Privacy policy

Records stored on your device

Finances in each currency, budgets, plans, plan budgets and checklists with linked expenses and shopping, lists, Footprints, imported calendars, and regional and display settings are saved in the app’s dedicated storage on your device. The bundled interface uses the app’s storage functions and does not automatically send these personal records to the developer’s server. As an exception, expenses and plans you select for optional family sharing are copied for sharing and sent to the server. Later changes to your personal records are not automatically synchronized with the shared copies. Depending on your device settings, they may be included in Apple’s device backups.

Wallpaper photos and your wallpaper selection are kept in storage used for the app’s web display. They are not automatically sent to the developer’s server. Wallpaper is included in Full Kurashi OS backup, but not in the legacy money-and-plans JSON backup.

Optional family sharing and Google / Apple sign-in

Family sharing in version 2.0 of the iPhone app is optional. Personal use does not require registration. For family sharing, email addresses, names and display names, and user IDs are managed using Firebase Authentication and Google Cloud. When you sign in with Google or Apple, the respective service and Firebase process the information needed for authentication.

Selected expenses (name, amount, currency, date, category, and note) and plans (name, date and time, completion status, and note) are stored in Cloud Firestore. Members of the same family can view and edit them. Personal records on your device are copied for sharing only when you select them. Later changes to personal records are not automatically synchronized with the shared copies.

This information is used to provide authentication and family sharing, and is not used for advertising tracking. Firebase / Google may also process communications information, such as IP addresses, as part of server processing.

Deleting your family-sharing account and shared records

You can delete your account from the app’s family-sharing screen after verifying your identity. This deletes your account, profile, family membership, and shared records that you created or for which you were the most recent updater. If you are the administrator, the administrator role is transferred to another member. If you are the last member, the family and its shared records are also deleted.

Personal records on your device remain after this deletion. If processing takes time, deletion continues on the server even if you close the app. This does not guarantee immediate, complete erasure from all storage locations, including backups.

Memory photos and notes

Memories stores a title, date, optional notes and place, an optional link to a plan, and up to one optional photo per memory on your device. You can use it without a photo. Plan budgets, preparation checklists and related expenses remain linked through the saved records.

The photo picker provides only the image you select. Camera permission is requested only if you choose to take a photo. Newly selected photos are converted on your device to JPEG with a longest side of at most 1,600 pixels; image metadata such as the capture location is removed. The original in your photo library is not changed or deleted.

Memories are not automatically published or sent to the developer’s server or an external AI. Memory photos and notes are not inputs to Kurashi AI. They are included, with the entered place, when you manually export memories or a full backup.

Removing image metadata does not remove information visible in the photo or the place and notes you enter. Review the content and destination before exporting or sharing it.

Outings, reservation documents, and settlements

Outing names, linked plans, shared packing lists, manually selected outing status, after-return review status and preparation notes, total budgets and monthly payment allocations, saved itinerary proposals, split participants’ names, amounts and settlement records, reference exchange rates and sources, and actual billed amounts are stored on your device. Itinerary assistance uses on-device calculations from saved plans and your input, without sending them to external generative AI. Recording a settlement does not transfer money or contact anyone. Outings, reservation documents, and settlements themselves are not collaboratively edited or automatically shared. If you select related expenses or plans for family sharing, the family-sharing description applies.

Reservation numbers, confirmation URLs, usage dates and times, cancellation notes, and PDF, JPEG or PNG documents you select are stored in protected private app storage. Limits are 5 MB per file, 100 documents and 50 MB total for storage/export. Original file contents are retained, so unlike memory photos, documents may retain image metadata such as capture locations or personal information within PDFs. Review contents before adding, exporting or sharing them. Selecting a file does not modify or delete its original.

Saved documents open on the device. URLs are not saved copies of the document; opening a URL takes you to an external site governed by its own policy. Outings link to documents and memories by ID. Removing a link or archiving an outing does not delete the original documents, memories, plans or expenses. Documents are not automatically sent to the developer’s servers or external AI.

On-device AI and questions about your daily-life records

On supported devices, the app uses Apple’s on-device Foundation Models to interpret receipt text, identify spending categories, suggest record searches, and understand questions. The app has no function that sends images, records, or questions to external AI servers for these AI operations.

For questions about finances, plans, departures, shopping, upcoming payments, and weather, the question text, category names, today’s date, and display language are passed to the on-device model. The app searches records and calculates amounts and departure times. Weather answers use forecasts already retrieved; asking the AI does not trigger additional route or weather requests. Up to 24 recent conversations are saved in private app storage, including displayed questions and answers, answer times, language, currency, time zone, and conditions needed for follow-up questions. They remain available after closing the screen. History excludes original lists of financial or plan records, underlying chart data, and the full context passed to the model. Past answers remain as displayed at the time and are not recalculated after records or settings change. Weather questions remain, but old forecast values and provider data are not saved in history; the app prompts you to check again. Questions in progress are cancelled when the screen closes. Questions and answers are not automatically sent to the developer or separately logged for AI processing. Per-feature AI settings are saved on the device.

Widgets

Copies for display, such as estimated amounts, plan titles and dates/times, and preparation and departure dates/times, are saved in a shared area on the device that only the main app and its widgets can use. Transaction details, notes, photos, and coordinates are not shared with widgets. Widgets do not edit records, and their appearance on the Lock Screen follows your iPhone settings.

Receipt scanning

The app reads a receipt photo you select or an image taken with the camera using text recognition on your iPhone. Camera permission is requested only if you choose to take a photo. When you select a photo, the app receives only the image you selected.

The image and the full recognized text are not sent to the developer’s server and are not saved in Kurashi OS records or JSON backups. Amounts, dates, and other details that you review and choose to save are stored on the device as ordinary expense records. Images already in your photo library are not deleted.

Destinations, maps, and travel times

When you search for a destination, the place name or address you enter is sent to Apple’s map services. The selected destination’s name, address, and coordinates, the mode of travel, travel and preparation times, and notification preferences are saved with the plan on your device and are also included in JSON backups.

If you choose to obtain the travel time from your current location and grant location permission on your iPhone, your location at that moment and your destination are sent to Apple’s map services to obtain an estimate. Route estimates use more precise location information than weather forecasts. Starting-location coordinates obtained for this route estimate are not saved in Kurashi OS records or backups, and this action does not initiate continuous location tracking. Optional return-home detection is a separate setting described below.

When you open directions, the destination and mode of travel are passed to Apple Maps. Apple’s settings and privacy policy apply to the use of your current location and directions in Maps.

Optional return-home detection

Return-home detection is off by default. Only when you select a plan or outing and a registered place and enable it does iPhone Core Location monitor entry into and exit from that area. The place uses coordinates you enter or a current location you explicitly request; these are not rounded to two decimal places like weather coordinates. The place name, coordinates, target, detection state and possible arrival are kept in a protected device-only file. Locations are not sent to the developer, place-name search services or external AI. Travel routes and location history are not saved.

When the OS detects that you have left the 200-metre-radius area and later re-entered it, the app records one possible return and stops monitoring. Background operation requires Always location permission, Precise Location and Background App Refresh. Accuracy, detection and notification timing, and operation after the app closes depend on OS conditions. Passing through or briefly returning is possible, so the app does not automatically mark a plan complete, a payment paid or an outing finished. Candidate notifications require a separate opt-in.

You can stop detection in the app and change location permissions in iPhone Settings. Detection pauses when the target is deleted, archived or ended, permissions are insufficient, or OS monitoring has stopped, once the app observes the condition. It does not automatically resume until you enable it again. Device-specific places and detection settings are excluded from exports and device backups and must be configured again after restoring records.

Weather and location searches

To retrieve forecasts, the app sends the latitude and longitude of your selected location to Apple Weather (WeatherKit). The same coordinates are also sent to Apple’s location search service to determine the local dates for daily forecasts. When you search for a place for weather, the place name you enter is sent to Apple’s location search service. Your current location is not obtained for place-name searches.

For weather, your current location is obtained once when you take an action such as selecting “Use current location” and grant permission on your iPhone. The retrieved location is rounded to two decimal places before use; this weather feature does not track your location continuously. To display a place name, the rounded coordinates and display language are sent to Apple’s location search service. The retrieved municipality, prefecture, and similar place names are saved, but street numbers and building names are not. For locations selected through place-name searches or imported from backups, the coordinates used to retrieve forecasts are also rounded to two decimal places. Previously saved location information is not rewritten by this change.

The older native screen used for recovery after problems such as a screen failing to load also uses Apple Weather and Apple’s location search service. Its forecast coordinates are rounded to two decimal places.

Sending feedback and bug reports

When you press “Send feedback,” the text you enter (3–500 characters) and form information used to prevent spam are sent to the Kurashi OS server (kurashiboard.app or kurashi-board-public.kurashi3235.chatgpt.site). The submitted fields are the text, an anti-spam input field, and the time the form was started. Finances, plans, and lists are not automatically attached. If you include records or personal information in your message, review the content before sending it.

The server stores the submitted content, submission time, and an identifier used to prevent repeated submissions. The identifier is created by applying a one-way transformation to the date, IP address, and browser information; the IP address itself is not stored in the feedback database. Submissions are retained for improvements and responses, and are not automatically deleted after a set period. To discuss deletion, use the in-app feedback form and provide the submission date/time and content.

Notifications

Notifications for scheduled plans, morning reminders, preparation start times, and departures are scheduled on your iPhone if you enable them. Plan titles and destinations may appear on the Lock Screen and elsewhere. You can change notification permissions and how notifications are displayed in your iPhone settings. Departure notifications are based on the saved travel time and do not continuously monitor traffic conditions. Importing a backup alone does not grant notification permission or enable notifications on this device.

Backups and deletion

You can manually export a JSON file. Full Kurashi OS backup includes finances in all currencies, plans, plan budgets and checklists with linked expenses and shopping, lists, Footprints, imported calendars, retained additional fields, app settings, saved AI conversations, memory photos, titles, dates, notes, places and plan links, and wallpaper. It also includes outing itineraries, budgets, settlements, reference currency conversions, review status, links to documents and photos, and reservation document details and original file contents. Device-specific return-home locations, permissions and settings are excluded. Files exported from the recovery screen may also contain saved AI conversations. Web and legacy money-and-plans backups exclude AI conversations, memory contents, document file contents and wallpaper. You can also export and import Memories separately.

You choose the storage destination, such as iCloud Drive, and any recipient. Saving to or importing from iCloud Drive uses the standard file interface and is a manual operation, not automatic app synchronization. The destination service’s settings and terms apply. Device backups follow your Apple settings. Transfers to or from the web version also use files and do not sync automatically.

Exported JSON files contain personal information such as photos, notes, reservation numbers, document contents, names associated with settlements, and finances. The app does not add password protection. Check the storage destination and recipient. Full-backup import adds data after review, preserving existing records with the same IDs, configured settings and existing wallpaper. Import is rejected if documents with the same ID have different file contents. iPhone notification permissions and return-home detection are not automatically restored or enabled.

Use “Clear conversation” on the AI screen to delete conversation history saved on the device. This does not remove conversations from previously exported full backups; delete those files at their storage destination if needed. You can delete individual records in their respective screens. Deleting a memory removes its photo, notes and other content from the app. It does not delete the original in your photo library, linked plans or finances, or exported backups. Deleting the original plan leaves the memory in place.

When restoring a backup in the older recovery screen, the app retains a copy of the immediately preceding saved file within the app. Deleting the app from a device removes records in that device’s app storage and retained recovery files. Manage and delete exported files and Apple backups in their respective storage locations.

You can also export finances and plans as CSV files. Depending on the records, these include amounts, categories, plan titles, notes and dates or times. CSV files are for viewing and analysis; use a JSON backup to restore app data. Manage exported files at the destination you selected.

Advertising, analytics, and external links

This iPhone version does not load advertising or analytics during startup, and their destinations are not permitted for in-app network communications. Links to information pages, the web version, and external websites open in a browser, where the destination’s policies apply.

Rain-cloud information opens an official viewing page from the Japan Meteorological Agency (Japan), NWS (United States), IMD (India), or RainViewer in an external browser, depending on the selected weather location. If no location is set, the app uses your country/region setting. The app does not attach coordinates or records to these links. Select your region on the destination page. Some regions are outside observation coverage or have missing data. The destination website’s policies apply there. For Apple’s services, also review Apple’s Privacy Policy.

Contact and permissions

For questions about your data or deletion of submitted feedback, use “Send feedback” in the app. Include the submission time and message content as far as you know. You can change location, camera and notification permissions in iPhone Settings.

Apple Privacy Policy

iPhone support and contact · Frequently asked questions (web version)

Data saved on your device

Your monthly budget, expenses, scheduled payments, events and to-dos, shopping lists, weekly routines, progress, imported calendar files, weather location and cached forecasts, notification settings, screen color, selected payment apps, and initial setup status are saved in the browser you are using. These money records and events are not sent to Kurashi OS servers unless you explicitly choose to send them through AI advice.

Save and restore files using “Backup” in Settings. To erase data on your device, use “Reset data on this device” in Advanced mode settings, or clear the site's data in your browser.

Notifications and calendar files

On the new board, event files with reminders are created within your browser using either the morning time or the selected event's name, date, time, and notes. Once you add a file to your device's calendar, that calendar service's storage and notification settings apply. Imported .ics files are also read only within the browser, with no automatic sync.

AI advice

AI advice creates a prompt on your device from the information you select. Event names and expense details are excluded by default. In approximate and anonymous mode, amounts already saved in Kurashi OS are rounded and event names are hidden. Free text in “Instructions for AI” and any text you add or edit after generating the prompt are not anonymized and are included as written. Do not include names, addresses, secrets, or similar information. Prompts are not sent automatically, and you can review the full text before sending.

If you choose to copy or share, your prompt is not sent to Kurashi OS servers. Once you submit it to a service such as Gemini or ChatGPT after pasting it there, that service's terms and data handling policies apply.

Only when you press “Ask Gemini on this screen” is your reviewed prompt sent through Kurashi OS servers to the Google Gemini API. For direct advice, saved data is formatted in approximate and anonymous mode, but free text and edits are sent as written. Direct advice is intended for people aged 18 or over in Japan. With Google's free tier, prompts and responses may be used to improve products and may be reviewed by people, so do not include personal information or secrets. For details, please see the Google Gemini API Terms of Service.

Kurashi OS does not save AI prompts or responses. To protect the free tier, it saves only the total number of requests sent across the site that day. The previous day's total is overwritten on the first use the next day. IP addresses and device-specific identifiers are not saved as part of AI request counting.

Analytics

To improve the site, we record viewed pages, access times, referrer hostnames, broad device categories, country or region codes, and a random session ID. We read advertising and sharing markers in the URL on your device and send only fixed categories, such as Google Ads, X or LINE, and the classification method. We also classify use in an installed home-screen app and visits that resume in the same document after 30 minutes. We do not send full URLs, advertising click ID values, search terms, campaign names, money records, expenses, schedules, saved places or entered content.

Basic page-view measurement uses a random session ID in sessionStorage. It expires when the tab closes or the next measured page view occurs after a gap of 30 minutes. We hash IDs before database storage; the analytics database does not store IP addresses or raw browser information. Records older than 90 days are deleted when the next event is received.

Only if you allow return-visit measurement, we also store a random browser ID in localStorage for up to 90 days. Its hashed value is linked to page views to measure new and returning browsers and next-day / day-7 return rates. This does not identify a person across browsers or devices and is not shared with advertising providers. Your choice is stored for up to 180 days. Declining later deletes the browser ID and stops future linking; previously received records expire under the 90-day retention policy. Clearing browser storage or ID expiry can cause a returning browser to be counted as new.

We also count app/tab openings separately, using only the app type, time, and country or region. If you allow return-visit measurement, we use the same browser ID to count daily visits and additional displays for each app. We do not send your inputs or count automatic refreshes. These statistics help improve the site and consider ad placement; they are separate from actual ad views. App records are also kept for up to 90 days.

Additional usage measurement requires your separate permission, beyond return-visit measurement. We link completed calculations, app views, successful or failed saves of budgets, expenses and plans, and at least three seconds of foreground viewing of a configured Home screen to the browser ID you have agreed to use. We do not send input contents such as amounts or plan titles. We use these records to measure continued use and do not share them with advertising providers.

You can allow or stop additional measurement on this page at any time. We do not extend the ID’s existing expiry. Additional records are excluded from reports after at most 90 days and deleted when the next request is received. Stopping measurement stops new transmissions and queued retries. Records already received are deleted according to the retention period.

Measuring Google Ads performance

We load the Google Ads measurement tag only after you allow optional advertising cookies and we confirm any additional consent required in your region. Google may receive the page URL, referrer, access time, browser, device and connection information, and advertising click identifiers, and may set cookies. Advertising personalization signals are disabled. If you decline, our own visit statistics continue under the policy described above.

Kurashi OS does not send your monthly budget, expenses, scheduled payments, events and to-dos, weather location, or text entered for AI advice or feedback to the Google tag. For Google's data handling practices, please see the Google Privacy Policy.

Ads on this site

Kurashi OS includes Google AdSense placements for visitors in Japan and overseas. Once advertising setup and Google review are complete and we confirm your permission and any additional regional consent, ads labeled “Advertisement” may appear below Home or Today and at the end of the About, budgeting introduction and FAQ pages. We do not show ads before setup is complete, when the country or region cannot be identified, when ads are unavailable, or on the beta site.

When an ad placement is displayed, communication with Google and ad providers sends information including your IP address, device and browser details, and information about the page viewed and the ad. Ads are requested with non-personalized settings, but cookies or browser storage may be used for frequency limits, fraud prevention, aggregate reporting, and similar purposes.

We store your advertising cookie choice and its timestamp in this browser for up to 180 days. You can use the app if you decline and change your choice on this page at any time. When your browser enables Global Privacy Control, we turn off optional ads and Google Ads measurement. We also request restricted data processing for ads.

In the European Economic Area, the United Kingdom and Switzerland, we load Google’s consent message after you allow optional advertising cookies. This setup communicates with Google, but ad requests remain paused until the required consent is confirmed. Ads also remain off if the consent message is not configured or cannot be loaded. Use “Review Google consent choices” to change your Google consent. Withdrawal applies to subsequent processing and does not recall information already sent.

Kurashi OS does not pass saved financial amounts, expense details, events, locations, or AI prompts to ad code attributes or targeting data. Products and services featured in ad placements belong to external providers; their appearance does not imply a recommendation or partnership by Kurashi OS.

For details, please see how Google uses information from partner sites and Google's explanation of advertising. You can manage Google's personalized ads in My Ad Center. You can also control cookie permissions or delete cookies in your browser, but clearing site data may also erase your money records and events in Kurashi OS.

Home wallpaper and display settings

Your selected photo is resized and converted to JPEG within this browser, then saved on your device. Photos are not sent to servers or analytics services. The dog and cat wallpapers are AI-generated images in a photographic style.

You can delete your saved photo using “Reset to default” in Settings. App visibility, the glass-style display, and notification read status are also saved in this browser. Wallpaper and Home display settings are not included in JSON backups.

Weather and location search

If you use “Current location,” the latitude and longitude obtained through your device's location feature are saved in the browser you are using. The new board rounds your current location to two decimal places before saving it, and your browser contacts Open-Meteo directly to retrieve the weather. Advanced mode rounds coordinates to three decimal places when retrieving forecasts.

When you search for a location on the new board, your browser sends the place name you enter directly to Open-Meteo. In Advanced mode, it is sent to the location search service through Kurashi OS servers. Search results are based on GeoNames location data and may be cached on Kurashi OS servers or its delivery network for up to 24 hours.

Open-Meteo receives the IP address used for the connection and a request URL containing coordinates and other information. According to Open-Meteo's official policy, server logs containing coordinates may be retained for up to 90 days for purposes such as maintenance and abuse prevention. For details, please see Open-Meteo's terms and privacy information.

Weather data comes from Open-Meteo, and location data from GeoNames, under CC BY 4.0. For display, we round values, translate weather codes into the selected language, and extract and format selected fields.

Rain radar

Rain radar uses tiles from RainViewer, which processes data from weather agencies and other sources around the world, along with maps from © OpenStreetMap contributors. Images covering the area around your saved location are retrieved from the respective services.

RainViewer's underlying data varies by the location displayed. The Japan Meteorological Agency is the main source for Japan. For details, please see RainViewer's list of data sources.

Feedback

Only when you submit feedback do we save the text you enter, submission time, and a daily identifier used to prevent repeated submissions. The feedback database stores an identifier generated through a one-way process from your IP address, browser information, and related data, rather than the IP address itself. Money records and events are not sent with feedback.

Calendars and payment apps

The event file for your device's calendar is generated on the spot using your selected morning time and a link to Kurashi OS. It does not contain events from the app.

The buttons for Apple Wallet (iPhone and iPad only), PayPay, Rakuten Pay, d Payment, and au PAY are links that launch the selected app. Kurashi OS does not make payments or read balances or transaction histories.

Service names are trademarks or registered trademarks of their respective companies. Kurashi OS is not affiliated with, endorsed by, or sponsored by these companies.

External services and contact

Each external service handles communication data under its own policies. If you have a question about data handling or a feedback submission, use “Feedback” in Kurashi OS Settings and provide the submission date, time, and content to the extent you know them.

Attributions for external data, trademarks, and open-source software are collected in Licenses & attribution.