あとポチ

概要

This policy applies to the current development/public build of AtoPochi, an Android impulse-purchase cooling tool. A shared or manually entered shopping item becomes a virtual parcel that moves through intake, delivery, unboxing, a cooling period, and a later decision.

The current build has no account system, developer-hosted backend, advertising, bank or payment-account connection, cloud backup, or subscription service. Except for the limited direct website request described below, user records remain on the device.

Data handled by AtoPochi

Depending on what the user enters and which features are used, AtoPochi may handle:

• product names, prices, links, source websites, and optional product images;
• parcel timing, state, unboxing method, decisions, reasons, watchlist dates, and optional satisfaction records;
• wish-jar names, goals, images, and transfers;
• manually entered purchase, budget, monthly balance, and report values;
• notification preferences, App settings, and a locally configured screen-lock PIN record.

Local device storage

Structured records are stored in a local SQLite database and local key-value storage. Product images are stored as files in the App's private directory. The PIN record is stored as a salted hash in Android secure storage; the PIN feature hides the App screen but does not encrypt the SQLite database or image files.

Share Sheet and images

AtoPochi receives text, links, or images only when the user chooses it from Android's Share Sheet or enters information in the App. Shared images are processed on the device into a small WebP thumbnail and stored locally.

The current implementation does not scrape prices or other structured product details from shopping pages.

Direct thumbnail request

When the user saves a parcel that has a website link but no image, the current build may make a one-time request from the device to that webpage and, if available, download its og:image or twitter:image thumbnail. The request is made directly from the device; no goldBug Studio backend is involved.

The website and image host contacted by this request may receive ordinary network information such as the device's public IP address, request time, and request headers under that site's own privacy practices. The request is attempted only after save, is not retried, and does not send other AtoPochi records to the site.

Notifications and device authentication

• Local scheduled notifications remind the user about existing parcels, later decisions, watchlist follow-ups, satisfaction follow-ups, and month-end review. Notification text is generic and does not include product names or prices.
• If the optional PIN lock is enabled, AtoPochi stores a salted PIN hash locally. For PIN recovery, the App may ask Android to verify an enrolled device credential or biometric method. AtoPochi receives the success or failure result, not the underlying biometric data.

Third-party services and SDKs

The current source uses Expo and Android libraries for local storage, files, image processing, Share Sheet intake, notifications, secure storage, and local authentication. It does not include an enabled advertising, analytics, crash-reporting, subscription, or cloud-backup SDK.

A setting related to anonymous statistics is under development, but the current source has no telemetry emitter and does not transmit those statistics.

Data transfer

AtoPochi does not upload product names, exact amounts, parcel records, images, links, decisions, wish-jar data, or PIN records to goldBug Studio. The limited device-direct thumbnail request described above sends the linked page URL to that page's host as part of an ordinary web request.

The current build does not provide document import/export or Google Drive/iCloud backup. Those are not active data flows.

Retention and deletion

Local records remain until the user edits, releases, or deletes them through available App features, clears AtoPochi storage in Android settings, or uninstalls the App. Releasing a parcel removes its local parcel record and stored image through the current release flow. Android system backups or diagnostics, if enabled by the device, are governed separately by Android and the user's settings.

Children's privacy

AtoPochi is a personal spending-decision tool and is not directed specifically to children. It does not knowingly collect children's personal information through an account or developer-hosted backend.

Changes to this policy

Because AtoPochi is in active development, this policy will be reviewed before a public build enables materially different behavior such as telemetry, subscriptions, import/export, or user-controlled cloud backup.