Privacy Policy
Effective October 14, 2026
The operator of REEF FOLK ("we") handles your personal data as follows, in line with Japan's Act on the Protection of Personal Information and the EU General Data Protection Regulation (GDPR). The Japanese version is authoritative.
1. Data we collect
- Account data: email address; if you sign in with Google, the name and email address Google shares
- Profile: username
- Content you add: tank details and equipment, water records, photos, corals, plans and events, posts, comments, likes and reports
- Location data in photos is removed on your device before upload and never stored
- Usage records: AI import counts and notifications
- Cookies: your login session and language/time-zone settings only (no analytics or ad-tracking cookies)
- Access logs: our hosting provider temporarily records IP addresses for security and troubleshooting
2. Purposes and legal bases
- Providing the Service (storing and showing your records, honoring visibility settings, aggregating data for comparison and search) — performance of contract
- Preventing abuse, handling reports and keeping the Service secure — legitimate interests
- Showing notifications (comments, likes, follow-ups) — performance of contract
- Improving the Service — legitimate interests (aggregated, not identifying you)
- Processing Premium payments (once launched) — performance of contract
3. What other users can see
Public tanks (water, photos, corals and events — not plans) can be seen by anyone, including people who are not logged in. Posts, questions, comments and usernames can be seen by other logged-in users. Your email address is never shown to other users.
4. Service providers
- Supabase (database, authentication and photo storage; data stored in the Tokyo region)
- Vercel (hosting)
- Anthropic (AI text import; the text you submit is sent only to read it)
- Google (Google sign-in)
- Stripe (Premium payments; card details are handled by Stripe and never stored on our servers)
- YouTube and Vimeo (when you play a video embedded in a post; their own privacy policies apply)
5. International transfers
Some providers are based in the United States, so your data may be processed outside Japan. We use providers that have contractual and technical safeguards in place. Japan is recognized by the EU as providing an adequate level of data protection.
6. Retention
We keep your content until you delete your account. When you do, it is deleted from our database and photo storage immediately (backups are cleared within a limited period). Posts, questions and answers you chose to keep without your name, with their photos and videos, remain on the Service, separated from your email address and username.
7. Your rights
- Access and correct your data in the Service
- Erase all your data at any time with Delete account in Settings
- Portability: download your photos anytime from Export your data in Settings. Water-record CSV export is a Premium feature, but on request we will provide all your data in a machine-readable format free of charge
- For restriction or objection, contact us and we will respond as required by law
- If you live in the EU, you may also complain to your local data protection authority
8. Children
If you are under 16, please get a parent's or guardian's consent before using the Service.
9. Changes
We will announce changes to this policy in the Service.
10. Contact
For privacy questions or data portability requests, please email info@littlebarrierreef.jp.