This policy explains what information the iOS app Jantaku AR (the “App”) handles, why, and what choices you have. The App is developed and operated by JBeans Corp. (有限会社ジェイ・ビーンズ) (“we”, “us”), who is the data controller for the purposes of the EU and UK General Data Protection Regulation. Our full contact details are in section 14.
The following stays on your iPhone or iPad. We cannot see it.
Deleting the App removes all of the above, with one exception described in the next section.
The App stores two small values in the iOS keychain:
Neither value contains your name, your Apple Account, or anything supplied by Apple, and neither is sent to us. Both are random or trivial values that exist only to make the App work as described.
Please note: because of how the iOS keychain works, these two values survive deleting and reinstalling the App. This is deliberate for the free-game limit, which would otherwise reset on every reinstall. You can remove them by erasing the device, or you may ask us and we will tell you how to clear them for your device.
When several devices play together, they connect directly to one another over the local Wi‑Fi network, using the iOS “Local Network” permission. The data exchanged is what the game needs to stay in sync: tiles, discards, calls and scores, plus the player names shown on screen. This traffic does not reach our servers, and we have no record of it.
Payment is handled entirely by Apple through In‑App Purchase. We never receive your card details, your Apple Account, or your name.
When a subscription starts, renews, is cancelled or is refunded, Apple sends our server an automatic notification so that we can honour the licence. We store:
These identifiers are generated by Apple and contain no name, email address or Apple Account. On their own they do not identify you. Because they are nevertheless tied to an individual subscription, we treat them as personal data.
Immediately after a successful purchase, the App makes a single web request to our server carrying only the plan name, the app name and the app version. It carries no identifier for you or your device. As with any web request, our server's logs record the originating IP address and the time. We use these logs to operate and secure the service, and to count purchases.
The terms of use are opened in a browser view, which contacts our web server in the ordinary way. The privacy policy is included inside the App and can be read offline.
We intend to add an optional feature that stores game records on a server so that you can review past games and see your results across devices. That feature is not part of the App today. We will update this policy, and describe the feature here, before it is released.
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under Article 6(1) GDPR.
| What | Why | Legal basis |
|---|---|---|
| Subscription records received from Apple | To provide the licence you paid for, to handle refunds, and to keep accounting records | Performance of a contract (Art. 6(1)(b)); compliance with a legal obligation for the accounting records (Art. 6(1)(c)) |
| Server logs, including IP address | To operate and secure the service and to count purchases | Our legitimate interests in running a functioning, secure service (Art. 6(1)(f)) |
| Everything held on your device | To run the game you asked for | Performance of a contract (Art. 6(1)(b)). We are not a controller of this data in practice, because it never leaves your device |
We do not sell or rent personal information, and we disclose it only in these cases:
We are based in Japan, and our servers are located in Japan. If you are in the EEA or the UK, personal data relating to your subscription is therefore transferred to Japan. Japan has been recognised by the European Commission as providing an adequate level of data protection (adequacy decision of 23 January 2019, as extended), and by the UK government under its own adequacy regulations. No further transfer mechanism is required for these transfers.
You have the right to ask us for access to your personal data, and to ask us to correct it, erase it, restrict how we use it, or provide it in a portable form. You may object to processing we carry out on the basis of our legitimate interests. Where we rely on consent, you may withdraw it at any time without affecting what we did beforehand.
To exercise any of these rights, write to us at the address in section 14. Because we hold no name or contact details, please tell us enough to locate the record — for a subscription, the receipt or transaction identifier from Apple is usually sufficient. We will not charge you, and we will reply within one month.
You also have the right to lodge a complaint with a supervisory authority, in the EU member state of your residence, place of work or the place of the alleged infringement, or with the Information Commissioner's Office in the UK.
If you live in California, Colorado, Connecticut, Virginia or another state with a comprehensive privacy law, you have the right to know what personal information we collect, to obtain a copy of it, to have it corrected or deleted, and not to be discriminated against for exercising those rights.
In the twelve months before the date of this policy, the only category of personal information we collected was identifiers — the Apple transaction identifiers described in section 4.1, and IP addresses in server logs. We collected them from Apple and from your device's own web requests, for the purposes stated in this policy.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not use or disclose sensitive personal information for any purpose beyond those permitted without a right to limit. Requests may be made using the contact details in section 14.
The App is a mahjong game intended for a general audience, including secondary-school students. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13, nor from children below the age of digital consent in their country (13 to 16, depending on the EU member state).
Nothing in the App asks a player for personal details. We recommend using a nickname rather than a real name as your player name, since other players in the same game will see it. Subscriptions should only be purchased with the agreement of a parent or guardian. If you believe a child has provided us with personal information, contact us and we will delete it.
We keep the amount of data we hold as small as we can, which is the most effective protection available to us. Data in transit to our server is encrypted with TLS, and access to the subscription records is restricted to the people who operate the service.
We may update this policy when the law changes or when we add features — in particular before the server-side game record feature described in section 4.4 is released. We will post the new version here and in the App, and will note the date below. Where a change is significant, we will say so in the App.
The data controller is:
JBeans Corp. (有限会社ジェイ・ビーンズ)
1-9-9-1208 Honcyo
Funabashi-shi, Chiba 273-0005
Japan
Email: support@jbeans.jp
We have not appointed a data protection officer, as we are not required to under Article 37 GDPR. Please send any privacy request to the email address above and it will reach the person responsible.