Bonreel Privacy Policy

株式会社 narn (the “Company,” “we,” or “us”) establishes this Privacy Policy (the “Policy”) for the handling of user information in the Bonreel iOS app and related web pages (collectively, the “Service”).

1. Operator information

• Name: 株式会社 narn
• Address: 4-906-6 Momoyama, Midori-ku, Nagoya, Aichi, Japan
• Representative: 西田涼輔 (Representative Director)
• Contact: support@bonreel.com

2. About the Service

• Friends create a “Trip,” share photos, videos, chats, and other content with invited members, and create memory movies.
• Photos, videos, chats, and other content posted to a Trip are visible to all members of that Trip. Members also use them to create movies on their devices (Section 5).
• Face and scene analysis, selection of movie material, and movie export take place on the user’s device (such as an iPhone). We do not send photos, videos, or face information to external AI services.
• We do not display advertisements or track users across other companies’ apps or websites. We do not include advertising SDKs. See Section 3.8 for usage analytics.
• Data is stored in Cloudflare’s cloud. It may be stored and processed outside Japan (Section 7). The Service is not end-to-end encrypted (Section 9).

3. Information we collect

3.1 Information you enter or post

3.2 Information in photos and videos

• Photos and videos contain people’s appearance (including faces), voices, and surroundings. They may include people who do not use the Service.
• Photo and video files may contain metadata such as capture time, recording device, and capture location (GPS). We store posted photos and videos as original files. Location information recorded in an original is also stored and is passed to Trip members who download or save the original. Thumbnails and viewing images do not contain location information. Originals in free Trips (Trips without a Trip Upgrade) are deleted after the storage limit in Section 8.
• We separately record capture times to order content in timelines and movies.

3.3 When you link Sign in with Apple

When you link Sign in with Apple for purchases or other purposes, we receive the following from Apple:

• A user-specific identifier issued by Apple
• Your email address (an Apple relay address if you select Hide My Email)
• Tokens needed for authentication

We do not request the name registered with your Apple ID.

3.4 Information collected automatically

3.5 Purchase information

• When you purchase a Trip Upgrade: the relevant Trip, Apple transaction ID, product ID, purchase time, purchase environment (production or test), and records of notifications from payment services
• We do not collect credit card numbers or other payment details; Apple processes them.

3.6 Information handled only on your device (not collected by us)

• Face detection and appearance evaluation, scene classification, material selection scores, and movie editing progress
• Photo identifiers in your photo library, used to determine whether an item has already been added
• Photo library access is used to import the photos and videos you select and to save content to Photos. We do not receive photos or videos you have not selected.
• When a Trip is created, only its title and time zone are sent to our servers.

3.7 Information we do not collect

• Your device’s location (the app does not request location permission; location recorded in photos and videos is handled as described in Section 3.2)
• Contacts (friends are invited through the share sheet, invitation codes, or QR codes)
• Advertising identifiers (IDFA)

3.8 Usage analytics (iOS app)

To improve how people create Trips, invite friends, and contribute photos and videos, we send usage events through our servers to PostHog. Sending is enabled by default from the start of app use. You can turn off “Share usage data” in the settings on My Page.

• Information sent: internal identifiers we issue; internal Trip, invitation, media, movie, Trip-day, and action identifiers; media and contributor counts; action duration; actions such as creating a Trip, sharing or accepting an invitation, adding media, and creating, playing, or sharing movies; occurrence times; app type and version; and action results or categorized error types
• We do not send names, email addresses, Trip titles, invitation codes, chat text, photos, videos, capture locations, or advertising identifiers for this analysis. We do not record screens or automatically collect actions.
• Turning the setting off stops subsequent tracking and sending, and discards unsent data on the device. Unsent data on our servers is discarded when the off setting reaches the server. Data already in transit cannot be recalled, and settings may take time to sync while offline.
• The off setting persists when you restart the app. Turning it on again does not send actions from the period when it was off.
• You can still join Trips, add photos and videos, create movies, and share them with the setting off. Authentication, posts, purchases, and other information necessary to provide the Service are still handled as described in their respective sections.

3.9 Diagnostics and written bug reports (iOS app)

To investigate issues and improve app stability, we send crash stacks, operation types and error codes, app version and build, and OS information to Sentry in the United States. If you submit a written bug report from My Page, we also send the text you enter after reviewing the explanation of the recipient.

These diagnostics do not include photos, videos, Trip or chat content, authentication information, our user identifiers, or advertising identifiers. We do not attach screenshots, record screens, or automatically collect actions. Please do not enter personal information such as names or contact details in written reports.

4. Purposes of use

We use collected information for the following purposes:

1. Providing the Service (creating, authenticating, and managing accounts; creating Trips and invitations; storing, displaying, and syncing posts; and delivering material needed to create movies)
2. Sharing among Trip members (Section 5)
3. Processing Trip Upgrade purchases, granting, verifying, and revoking benefits, and handling purchase inquiries
4. Sending push notifications about new memories and movies in a Trip, and about storage limits for original photos and videos
5. Investigating and responding to Terms of Service violations and reports, preventing misuse, and maintaining safety
6. Investigating issues and maintaining and improving the Service, including server performance and stability
7. Responding to inquiries and sending important notices
8. Keeping consent records and responding to legal obligations and disputes
9. Responding to deletion requests, including requests from people appearing in content

We do not use posted content for advertising or promoting the Service. We will obtain separate consent in advance if we use it for promotion or similar purposes.

5. Sharing with Trip members

• Photos, videos, chats, comments, hearts, and display names posted to a Trip are visible to members of that Trip (people who joined through an invitation code or link).
• Members can import posts, including originals, to their devices to create movies. They can also save content to Photos or share completed movies outside the Service. We cannot delete copies saved on members’ devices or external services.
• Anyone who knows an invitation code or link can join the Trip while it is valid (up to 30 days after issuance). Please take care when sharing invitations.
• If a Trip owner places a public movie (teaser) on the web management page, anyone who knows the page’s URL can view it.

6. Disclosure to third parties

We do not provide personal information to third parties without prior consent, except in the following cases:

1. When required by law
2. When necessary to protect a person’s life, body, or property and obtaining consent is difficult
3. When particularly necessary to improve public health or promote the sound development of children and obtaining consent is difficult
4. When necessary to cooperate with national or local authorities or similar bodies in performing duties prescribed by law, and obtaining consent could interfere with those duties
5. When provided in connection with business succession through a merger or other event
6. When entrusting processing to the external providers listed in Section 7

7. Service providers and processing outside Japan

We entrust information processing to the following providers to the extent necessary to provide the Service:

• We specify “Asia Pacific” as the database placement preference, but this does not guarantee storage in Japan. Data may be stored or processed in the United States and other countries or regions where Cloudflare operates.
• Foreign personal information protection systems and providers’ safeguards: information on the United States’ personal information protection system is available in the survey of foreign personal information protection systems published by Japan’s Personal Information Protection Commission. Each provider handles information under its published data processing terms.

External transmission

The app sends diagnostic information and report text described in Section 3.9 to Sentry’s United States region to investigate issues.

For in-app purchases, the app sends our internal IDs, purchase and transaction information, and basic device and app information to RevenueCat, Inc. It also sends information needed for Sign in with Apple, push notifications, and App Store payments to Apple Inc.

The usage data in Section 3.8 is sent from our servers to PostHog EU Cloud for analysis. Turning off “Share usage data” stops sending as described in Section 3.8. Turning it off does not delete data already sent. To request that we stop using or delete stored data, please contact us using the details in Section 11.

8. Retention periods

• In free Trips (Trips without a Trip Upgrade), original photos and videos (the files as posted) have a storage limit and are deleted once it passes. The limit is set for each photo or video: 30 days after the later of the time it was uploaded and the end of the Trip’s end date (00:00 on the following day). The end date is counted only up to 60 days after upload, so the limit is at most 90 days after upload. If the Trip has no end date, the limit is 30 days after upload.
• Deleting originals leaves the Trip, chats, members, thumbnails, viewing images, lightweight viewing versions of videos (where created), and movies posted to the Trip in place.
• We notify Trip members by push notification 7 days and 1 day before the limit (if notifications are allowed), and also on the Trip screen in the app. Until the limit, Trip members can save the originals to their devices in bulk. Originals deleted after the limit cannot be restored.
• Originals in Trips with a Trip Upgrade are not deleted because of the storage limit. If the purchase is revoked (refunded), originals are kept for 30 days after revocation and then return to the normal storage limit.
• The storage limit also applies to Trips created before this revision. However, no originals are deleted during the 30 days after the revision takes effect.
• Apart from the storage limit for originals, posts and Trip information are retained until deleted by the contributor or Trip owner, or until the account is deleted.
• Before deleting Trips or accounts that have been inactive for a long time, we will provide notice in the app.
• If we discontinue the Service, we will provide advance notice before deleting data.

General

• Account information: until account deletion
• Consent and purchase records are retained after account deletion to comply with laws and prepare for disputes. These records are linked only to our internal IDs, not to email addresses or Apple identifiers.
• Access logs: 7 days
• Period during which deleted information may temporarily remain in backups or similar systems: Up to 30 days

9. Security measures

• Communications are encrypted (HTTPS/TLS).
• Photos and videos are stored in private storage and delivered only after verifying Trip membership.
• Push notification device tokens are stored encrypted.
• System access is restricted to necessary personnel, and authentication credentials are managed appropriately.
• The Service is not end-to-end encrypted. We and our providers technically have access to stored data. We review posted content only when necessary, such as to handle reports, investigate issues, or comply with laws.
• Understanding the external environment: as described in Section 7, information may be handled in the United States and other countries.
• We designate a person responsible for personal data handling and limit the people who handle it. If a leak or suspected leak occurs, we respond as required by law.

10. Deletion and account deletion

10.1 Deleting your posts

• Photos and videos: open a photo and select “Delete” → “Delete from entire trip” (only for content you posted). If you joined on the web, open the photo on the Trip page and select “Delete.”
• “Next destination”: select “Delete” from the message menu.
• To request deletion of chats or comments, contact support@bonreel.com.
• Deleted posts are no longer shown to other members, and photo and video files are deleted from the server. Chat and comment text is erased from the database when the account is deleted.

10.2 Deleting a Trip (Trip owner)

• On the Trip screen, select “…” → “Delete trip.” All photos, videos, and completed movies are deleted. The Trip Upgrade for that Trip is also lost.
• Records such as the Trip title and chats are no longer visible to members.

10.3 Leaving a Trip

Select “Leave trip” from the Trip screen menu to leave. Photos, videos, and chats you posted remain in the Trip. Trip owners cannot leave; they must delete the Trip instead.

10.4 Deleting your account

• You can delete your account at any time using “Delete account” on My Page.
• If you joined on the web, you can delete your account at any time using “Delete account and all data” on the Trip page (photos and videos you added to the Trip are also deleted).
• Deleted information includes your display name, profile photo, posted photos, videos, chats, comments, hearts, device tokens, and Sign in with Apple linkage information.
• Movies you posted to Trips are also deleted.
• Trips you own are deleted in their entirety, including other members’ posts.
• Information that remains after deletion:
  • Consent and purchase records (as described under “General” in Section 8)
  • Copies saved on other members’ devices
  • Parts included in movies other members have already created
  • Purchase records held by payment services (Apple and RevenueCat)
• Account deletion cannot be undone.
• Stopping Sign in with Apple in iPhone settings does not delete data in the Service. To delete your data, use the deletion functions in the app or web pages.

10.5 Requests from people appearing in content or without an account

If you want a photo or video featuring you to be deleted, contact support@bonreel.com. Tell us the Trip name, if known, and identifying details about the photo, and we will review and respond.

10.6 Deletion of originals after the storage limit

• Original photos and videos in free Trips are deleted from our servers after the storage limit in Section 8. The Trip, chats, thumbnails, viewing images and videos, and movies posted to the Trip remain.
• Deleted originals cannot be restored. Save the originals you need to your device before the limit.

11. Requests for disclosure and other actions

• For personal data we hold, we accept requests for notification of purposes of use; disclosure (including records of third-party provision); correction, addition, or deletion; suspension of use or erasure; and suspension of provision to third parties.
• Contact: support@bonreel.com
• To verify your identity, we may ask you to cooperate with a method we specify, such as showing an app screen.
• We do not charge a fee.
• It may be difficult to verify ownership of anonymous accounts used without signing in. In that case, please use the deletion functions in the app or web pages.

12. Minors

• The Service is intended for people aged 13 and older. People under 13 may not use it.
• If you are under 18, obtain your parent’s or guardian’s consent before using the Service, including making in-app purchases.
• Obtain a parent’s or guardian’s permission before posting photos or videos featuring minors.
• If we learn that we have collected personal information from someone under 13, we will promptly delete it.

13. Cookies and similar technologies

• Web pages use cookies necessary to maintain sign-in status.
• We do not use advertising or analytics cookies or third-party tracking technologies.

14. Changes to this Policy

• We will announce changes to this Policy on this page and in the app.
• For important changes, we may request renewed consent, such as through the app’s consent screen.

15. Contact

For inquiries about this Policy and the handling of information, contact:

• 株式会社 narn
• 4-906-6 Momoyama, Midori-ku, Nagoya, Aichi, Japan
• support@bonreel.com

Effective date: September 26, 2026

Revision date: October 10, 2026