Privacy Policy

1. About This Policy

This Privacy Policy covers both the Naturalize Japan iOS app and the Naturalize Japan web app (naturalizejapan.com), collectively referred to as "the App". By using either platform, you agree to the practices described in this Policy.

Where data handling differs between platforms, each section clearly indicates which platform is affected. The iOS app stores all data locally on your device. The web app uses cloud services for account management and data persistence.

This App is designed for individuals navigating the Japanese naturalization (帰化) process. We understand the sensitivity of immigration-related personal data and have built both platforms with a minimal-data, privacy-first approach.

2. Information We Collect

We collect the minimum data needed to provide and maintain the service. What is collected depends on the platform you use:

We do not collect your location, device identifiers, usage analytics, behavioral tracking data, or any personally identifiable information beyond what is listed above.

3. Firebase Authentication Web App only

Account creation and sign-in on the web app are powered by Google Firebase Authentication. When you create an account or sign in, Firebase collects and processes your email address and issues a secure authentication token. Firebase may also log IP addresses and device information as part of its standard security operations.

Firebase Authentication is operated by Google LLC. Its data practices are governed by Google's Firebase Privacy and Security documentation and Google's Privacy Policy.

Your authentication credentials (password) are never stored by us — they are managed entirely by Firebase. The iOS app does not use Firebase Authentication and does not require an account.

4. Cloud Data Storage (Firestore) Web App only

On the web app, your profile data and Pro status are stored in Google Cloud Firestore, a cloud database operated by Google LLC. Data is stored under your unique Firebase user ID (UID), which is not publicly visible.

Storing data in Firestore allows your progress to persist across browser sessions and devices. You can access your data from any browser after signing in.

Google may store Firestore data on servers located in the United States or other countries. Google Cloud's security and compliance practices are described at cloud.google.com/security.

The iOS app does not use Firestore. All iOS app data remains on your device and is never uploaded to any server.

5. Payments Web App — Stripe  |  iOS — Apple

Web App: The Pro upgrade is processed by Stripe, Inc. You are redirected to Stripe's secure hosted checkout page. We do not receive, store, or have access to your payment card number, CVV, or billing address. We receive from Stripe only a confirmation of success or failure, along with the email used at checkout. Stripe's practices are governed by the Stripe Privacy Policy.

iOS App: The Pro upgrade is processed entirely by Apple through the App Store in-app purchase system. We do not receive or store any payment details. Apple's practices are governed by Apple's Privacy Policy.

6. How We Use Your Data

We use the data we collect solely to:

• Authenticate you and maintain your account session
• Calculate your residency progress, eligibility estimate, and milestone alerts
• Persist your profile and Pro status across sessions and devices
• Verify a Pro purchase and unlock Pro features

We do not use your data for advertising, profiling, marketing, or sale to third parties. On the web app, we do not share your data with any third party except Firebase (authentication and cloud storage) and Stripe (payment processing), as described above. On the iOS app, no data is shared with any third party.

7. Data Retention

Web App: Your cloud data (profile, Pro status) is retained in Firestore for as long as your account exists. If you delete your account or request deletion, your records are permanently removed within 30 days. Data stored in your browser (checklist status) is retained until you clear your browser's local storage. Stripe retains transaction records as required by their policies and applicable financial regulations.

iOS App: All data is stored on your device only. It is retained until you delete the app or reset the relevant data from within the app's Settings screen. Deleting the app permanently removes all stored data.

8. Your Rights and Data Deletion

You have the following rights regarding your data:

• Access: All profile data you entered is visible within the App in Settings.
• Correction: You can update your profile at any time from the Settings screen.
• Deletion (Web App): Email us at naturalizejapan.contact@gmail.com to request complete deletion of your account and all associated cloud data. We will action your request within 30 days.
• Deletion (iOS App): Delete the app from your device to permanently remove all locally stored data. You can also reset individual sections from the Settings screen within the app.
• Browser data (Web App): Clear your browser's local storage at any time to remove checklist data stored on your device.
• Portability: Your profile data entered into the App is available directly within the App at any time.

9. Security

We take reasonable measures to protect your data:

• Web App: All data in transit between the web app and Firebase/Stripe is encrypted via HTTPS/TLS.
• Web App: Cloud data is secured using Firebase Security Rules — your data is only accessible by your authenticated account.
• Web App: Pro status is verified server-side via our API before being granted; it cannot be set by manipulating a URL parameter.
• Web App: Passwords are managed entirely by Firebase and never handled or stored by us.
• iOS App: All data is protected by your device's built-in security (passcode, Face ID, Touch ID encryption). No data is transmitted over any network.

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Third-Party Services Summary

Web App uses the following third-party services:

• Google Firebase Authentication — Account creation and sign-in. Firebase Privacy
• Google Cloud Firestore — Cloud storage for profile and Pro status data. Google Cloud Privacy
• Stripe — Payment processing for the Pro upgrade. Stripe Privacy Policy

iOS App uses the following third-party services:

• Apple App Store — App distribution and in-app purchase processing. Apple Privacy Policy

Neither platform integrates any advertising SDKs, analytics platforms, or social media tracking tools.

11. Children's Privacy

Naturalize Japan is not directed at children under the age of 13. The App does not knowingly collect personal information from children. If you believe a child has provided personal information through the App, please contact us and we will take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App or applicable law. When we do, we will update the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data — including account deletion requests — please contact us.