stayed in the group.
Signing out: You can sign out from the settings screen. Signing out ends the session on your device; it does not delete the data stored in the cloud.
Deleting your account and related data: You can delete your account at any time from "Delete account" on the settings screen. This deletes your user information, removes you from group members (in the Android app, from every group you belong to; in the iPhone app, from the group currently selected), and deletes your authentication account itself. Shopping lists, stock and purchase history remain with the group as its shared data, and this action cannot be undone. If you would also like the content you registered and that remains with the group to be deleted from the cloud, please contact us at kayakou123@gmail.com. We will delete it within 30 days of your request after verifying your identity.
Usage data and session recordings (Section 1.10): Deleting your account does not immediately delete usage data and session recordings in PostHog; they are deleted automatically after the retention period in Section 5. If you want them deleted sooner, contact us at kayakou123@gmail.com and we will delete them within 30 days of your request. To stop sending them, turn off "Share usage statistics" and "Send how you navigate the app" in Settings.
Requesting deletion when you cannot use the App: If you have removed the App or cannot sign in, you can also ask us by email to delete your account. For the steps, and for which data is deleted or kept, see the Delete Your Account page.

Deleting your account does not cancel a Premium subscription. Please cancel it first in the App Store or Google Play.

Uninstalling the App does not delete the data stored in the cloud (shopping lists, stock, purchase history, group information, account information, etc.). If you want it deleted completely, please delete your account before uninstalling, or request deletion at the address above.

5. Data Retention

Account information, shopping lists, stock, purchase history and group information: Retained in Cloud Firestore / Firebase Authentication under our management until you delete it yourself or request deletion as described in Section 4.2.
Purchase and subscription status: Retained according to RevenueCat's data retention policy. For details, see the RevenueCat Privacy Policy.
AdMob data: Retained according to Google's data retention policy. For details, see the Google Privacy Policy.
Usage data and session recordings (PostHog): Usage data is automatically deleted from PostHog after at most one year, and session recordings 30 days after they are recorded.
Firebase diagnostic information: Retained according to Google's data retention policy. For details, see the Firebase privacy support page.

6. Sharing Information with Third Parties

The App does not sell your personal information. We also do not share it with third parties without your consent, except in the following cases.

To the members of your group: The shopping lists, stock, purchase history and display name you enter and share within a group are shown to the other members of that group. This is the very purpose of the App.
Vendors engaged to provide the service: We use Google LLC (Firebase) and RevenueCat, Inc. to store and deliver data and to manage billing, and PostHog, Inc. (servers in the United States, us.i.posthog.com) for usage analytics and session recordings. These vendors process data on our instructions, to the extent necessary to provide the service.
Where disclosure is required by law
Where you have given your consent
Where Google AdMob, which we use to display advertisements, automatically obtains the information necessary for ad delivery (advertising identifier, IP address, etc.). This data is managed and processed by Google. We do not have direct access to personally identifying information derived from it.
Where the Firebase SDKs automatically obtain the information each feature needs to work and anonymous diagnostic information (managed and processed by Google)

7. Advertising

7.1 Google AdMob

The App uses Google AdMob to display interstitial advertisements (full-screen ads shown when switching screens, etc.) and app open advertisements (iPhone app only). It also shows rewarded advertisements, which you choose to watch yourself, when you use the shopping check beyond the free allowance (three times a day). If you are subscribed to the Premium plan, no advertisements are shown. AdMob may collect the information described in Section 1.8 in order to deliver advertisements.

The data collected by AdMob is managed and processed by Google. For details, see the Google Privacy Policy.

7.2 Tracking (ATT)

The App currently does not display the App Tracking Transparency (ATT) prompt requesting permission to track. In this case, the standard behavior of iOS restricts access to the advertising identifier (IDFA), and Google AdMob delivers advertisements that are not based on the device's advertising identifier (non-personalized ads). The App does not track users across other companies' apps or websites.

In the Android app, every ad is requested as a non-personalized ad. Even so, the Google Mobile Ads SDK obtains identifiers such as the Android advertising ID for frequency capping, aggregated reporting and fraud prevention.

You can also review and manage your advertising settings in the following ways.

iOS Settings > Privacy & Security > Apple Advertising, to review and change your ad personalization settings
Android Settings > Privacy > Ads (on some devices, Settings > Google > Ads), to reset or delete your advertising ID
Google Data & Privacy, to manage the ad settings associated with your Google account

8. International Data Transfers

Through our use of Google (Firebase and AdMob), RevenueCat and PostHog, some data may be transferred to and processed on servers located in the United States or in other countries outside the country where you live.

Google, RevenueCat and PostHog apply appropriate data protection measures, including the Standard Contractual Clauses (SCCs) approved by the European Commission, so that data is protected in accordance with applicable data protection law. For details, please see Google's data transfer frameworks , the RevenueCat Data Processing Addendum and the PostHog Privacy Policy.

9. Permissions Required

The App may require the following permissions. You can change any of them at any time in your device (iOS or Android) settings.

Microphone: Used to add items to your shopping list by voice (Section 1.5).
Speech recognition: Used to convert what you say into text (Section 1.5; iPhone app only. The Android app asks only for the microphone permission).
Camera: Used solely to read invitation QR codes for groups (Section 1.6).
Notifications: Used to notify you of updates to your group's shopping list and similar events (Section 1.4).

10. Data Security

The App protects data using the standard security features provided by Google, such as authentication via Firebase Authentication, access control through Cloud Firestore security rules, and encryption in transit (TLS). Group data on the server is restricted so that only authenticated members of that group can access it. However, no method of transmission over the internet or of electronic storage can be guaranteed to be 100% secure.

11. Children's Privacy

The App is not intended for children under the age of 13. Where the law of your country (such as an EU/EEA member state) sets a higher age (up to 16), the App is not intended for children under that age (this is the same standard as Article 1 of our Terms of Service). We do not knowingly collect personal information from children under those ages. If we become aware that we have inadvertently collected personal information from a child under the applicable age, we will promptly take steps to delete that information.

12. Your Rights

12.1 Rights under the GDPR (users in the EEA and the UK)

If you live in the European Economic Area or the United Kingdom, you have the following rights in relation to your personal data.

Right of access: You have the right to request a copy of the personal data we hold about you.
Right to rectification: You have the right to request that inaccurate personal data be corrected.
Right to erasure: You have the right to request that your personal data be deleted.
Right to restriction of processing: You have the right to request that the processing of your personal data be restricted.
Right to data portability: You have the right to receive your personal data in a structured, commonly used format.
Right to object: You have the right to object to the processing of your personal data based on legitimate interests.
Right to lodge a complaint: You have the right to lodge a complaint with the supervisory authority in your country.

12.2 Rights under the CCPA (California residents)

If you live in California, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Right to know (access): You have the right to know what personal information is collected, used, shared or sold, and the specific pieces of personal information we hold about you.
Data portability: You have the right to receive the personal information disclosed to you under the right to know in a structured, commonly used, machine-readable format, to the extent technically feasible.
Right to delete: You have the right to request the deletion of your personal information.
Right to correct: You have the right to request that inaccurate personal information be corrected.
Right to opt out: You have the right to opt out of the sale or sharing (sharing for cross-context behavioral advertising) of your personal information. Note that we do not sell users' personal information.
Right to limit the use of sensitive personal information: You have the right to direct us to limit the use and disclosure of your sensitive personal information to what is necessary to provide the service. Note that the App does not use or disclose sensitive personal information beyond what is necessary to provide the service (such as logging in to your account).
Non-discrimination: You will not be discriminated against for exercising your CCPA rights.

12.3 How to Exercise Your Rights

Because the App manages data in the cloud through its group features, you can carry out the following actions directly in the App.

Delete individual shopping list or stock items
Leave your group or sign out from the settings screen
Delete your account from the settings screen (if you cannot use the App, you can ask us from the Delete Your Account page)
Control the microphone, speech recognition, camera and notification permissions from your device (iOS or Android) settings
Stop sending usage data and session recordings (Section 1.10) with "Share usage statistics" and "Send how you navigate the app" in Settings (iPhone version)

To exercise any other right (such as requesting deletion of the content you registered that remains with the group, access, rectification, portability, or limiting the use of sensitive personal information), please contact us at kayakou123@gmail.com. We will verify your identity and then help you exercise your rights. For requests concerning data processed by Google (AdMob and Firebase), RevenueCat or PostHog, please also contact us at the same address and we will help you follow up with those companies.

13. Changes to This Privacy Policy

This Privacy Policy may be updated as necessary. If there are significant changes, we will notify you in the App or on our website.

14. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at the address below.

Email: kayakou123@gmail.com

This English text is a translation provided for convenience. If there is any discrepancy between this translation and the Japanese version, the Japanese version prevails.