Effective date: August 29, 2026 · Version: 2026-08-29-v6
Controller: クラウドナイン合同会社 (English rendering: Cloud Nine LLC (Godo Kaisha)), 6-665-1-517 Gakuen Yamato-cho, Nara-shi, Nara 631-0041, Japan, info@cloud9llc.jp
Payment providers and affiliate attribution: Stripe processes monthly and annual payments on the standard sales route, while PromoteKit handles direct-affiliate attribution within that route. Digistore24 processes monthly checkout, billing, tax, fraud prevention, and affiliate attribution only on its dedicated sales route. Purchase email, order/payment data, IP address, and related records may be processed in these providers’ systems outside Japan. We do not store full card numbers.
What we collect
Account information (email address and authentication-provider ID) is obtained through Firebase Authentication. Payment information is processed by Stripe; we do not store full card numbers. SYSTEM AUDIO OVERRIDE audio is processed locally on your device in real time and discarded immediately. Audio files added to Player are stored in this device’s browser storage for reuse on the next launch. Neither type of audio is transmitted to or stored on our servers. To keep the App stable, when an error occurs we may log the error type, message, app version, plan, language, display mode, browser-identifying information, and source IP address to our operational logs (email addresses and similar identifiers are masked before logging). We also keep a consent ledger containing the Firebase UID; each Terms and Privacy document version and revision; SHA-256; an immutable snapshot reference; display locale; adult/guardian attestation; authenticated-clickwrap method; server acceptance time; deployment commit and environment; and retention controls (status, account-closure time, retentionUntil, and legal-hold flag). Only if you separately consent, we may run optional analytics through Google Analytics for Firebase (an internal identifier, feature usage, device information, and approximate location).
Purpose and legal basis
We use account and billing information to perform your subscription contract with us. We use the consent ledger for contract administration and to establish, exercise, or defend legal claims. We use error logs based on our legitimate interest in keeping the service stable and preventing abuse. We run analytics only where you have given your separate consent.
Feedback and support inquiries
In-app feedback may include your Firebase UID, account email, category, message, and the app, device/browser, screen, language, plan/trial, playback, preset, and visualization diagnostic information disclosed before sending. The public support form collects name, email, subject, message, locale, and optionally plan, issue type, and priority. We store these submissions in Firestore and use Resend to notify the support team. The public form temporarily uses the source IP address for rate limiting and abuse prevention, and it may be processed in Vercel operational logs. We use this information to receive, prioritize, diagnose and troubleshoot inquiries, respond, maintain security, and prevent abuse. We retain it only for as long as reasonably needed for the response, follow-up, security, or legal obligations, then delete or anonymize it. The forms do not request or store audio files, track names, or full card numbers. Send rights requests to info@cloud9llc.jp.
Sharing and service providers
We do not sell personal data. We use Vercel (hosting, runtime, and operational logs), Firebase/Google Cloud (authentication, access control, and consent-ledger storage), Stripe (payments), PromoteKit (direct-affiliate attribution), Digistore24 (monthly checkout, billing, tax, fraud prevention, and affiliate attribution on its route), Resend (emails for user-submitted requests), and the configured incident-alert service (operational alerts with sensitive data removed). Each provider processes data under its contract and applicable-law role.
International transfers
Firebase (Google) and Stripe operate globally, including in the United States, so your data may be processed outside Japan. These providers maintain appropriate safeguards, such as standard contractual clauses, as required by applicable law.
Retention
We retain account and billing information while your account is active and as required for legal, tax, or dispute-resolution purposes. We retain the consent ledger for the life of the account and for five years after account closure. We extend that period under a legal hold only where required by law or for an ongoing legal claim. The ledger is limited to necessary data, is not used for marketing, and is deleted when the retention period ends. Operational logs are kept only for a limited operational period. Analytics data follows Google Analytics for Firebase's default retention settings.
Your rights
You may request access to, correction of, or deletion of your personal data, object to or restrict its processing, request data portability, and withdraw analytics consent at any time (core app features remain available if you do). You can delete your account anytime from Plan Management in OPTIONS. After a deletion request or account deletion, the consent ledger is retained for the five-year period described above and extended only under a legal hold required by law or an ongoing legal claim. For any other request, contact info@cloud9llc.jp.
Supervisory authority complaints
If you are in the EU, UK, or another jurisdiction with a data protection authority, you may lodge a complaint with that authority in addition to contacting us.
California residents
We do not sell personal information, and we do not "share" it for cross-context behavioral advertising as defined by the CCPA/CPRA. California residents have the disclosure, deletion, and other rights described above under the CCPA/CPRA.
Children's privacy
Children under 13 may not use the App. A minor aged 13 or older may use it only with consent from a parent or legal guardian under the Terms.
Security
We use reasonable technical and organizational measures to protect your data, but no method of transmission or storage is completely secure.
Changes to this policy
We may update this policy from time to time. For material changes, we may ask you to review it again at startup, as with the Terms of Service.
Contact
For questions or requests about this policy, contact info@cloud9llc.jp.