harukary (the “Operator”) establishes this policy for data handled by the Leno vlog creation app and its official website (together, the “Service”).
1. Scope
This policy applies to the Android and iOS versions of Leno and to leno.harukary.com. The policies of the App Store, Google Play, and other external services also apply when you use those services.
2. Data we handle
Videos and editing data
- Your original videos remain unchanged in the photo library or file service you selected, and Leno does not alter or delete the source data. Videos selected from file services such as Google Drive, iCloud Drive, or OneDrive may be copied into Leno-managed storage on your device so processing and recovery can continue reliably.
- When creating a First Cut, Leno sends lightweight processing copies prepared on your device rather than the full-quality original files. These copies are encrypted, kept in temporary storage only as needed for processing and recovery, and then deleted. Finished vlogs are exported on your device and are not stored on Leno servers.
- For AI processing, we temporarily handle the instructions, editing preferences, AI-adjustment instructions, material analysis results, candidate segments, edit plans, caption suggestions, and other processing data. AI-adjustment routing does not send video files; it sends the current adjustment instruction and a structural summary of the edit project to the AI processing service.
- Leno does not automatically post finished vlogs to social networks or other services.
Immediately before you create your first First Cut, we explain what data will be sent to external AI processors, why it is needed, and how long it is kept. We send it only after your explicit consent. The destinations and roles of these providers are listed under “Processing by service providers” below. If you decline, AI-powered features are unavailable.
Purchases and allowances
To verify purchase status, restore purchases, and manage credits, we handle store purchase status, plan, credit usage, and identifiers needed for purchase restoration and duplicate-consumption prevention. The Operator does not receive payment card numbers; the app store used for the purchase processes payment.
Abuse prevention
To prevent repeated use of the free allowance and fraudulent requests, we may handle device-integrity results, identifiers derived from a device or installation, request counts, and similar information. Identifiers are converted after receipt into a form that cannot be reversed, and the raw values are not retained.
Usage analytics
Only with your explicit consent, we use an analytics service to measure page views, store-link selections, and events such as completion or failure of First Cut and export. This data may include cookies or an app-specific identifier, device, OS, and app information, and an approximate location inferred from an IP address.
We do not send the following to the analytics service: videos, photos, file names, project IDs, the content of captions or AI-adjustment instructions, AI-processing input or output, precise location, or advertising identifiers.
Support requests
When you contact us, we handle your email address, message, and any device or app information you choose to provide.
Reports about AI-generated content
If you report AI-generated content in the app, we handle the type of content reported, the report reason, optional details you choose to enter, the app version, and an installation identifier converted to a non-reversible form to prevent repeated abusive submissions. The reported video, generated text, and project ID are not sent automatically.
3. Purposes
- Providing First Cut creation, editing, export, and other Service functions
- Verifying purchase status, allowances, and purchase restoration
- Responding to failures and inquiries and delivering important notices
- Reviewing reports about AI-generated content and improving safety and quality controls
- Preventing abuse, excessive use, and security problems
- Aggregating usage and improving interaction flows when consent is given
- Complying with law and these Terms of Use
4. Processing by service providers
| AI processing | Google Vertex AI handles processing video, instructions, and editing data for AI analysis and edit-plan creation. Leno sends requests directly from Cloudflare AI Gateway to Google Vertex AI and does not fall back to other AI providers. |
|---|---|
| Communications and temporary storage | Cloudflare Workers, R2, and AI Gateway are used for API processing, encrypted temporary storage, and AI request routing and control. AI Gateway is configured not to store request payloads in its logs. |
| Purchase management | RevenueCat and the App Store or Google Play handle purchase status, plan, and identifiers needed to verify purchases, restore purchases, and manage allowances. |
| Analytics | Google Analytics / Firebase Analytics measures website and app usage only after consent. |
| Abuse prevention | Apple or Google platform-integrity services and related controls are used to verify legitimate app use and prevent abuse. |
The Operator engages service providers to process data only as needed to provide the Service. We review contractual and technical safeguards and confirm that these providers protect user data to the same or equivalent level required by this Privacy Policy and applicable privacy requirements. Depending on those providers' infrastructure and processing locations, data may be handled outside Japan.
5. Retention
| Original and finished videos | Full-quality original and finished videos are not stored on Leno servers. |
|---|---|
| On-device copies from file services | Videos selected from Google Drive, iCloud Drive, OneDrive, or similar services may be copied into Leno-managed storage on your device for reliable processing. You can remove these copies by deleting the project or using “Free up storage” while keeping the project. The source file in its original location is not deleted. |
| Processing video and AI processing data | Kept in encrypted temporary storage. The app normally requests deletion when processing completes or is cancelled. If a communication failure prevents that request from completing, the data becomes unavailable 72 hours after creation and is then deleted in due course. |
| Usage data | Event-level retention is two months. Aggregated reports may remain longer. |
| Web analytics cookies | Up to 60 days after consent. |
| Purchases and allowances | Kept as long as required to verify purchases, prevent abuse, and meet legal obligations. |
| Support requests | Kept as long as required to respond and prevent recurrence. |
| AI-generated content reports | Normally retained for 30 days and then deleted. |
6. Your choices
- You can withdraw consent for AI processing in the app's Settings. After withdrawal, Leno does not send data to external AI processors and will ask you to review the data and recipients and consent again before the next First Cut. If you decline, AI-powered features are unavailable.
- Usage analytics are off by default. You can change your choice in app settings or through “Analytics settings” in this site's footer.
- You can use Leno and the main functions of this site without sharing usage analytics.
- You can delete projects and finished videos from your device. Processing copies created from file services can be removed with “Free up storage” while keeping the project. Leno does not automatically delete the original video in its source location.
- To request deletion of billing, allowance, or other data retained on our servers, use the deletion request in app Settings and email leno@harukary.com with the displayed reference ID. After confirming the applicable data, we will delete it except where retention is required by law.
- For privacy requests, contact leno@harukary.com.
7. Children's data
The Service is not directed to children under 13. Minors must obtain parental consent where required by the law of their residence. If a video includes a child, you must have the permission of a parent, guardian, or other person with the necessary authority. Leno does not process videos for the purpose of identifying a person through face recognition or creating biometric identification templates; visual and audio content is processed to create editing suggestions.
8. Security
We apply safeguards appropriate to the data we handle, including encryption in transit, encryption of processing data, access restrictions, retention limits, and controls that prevent user content from being written to logs.
9. Changes to this policy
We may revise this policy as features, service providers, or laws change. We will clearly announce material changes on this site or in the app.
10. Contact
Operator: harukary
Email: leno@harukary.com