Privacy Policy

1. Introduction

Latent ("the Service") is run by Motoki Endo ("the Developer"), who develops software independently under the name Bedroom Development. The Developer's postal address is Park Front Shinjuku 202, 2-8-15 Shinjuku, Shinjuku-ku, Tokyo 160-0022, Japan. The Developer's telephone number will be provided without delay on request (write to contact@bedroomdev.app, section 10). This Policy describes the information that the Service's website and iOS app collect, and how it is handled.

2. Information We Collect

• Account information: Email address and name (when you sign in with Google or Apple, what that service provides)
• User content: Film stock, shooting logs, gear and uploaded images
• Billing information: Your plan and purchase history. Card numbers never reach the Service; Stripe and Apple handle them directly
• Advertising (app): Google AdMob receives device information and your IP address in order to show ads. The advertising identifier (IDFA) is used only if you allow tracking on iOS
• Ad measurement: The number of impressions and clicks on the Service's own ads, linked to your account
• Error and performance information: Device, OS and screen information when an error occurs in the app or on the web. The app also sends how long some screens and network requests take. URL parameters are removed, and identifiers such as your account ID are converted into a form that cannot be reversed, before sending
• Usage statistics (web): The URL of pages you view, the referrer, your approximate country or region, and your browser, OS and device type. No cookies are used, and the data is aggregated without identifying you
• Support messages: The content of your email and your email address

3. How We Use Information

• Providing and improving the Service
• Managing accounts and authentication
• Processing payments and applying your plan
• Showing ads and measuring their effect (Free plan)
• Preventing abuse (limiting large numbers of requests in a short time)
• Detecting and investigating outages
• Responding to inquiries

4. Processors and International Transfer

The Service does not provide personal information to third parties, except with your consent or as required by law. It does, however, entrust processing to the services below. Where a service is located outside Japan, the information is stored and processed on servers in that country.

• Supabase, Inc. (United States; data stored in the Tokyo region): Database and authentication
• Cloudflare, Inc. (United States): Image storage (R2), uptime monitoring, receiving email
• Vercel Inc. (United States): Web hosting, usage statistics
• Stripe, Inc. (United States): Web payments
• Apple Inc. (United States): Sign-in, in-app purchases
• Google LLC (United States): Sign-in, ad delivery (AdMob), receiving email (Gmail)
• RevenueCat, Inc. (United States): Managing in-app purchase status
• Functional Software, Inc. (Sentry, United States): Error collection
• Upstash, Inc. (United States): Request rate limiting
• Discord Inc. (United States): Operational alerts to the Developer (alerts about billing problems include the account ID)
• Anysphere, Inc. (United States): Sorting support messages and first-pass investigation of outages with Grok Bot, provided through Cursor. Processing may pass through an AI model provider on its list of subprocessors
• GitHub, Inc. (United States): Storing the sorting results and outage records (private)

5. Data Storage and Security

• Storage locations: Supabase (Tokyo, ap-northeast-1) and Cloudflare R2
• Communications: Encrypted via HTTPS
• Encryption at rest: Provided by the Supabase and R2 infrastructure
• Access control: Row Level Security (RLS) prevents users from reading other users' data

6. Your Rights

• Access and correction: Available at any time in the app and on the web
• Deletion: Deleting your account deletes your user content, images and account information, and cancels your Stripe subscription. To prevent abuse and keep a record, a deletion record (your account ID, the time of deletion, a converted value of your IP address, your browser information (User-Agent), your plan and billing method at the time, and the number of images deleted) is kept for one year and then deleted. Records of automatic compensation for billing problems (your account ID and Stripe subscription ID) are kept separately for accounting and for handling inquiries. Payment records are kept by Stripe and Apple under their own terms and applicable law
• Portability: You can download your cameras, lenses, films, labs, stock and shooting logs as CSV (image files are not included)
• Other requests, including disclosure: Write to contact@bedroomdev.app

7. Cookies and Advertising Identifier

• Authentication session cookie: Supabase Auth (required to provide the Service)
• Language cookie: Remembers your display language
• Usage statistics: Vercel Web Analytics does not use cookies
• Advertising identifier (app): On iOS, the app asks for permission to track before showing ads for the first time. You can change this at any time in Settings → Privacy & Security → Tracking. If you do not allow tracking, ads are still shown, but the advertising identifier is not used

8. Minors

Users under the age of 16 must obtain the consent of a parent or guardian to use the Service.

9. Changes to This Policy

If this Policy is changed, important changes will be announced by email or in-app notification.

10. Contact

There are two addresses, and which one you use decides who reads your message.

• contact@bedroomdev.app: Account, billing, requests about your personal data (section 6) and anything else. Read by the Developer alone
• support@bedroomdev.app: Bug and trouble reports. To find the cause and a fix sooner, an AI agent reads and sorts each report, and the Developer also reads the same message and takes it up

When writing to support@bedroomdev.app, please leave out personal information other than your email address, such as your name, postal address, phone number or purchase details. The AI agent is used with a setting that keeps your messages out of model training. The sorting result and a short summary are recorded in a private work log that only the Developer can see. Replies are written and sent by the Developer personally. The AI agent never replies on its own, and it cannot change billing or accounts. For anything that involves personal information, or that you would rather no AI read, write to contact@bedroomdev.app.

Refunds for in-app purchases are handled by Apple (App Store).

11. If You Live in the EEA, the UK or Switzerland

• Legal basis: Providing the Service and billing are based on the performance of a contract; error collection, abuse prevention and outage investigation on the Developer's legitimate interests; personalised ads and use of the advertising identifier on your consent
• Consent: The iOS app asks for your consent on Google's consent screen before showing ads. You can withdraw it at any time in the app's settings. Withdrawal does not affect the lawfulness of processing before it
• Rights: You can request access, correction, deletion, restriction of processing, objection and data portability. Write to contact@bedroomdev.app
• Complaints: You can lodge a complaint with the data protection authority in your country
• International transfer: Transfers to the processors in section 4 rely on safeguards provided by each company, such as the European Commission's Standard Contractual Clauses