This English edition is provided for reference and accessibility. The Japanese edition is the authoritative text; in case of any discrepancy, the Japanese edition prevails.
1. Operator Information
| Operator | Kentaro Hisamoto (sole proprietor, Japan) |
|---|---|
| Service name | Lastmods |
| Contact | support@lastmods.com |
2. Scope
This Policy applies to the handling of personal information in the Lastmods app and the web catalog (under lastmods.com). The service is intended for residents of British Columbia, Canada, and the British Columbia Personal Information Protection Act (PIPA) and the Personal Information Protection and Electronic Documents Act (PIPEDA) serve as the primary governing frameworks. Because the operator is located in Japan, the Act on the Protection of Personal Information of Japan also applies.
3. Information We Collect
3.1 Account information
The service issues an anonymous account by default. No email address or password is required to start using the service.
Only if you choose to link a Google account or an Apple account (for purposes such as transferring your account to a new device) do we receive your email address, display name, and similar information from the linked provider. (With an Apple account, your email address may be withheld or replaced with a relay address depending on your settings.)
3.2 Profile and usage statistics
- Nickname (your public ID on the service) and avatar image (optional)
- Aggregate usage counts (posts, coupons obtained and used, stamps, edit suggestions, experience points, check-ins, quests completed)
3.3 Content you post or enter
- Photos, their captions, and any tags you assign
- Store ratings (star ratings and comments), suggested edits to store information, questions and answers, and board postings
- Audio recordings from conversation quests (deleted after review is complete)
- Text you enter into AI features (store search and suggestions, resume review)
3.4 Check-ins
When you check in, we record the store identifier, store name, and time. Location coordinates are not stored (see Section 5).
3.5 Notifications
If you allow push notifications, we store your device notification token.
3.6 Merchant information
When a merchant registers, we collect the business's contact information (email address and phone number). This is business information, not information collected from you as a consumer user.
4. Purposes of Use
- Providing the service, verifying identity, and managing accounts
- Reviewing posted content and store information (detecting inappropriate content)
- Issuing and managing coupons
- Generating responses for AI features (store search and suggestions, resume review)
- Verifying the validity of check-ins
- Delivering notifications
- Preventing misuse and responding to inquiries
- Improving the service
Coupons are redeemed by showing the screen at the store for the store to confirm. No personal information about you is provided to merchants when you use a coupon.
We do not use your personal information for advertising or sell it to third parties.
5. Location Information
Location information is obtained only when you perform a check-in. We do not collect or track your location continuously in the background.
The obtained coordinates are sent to our server and used solely to determine whether you are within the required distance of the store. The coordinates are not stored after this determination. Only the store identifier, store name, and time are recorded.
6. Disclosure to Third Parties and Service Providers
We entrust the handling of personal information to the following providers, in each case limited to what is necessary to achieve the purposes of use.
| Provider | Information handled | Purpose | Country |
|---|---|---|---|
| Google LLC (Firebase) | Authentication data, stored data in general, notification tokens | Providing the underlying infrastructure | Canada / U.S. (Section 7) |
| Google LLC (Gemini API) | Posted photos and captions, rating comments, suggested edits, conversation-quest audio recordings, text entered into AI features | Automated content review; generating AI responses and reviews | U.S. |
| Google LLC (Secret Manager) | Credentials and other secrets | Secure storage of secrets | U.S. |
| Stripe, Inc. | Merchant billing information and usage counts | Merchant billing | U.S. |
| Resend, Inc. | Recipient email address, subject, body | Sending emails such as verification codes | U.S. |
In addition, some in-app content (such as weekly topics) is generated by AI; no personal information about you is used in generating it.
Except where disclosure is required by law, we do not provide personal information to any third parties other than those listed above.
7. Data Storage Location and Cross-Border Transfers
Your data (the database and file storage) and our server processing infrastructure are located in Canada (Google Cloud northamerica-northeast1, Montreal).
The following processing, however, is performed by providers located in the United States:
- Automated content review and generation of AI responses (Gemini API)
- Merchant billing (Stripe)
- Sending emails such as verification codes (Resend)
In addition, the operator accesses data from Japan to the extent necessary to operate the service.
Accordingly, your personal information is stored in Canada, and portions of it are processed in the United States and Japan. The United States is not designated by Japan's Personal Information Protection Commission as a country with a system meeting its adequacy standards. The operator entrusts processing only after confirming that each provider maintains safeguards consistent with internationally recognized standards. By agreeing to this Policy, you consent to the handling of your information outside your country as described above. For information about the personal-information protection regimes of the destination countries, please contact us at the address in Section 1.
8. Retention and Deletion
8.1 When you delete your account
Deleting your account removes the following:
- The account itself and your profile
- Linked-account information (email address, etc.)
- Notification tokens
- Your posts and the image files you posted
- Coupons, quest completion records, and notification history
8.2 Information retained after deletion
Coupon redemption records and merchant billing records are retained to satisfy tax and accounting record-keeping obligations. They are not referenced for the purpose of identifying you as an individual.
8.3 Other retention periods
- Conversation-quest audio recordings: deleted immediately after review is complete
- Posted images not approved in review: automatically deleted after 30 days
- Obtained coupons: expire 30 days after issuance
9. Analytics, Advertising, and Tracking
The app itself uses no third-party tools for behavioral analytics, advertising, or crash reporting.
On the web catalog (lastmods.com), we use Google Analytics (GA4), an analytics service provided by Google LLC, to understand how the catalog is viewed and to improve the service. GA4 collects information such as page views, referrers, approximate country/region, and browser/OS. GA4 does not store individual IP addresses. Collected information is retained for up to 14 months and then automatically deleted. We do not use GA4 data for advertising, and we do not enable integration with Google Ads (Google Signals).
In no case do we share your activity with third parties for targeted advertising. If you wish to opt out of GA4 collection, you can use the Google Analytics Opt-out Browser Add-on provided by Google. This analytics applies only when viewing the web catalog and does not apply to the app itself.
10. Cookies on the Web Catalog
On the web catalog (lastmods.com), Google Analytics (GA4), described in Section 9, stores a first-party cookie in your browser to distinguish users. This cookie is used solely for analytics and not for advertising.
Web pages also use Google Fonts (a font-delivery service provided by Google LLC); when you view a page, your browser sends access information such as your IP address to Google.
11. Text-to-Speech
Learning content is read aloud using the speech-synthesis capability provided by your device's operating system. How that processing is performed depends on your device and OS settings, and the operator does not control it.
12. Requests for Access, Correction, and Deletion
You may request access to, correction of, deletion of, or suspension of use of your personal information. Please contact us at the address in Section 1.
- Initial response to a correction request: within 5 business days
- Completion of deletion: within 30 days
Businesses listed as stores who wish to request corrections or removal should use the contact channel set out in the Terms of Service.
13. Use by Minors
We recommend that the service be used by persons 19 years of age or older.
14. Security Measures
We implement measures including encryption of communications, access-permission controls, and secure storage of credentials (Secret Manager).
15. Amendments to This Policy
If we amend this Policy, the amended version will be posted on this page. For material changes, we will provide advance notice, such as through in-app notification.