Mikuji Privacy Policy
Effective date and last updated: August 31, 2026
Operator: Vibe Programming Lab
This policy applies to the iPhone app Mikuji (bundle ID com.mikuji.mikuji).
1. Summary
Mikuji is a local-first app that works without an account. When no account is connected, the notes you write and app settings remain on your device. Only when you explicitly connect an Apple account in Settings does Mikuji send tied notes to Firebase for synchronization across devices. The app does not use advertising, product analytics, crash-reporting, or cross-app tracking SDKs. Apple sign-in and Firebase may process the limited service data described below.
2. Data processed
| Data | Condition and purpose | Storage |
|---|---|---|
| Tied notes you write | Displaying, organizing, and restoring notes | On device |
| Note ID, created/updated/deleted times, random origin-device ID, and schema version | Handling offline changes and synchronization conflicts | On device |
| Language, time-of-day mood, theme, and mute settings | Preserving your preferences | On device; not synchronized |
| Firebase user ID (UID) and sign-in provider | Authentication and separating each user’s data | Device and Firebase Authentication |
| Display name and email supplied by the provider, when available | Showing the connected account and reauthentication | Device and Firebase Authentication |
| Tied-note text and the note metadata above | Cross-device sync after you connect an account | Device and a per-user path in Cloud Firestore |
| Last synchronized user ID and successful sync time | Protecting account changes and showing sync state | On device |
| Limited user/device identifiers and unlinked diagnostic data | Sign-in, security, cloud operation, and Firebase service diagnostics | Apple or Firebase under their privacy manifests and policies |
If you do not connect an account, Mikuji does not send a Firebase UID, provider account information, or your note text to the operator’s Firebase project.
3. Purposes and service providers
If you choose account sync, Firebase Authentication and Cloud Firestore process authentication and storage, and Sign in with Apple authenticates the account. Each service is governed by its provider’s terms and privacy policy.
Mikuji does not use your notes for advertising, profiling, or emotion inference. Cloud data is used only to provide synchronization, safe account switching, export, and deletion features. The published privacy manifests for Firebase Auth/Firestore can include an Analytics purpose for unlinked service diagnostics in addition to app functionality. Mikuji does not use a product analytics SDK to analyze user behavior.
4. Retention, export, and deletion
On-device data remains until you use the in-app data deletion control or delete the app. The data export control copies account details and structured note records to the clipboard. After copying, the operating system’s clipboard rules and the policy of any app where you paste the export apply.
Synchronized records may remain in Cloud Firestore until you delete them or delete the cloud account. A limited deletion marker (tombstone) may remain until account deletion to prevent a record from reappearing when a long-offline device reconnects.
When you select cloud account deletion in Settings, Mikuji asks you to reauthenticate, deletes the cloud notes under that UID, and deletes the Firebase Authentication account. For Apple accounts, it also revokes the Apple authorization token where available. Cloud account deletion does not erase local notes on the device; use the separate in-app data deletion control if you also want to remove them. If a network interruption prevents deletion from completing, contact the private email address below.
5. Data not collected and tracking
Mikuji itself does not request or store advertising identifiers, precise location, device contacts, payment information, health information, or browsing/search history in Cloud Firestore. The app does not include advertising, product analytics, or crash-reporting SDKs, sell data, or perform cross-app tracking. It is designed not to put note text in diagnostic logs.
6. Security
Cloud notes are stored under paths scoped to the authenticated Firebase UID, with Firestore security rules intended to block access by other UIDs. Service-provided encrypted connections are used in transit. No storage or transmission method can guarantee absolute security.
7. Children
Mikuji is not designed to intentionally collect children’s personal information. A parent or guardian should review the sign-in provider’s and local age requirements before allowing a child to enable account sync.
8. Public support portal
This portal is hosted on GitHub Pages and uses GitHub Issues for public requests. GitHub may process visit logs and account information under its own policies. Do not post email addresses, account identifiers, authentication information, or note text in a public issue.
9. Contact and changes
For general policy or deletion instructions, use the public privacy request form. For a private request that requires account-specific information, email gooldare@naver.com. If Mikuji’s data practices change, this policy and the App Store privacy responses will be updated together.