AtoPochi

概述

This policy applies to AtoPochi (あとポチ), an Android impulse-purchase cooling tool. A shared or manually entered shopping item becomes a virtual parcel that moves through intake, delivery, unboxing, a cooling period, and a later decision.

AtoPochi has no account system, no developer-hosted backend, no advertising, and no connection to bank or payment accounts. User records stay on the device, with two limited network exceptions described below: a device-direct thumbnail request, and optional anonymous usage statistics. An optional Pro subscription, where offered, is processed entirely by Google Play.

Data handled by AtoPochi

Depending on what the user enters and which features are used, AtoPochi may handle:

• product names, prices, links, source websites, and optional product images;
• parcel timing, state, unboxing method, decisions, reasons, watchlist dates, and optional satisfaction records;
• wish-jar names, goals, and transfers;
• manually entered purchase, budget, monthly balance, and report values;
• notification preferences, the anonymous-statistics setting, other App settings, and a locally configured screen-lock PIN record.

Local device storage

Structured records are stored in a local SQLite database and local key-value storage. Product images are stored as files in the App's private directory. The PIN record is stored as a salted hash in Android secure storage; the PIN feature hides the App screen but does not encrypt the SQLite database or image files.

Share Sheet and images

AtoPochi receives text, links, or images only when the user shares them through Android's Share Sheet or enters information in the App. Shared images are processed on the device into a small WebP thumbnail and stored locally.

AtoPochi does not scrape prices or other structured product details from shopping pages.

Direct thumbnail request

When the user saves a parcel that has a website link but no image, AtoPochi may make a one-time request from the device to that webpage and, if one is available, download its og:image or twitter:image thumbnail. The request is made directly from the device; no goldBug Studio server is involved.

The website and image host contacted by this request may receive ordinary network information such as the device's public IP address, the request time, and request headers, under that site's own privacy practices. The request is attempted only after the parcel is saved, is not retried, and does not send any other AtoPochi records to the site.

Anonymous usage statistics

When the anonymous-statistics setting is enabled — it is on by default and can be turned off at any time in the App's settings — AtoPochi sends a small number of anonymous usage events to Aptabase, a privacy-focused analytics service, over an encrypted connection. Each event describes only the type of action and coarse ranges: for example, that a parcel was created from a share, its price band, and its cooling-period tier.

These events never include product names, exact amounts, links, images, wish-jar contents, or free-text input. AtoPochi does not send advertising identifiers or other persistent user identifiers with them. Events are queued on the device and sent in the background; turning the setting off stops new events from being recorded.

Aptabase Privacy Policy ↗

Notifications and device authentication

• Local scheduled notifications remind the user about existing parcels, later decisions, watchlist follow-ups, satisfaction follow-ups, and the month-end review. Notification text is generic and does not include product names or prices.
• If the optional PIN lock is enabled, AtoPochi stores a salted PIN hash locally. For PIN recovery, and for the optional biometric unlock available with Pro, the App may ask Android to verify an enrolled device credential or biometric method. AtoPochi receives only the success or failure result, never the underlying biometric data.

Pro subscription

AtoPochi may offer an optional Pro subscription. Purchases, renewals, and cancellations are handled entirely by Google Play under Google's own terms and privacy policy. AtoPochi receives only the subscription status needed to unlock Pro features; it never receives payment-card, bank-account, or billing-address details.

Third-party services and SDKs

AtoPochi uses Expo and Android libraries for local storage, files, image processing, Share Sheet intake, notifications, secure storage, local authentication, and Google Play Billing. Other than the Aptabase statistics described above, it does not include advertising, crash-reporting, cloud-backup, or third-party sign-in services.

Data transfer

AtoPochi does not upload product names, exact amounts, parcel records, images, links, decisions, wish-jar data, or PIN records to goldBug Studio or to anyone else. The only network traffic AtoPochi itself creates is the device-direct thumbnail request described above, the anonymous usage statistics described above (when enabled), and Google Play's own subscription processing.

The current version does not provide document import/export or Google Drive/iCloud backup. Those are not active data flows.

Retention and deletion

Local records remain until the user edits, releases, or deletes them through the available App features, clears AtoPochi's storage in Android settings, or uninstalls the App. Releasing a parcel removes its local parcel record and stored image through the release flow. Android system backups or diagnostics, if enabled on the device, are governed separately by Android and the user's settings.

Anonymous usage events that have already been sent contain no identifiers that could tie them to a person or device, so they cannot be individually retrieved or deleted afterward.

Children's privacy

AtoPochi is a personal spending-decision tool and is not directed specifically to children. It does not knowingly collect children's personal information through an account or developer-hosted backend.

Changes to this policy

This policy will be reviewed and updated before a published version of AtoPochi introduces materially different data handling, such as document import/export or user-controlled cloud backup.