AtoPochi

概述

This policy applies to AtoPochi (あとポチ), an Android impulse-purchase cooling tool. A shared or manually entered shopping item becomes a virtual parcel that moves through intake, delivery, unboxing, a cooling period, and a later decision.

AtoPochi has no account system, no developer-hosted storage of user records, no advertising, and no connection to bank or payment accounts. User records stay on the device, with three limited network exceptions described below: a device-direct thumbnail request, optional anonymous usage statistics, and a once-a-day announcements check against goldbug.page. An optional Pro subscription or one-time Pro purchase, where offered, is processed entirely by Google Play.

Data handled by AtoPochi

Depending on what the user enters and which features are used, AtoPochi may handle:

• product names, prices, links, source websites, and optional product images;
• parcel timing, state, unboxing method, decisions, reasons, watchlist dates, and optional satisfaction records;
• wish-jar names, goals, and transfers;
• manually entered purchase, budget, monthly balance, and report values;
• notification preferences, the anonymous-statistics setting, other App settings, and a locally configured screen-lock PIN record.

Local device storage

Structured records are stored in a local SQLite database and local key-value storage. Product images are stored as files in the App's private directory. The PIN record is stored as a salted hash in Android secure storage; the PIN feature hides the App screen but does not encrypt the SQLite database or image files.

Share Sheet and images

AtoPochi receives text, links, or images only when the user shares them through Android's Share Sheet or enters information in the App. Shared images are processed on the device into a small WebP thumbnail and stored locally.

AtoPochi does not scrape prices or other structured product details from shopping pages.

Direct thumbnail request

When the user saves a parcel that has a website link but no image, AtoPochi may make a one-time request from the device to that webpage and, if one is available, download its og:image or twitter:image thumbnail. The user can also explicitly request a thumbnail before saving by tapping the link-image lookup control; merely opening the form, entering a link, or pasting one does not trigger a request. The request is made directly from the device; no goldBug Studio server is involved.

The website and image host contacted by this request may receive ordinary network information such as the device's public IP address, the request time, and request headers, under that site's own privacy practices. There are no automatic retries, and the request does not send any other AtoPochi records to the site. A successfully fetched preview is reused when the parcel is saved, without a second request or overwriting an image supplied by the user.

Anonymous usage statistics

When the anonymous-statistics setting is enabled — it is on by default and can be turned off at any time in the App's settings — AtoPochi sends a small number of anonymous usage events to Aptabase, a privacy-focused analytics service, over an encrypted connection. Each event describes only the type of action and coarse ranges: for example, that a parcel was created from a share, its price band, and its cooling-period tier.

These events never include product names, exact amounts, links, images, wish-jar contents, or free-text input. AtoPochi does not send advertising identifiers or other persistent user identifiers with them. Events are queued on the device and sent in the background; turning the setting off stops new events from being recorded.

Aptabase Privacy Policy ↗

Announcements and version check

At most once a day, when the App is opened, AtoPochi requests the current list of announcements and the latest released version number from goldBug Studio's own server at api.goldbug.page. The request carries no user records, no identifiers, and no settings; it is an ordinary read of public information, and the server receives only the network information any web request involves, such as the device's public IP address and request time.

The response is shown under Settings › About: a list of announcements, and an update hint when a newer version is available on Google Play. Nothing is sent back. If the request fails, the App shows the last successfully fetched list and does not retry until the next day. Announcement notifications, when enabled, are generated locally on the device from that list.

Notifications and device authentication

• Local scheduled notifications remind the user about existing parcels, later decisions, watchlist follow-ups, satisfaction follow-ups, and the month-end review. Notification text is generic and does not include product names or prices.
• If the optional PIN lock is enabled, AtoPochi stores a salted PIN hash locally. For PIN recovery, and for the optional biometric unlock available with Pro, the App may ask Android to verify an enrolled device credential or biometric method. AtoPochi receives only the success or failure result, never the underlying biometric data.

Pro subscription and one-time purchase

AtoPochi may offer Pro as an optional subscription or as a one-time purchase, including time-limited introductory prices. Purchases, renewals, and cancellations are handled entirely by Google Play under Google's own terms and privacy policy. AtoPochi receives only the purchase or subscription status needed to unlock Pro features; it never receives payment-card, bank-account, or billing-address details.

Third-party services and SDKs

AtoPochi uses Expo and Android libraries for local storage, files, image processing, Share Sheet intake, notifications, secure storage, local authentication, and Google Play Billing. Other than the Aptabase statistics described above, it does not include advertising, crash-reporting, cloud-backup, or third-party sign-in services.

Data transfer

AtoPochi does not upload product names, exact amounts, parcel records, images, links, decisions, wish-jar data, or PIN records to goldBug Studio or to anyone else. The only network traffic AtoPochi itself creates is the device-direct thumbnail request described above, the anonymous usage statistics described above (when enabled), the once-a-day announcements check described above, and Google Play's own purchase processing.

The App can export a backup file to a location the user chooses and import it again; the file stays under the user's control and is never uploaded by the App. There is no Google Drive/iCloud or other cloud backup.

Retention and deletion

Local records remain until the user edits, releases, or deletes them through the available App features, clears AtoPochi's storage in Android settings, or uninstalls the App. Releasing a parcel removes its local parcel record and stored image through the release flow. Android system backups or diagnostics, if enabled on the device, are governed separately by Android and the user's settings.

Anonymous usage events that have already been sent contain no identifiers that could tie them to a person or device, so they cannot be individually retrieved or deleted afterward.

Children's privacy

AtoPochi is a personal spending-decision tool and is not directed specifically to children. It does not knowingly collect children's personal information through an account or developer-hosted backend.

Changes to this policy

This policy will be reviewed and updated before a published version of AtoPochi introduces materially different data handling, such as user-controlled cloud backup.