PRIVACY POLICY
Privacy Policy
Effective: September 20, 2026
Last updated: November 1, 2026 (change history)
Kinimon (“we”, “us”) sets out below how we handle personal information in CONTACT, a film shooting log & Exif app, and its website (together, the “Service”). We are the controller of the personal information described in this policy.
1. Information we collect
On the website
- Support form: your email address, the type and content of your enquiry, and (for bug reports) your device and browser
- Site usage: pages viewed, buttons clicked, time spent, where you came from (search, social media, etc.), approximate region, and your device and browser type, collected with Google Analytics. On the English site, this is collected only if you accept cookies. It does not include information that identifies you, such as your name or email address
When using the app
You can use the app without signing in. By default, your logs are stored on your device and their contents are not sent to our servers. However, to count how many people use the app and how it is used, the app sends the “usage milestones” below whether or not you are signed in (if you are in Europe, only with your consent — see “If you are in Europe” below). We hold the other information below only if you choose “Save to cloud” in Settings, subscribe to a paid plan, or send us feedback (account and payment information are also collected when you subscribe to a paid plan). For feedback, we hold only the text you write and the date, app version, OS and language when you sent it; it is not linked to your usage-milestone number or your account.
- Usage milestones: a random number created by the app on your device, and the information below. We use it only to count how many people start using the app, how far they get with it and whether they keep using it.
- The day you first did key actions (such as registering gear, creating a roll, recording a shot or signing in) and the last day you opened the app (the date only)
- The months you opened the app
- The approximate number of rolls you have created and shots you have recorded (never the exact number)
- Whether you are signed in, whether you open the app from your home screen, the display language, the general type of operating system and the app version
- When you open the app from a link we provide, a tag showing where you came from
- If you are in Europe: if your device is set to a European time zone, the app asks for your consent before sending any usage milestones. Until you answer, and if you choose “Don’t send”, the app creates no number and sends nothing. You can change your answer at any time with “Share usage statistics” in Settings. The time zone itself is never sent or stored
- Account information: the name, email address and account identifier of the Google account you sign in with
- Information you register: cameras, lenses, film stocks, photographer name, copyright notice, etc.
- Shooting logs: date and time, time zone, settings such as shutter speed and aperture, and notes
- Location: collected at the time of logging only if you turn on location in Settings. It is off by default and can be turned off at any time
- Reference photos: reduced-size photos you take alongside your shooting log for matching
- Payment information: the status of your paid plan. Card numbers are handled directly by our payment provider (Stripe, Inc.); we never receive them
CONTACT LINK, which writes to photos on your Mac, runs on your own Mac. Your photo files are never sent to our servers.
2. How we use it, and our legal bases
- To reply to your enquiries — based on your consent and our legitimate interest in responding
- To provide the Service (storing and displaying your logs, writing to photos, managing your account and paid plan, billing) — to perform our contract with you
- To investigate problems and prevent misuse — based on our legitimate interest in keeping the Service safe
- To send important notices (changes to terms, suspension of the Service, etc.) — to perform our contract with you
- To measure how the website is read and improve it — on the English site, based on your consent (cookies)
- To improve the Service, using aggregated information that does not identify you, such as the number of people using the app and which features they reach — based on our legitimate interest; if your device is set to a European time zone, based on your consent
- To comply with the law — based on legal obligations
We will ask for your consent before using your information for any other purpose. We do not make decisions about you based solely on automated processing.
3. Sharing with third parties
We do not share your personal information with third parties without your consent, except:
- where required by law
- where necessary to protect a person’s life, body or property and it is difficult to obtain your consent
- with the service providers we use to run the Service, as described in section 4
We never sell your personal information or use it for advertising.
4. Service providers and international transfers
We run the Service using the following providers, which handle information on our behalf as needed:
- Google LLC (United States): Google Forms (enquiries), Firebase (sign-in, storing logs if you choose “Save to cloud”, storing usage milestones, delivering the website and app), Google Fonts (displaying text), Google Analytics (measuring website usage)
- Stripe, Inc. (United States): payments for paid plans (after paid plans begin)
- OpenStreetMap Foundation (United Kingdom): delivering the map images when you open the shooting-location map in CONTACT LINK (Mac). When you open the map, your IP address and the area of the map being shown are sent to them. Your name, photos and the contents of your logs are not sent
- Cloudflare, Inc. (United States): delivering the map display component (Leaflet) through cdnjs. Your IP address is sent when you open the map
We are based in Japan, and your information may be processed in Japan and the United States. The European Commission has recognized Japan as providing an adequate level of data protection. For transfers to the United States, these providers state in their own privacy policies that they use legally recognized safeguards, such as standard contractual clauses.
5. Cookies
Cookies are small pieces of data a website stores in your browser. We use them only for the following:
- Website: Google Analytics uses them to count repeat visits from the same person. On the English site, Google Analytics does not run and no analytics cookies are set unless you choose “Accept”. You can change your choice at any time from “Cookie settings” at the bottom of the page; if you withdraw consent, we delete the analytics cookies
- App: to keep you signed in. If you store your logs on your device, the app keeps them in your browser’s storage (they are not sent to us). The random number used for usage milestones, a copy of what has been sent and, if you are in Europe, your answer on whether to send them are also kept there (and, if you choose “Save to cloud”, in your account settings)
We use Google Analytics with the following settings:
- Google Signals is off. Your visits are not linked to your sign-ins on other services or to browsing on other devices
- Data is not used for advertising (ad personalization is off)
- IP addresses are not stored. They are discarded after your approximate region is determined
To stop analytics, choose “Decline” in “Cookie settings”, disable cookies in your browser, or use Google’s Google Analytics Opt-out Browser Add-on. Stopping it does not affect how the website works.
6. Security
- Communication between the Service and your device is protected with SSL/TLS encryption
- If you choose “Save to cloud”, stored logs are set so that only you, when signed in, can read and write them
- Usage milestones are set so that only we can read them
- Location and reference photos, which can reveal your movements, are handled with particular care
- Reference photos are deleted when you finish writing to your photos and mark the roll as complete (if you are offline, they are deleted the next time you are online). They are also deleted if you delete the roll before writing
- The small cover images in your roll list, which are made from reference photos, are deleted from our servers at the same time and kept only on your device
7. How long we keep it
- Enquiries: deleted 1 year after we finish responding
- App data (saved to the cloud): kept until you delete your account. If you ask to close your account, we delete your logs and account information
- App data (stored on your device): we do not hold it. Your logs exist only on your device and are deleted when you clear the app’s or the site’s data
- Usage milestones: kept for as long as we provide the Service. Milestones sent from European time zones before October 25, 2026 remain, as we cannot tell whose they are. If you save to the cloud and close your account, the number in your account settings is also deleted
- Website usage: deleted 2 months after collection, per our Google Analytics settings
8. Your rights
You can ask us to give you access to, correct, add to, delete, restrict or stop using your personal information, to object to its use, to stop sharing it with third parties, or to provide it to you in a portable format. Where we rely on your consent, you can withdraw it at any time; this does not affect processing that took place before you withdrew it.
To make a request, please use the support form. We will respond without undue delay after confirming your identity, in accordance with the law.
If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the right to lodge a complaint with your local data protection authority.
9. Children
The Service is not directed at children under 16, and we do not knowingly collect their personal information.
10. Changes to this policy
We may revise this policy to reflect changes in the law or in the Service. We will announce important changes on the website or in the app.
11. Change history
- November 1, 2026: Simplified the wording (no change to how we handle your information)
- October 28, 2026: Added feedback you can send from the app
- October 25, 2026: Added asking for consent if you are in Europe
- October 20, 2026: Added “usage milestones” (more items added on October 24 and 26)
- October 19, 2026: Updated to reflect that the app can be used without signing in
- September – October 16, 2026: Added or clarified the English site and cookie consent, when reference photos are deleted, how long we keep enquiries, and the map providers
12. Enquiries
Kinimon (Japan)
Enquiries: support form
This policy is also available in 日本語.