Tokoyo Musubi Shrine
Last Updated: October 24, 2026
This Privacy Policy explains how Tokoyo Musubi Shrine handles information when you use this mobile application.
You do not need to register your name or contact details. The app uses anonymous authentication (Firebase Authentication) and stores the following information linked to your anonymous user ID:
App preferences and settings are stored locally on your device.
Negikoto (your own prayer words) are stored on your device. When a reading is generated, the Negikoto in use is sent for that purpose, and its content may appear in the generated reading.
This app uses on-device face detection to detect:
This data is processed entirely on your device in real-time.
Face data is used solely to detect gestures during worship (bowing and prayer). It is not used for identification or any other purpose.
Face data is processed in memory only and is not stored on your device or any server.
Face data is discarded immediately after each frame is processed. No face data is retained.
Face data is not shared with any third parties. No images or facial feature data are transmitted to external servers.
This app uses the following technologies for on-device face detection. All processing occurs locally on your device.
On iOS devices with TrueDepth camera (Face ID-enabled devices), the app uses Apple ARKit for high-precision face tracking. ARKit processes facial data entirely on your device.
On iOS devices without TrueDepth camera and on all Android devices, the app uses Google ML Kit for face detection.
App distribution and purchases are handled by the Apple App Store or Google Play, as applicable. Tokoyo Musubi Shrine does not store payment information.
This app uses Firebase (provided by Google) for the following purposes:
Firebase is used for anonymous authentication, storing the information described above, providing app features, deleting information after its retention period, and managing notification tokens and settings. Data is stored on Google's servers. Even with an anonymous ID, information you enter or purchase information may relate to an individual. For details, please refer to:
To provide and troubleshoot app features, the server records technical logs such as processing times, model names, and token counts. These operational logs are recorded independently of the "Improvement Support" setting, separately from optional usage analytics and crash diagnostics.
This app uses RevenueCat for subscription and in-app purchase management.
For details, please refer to:
The app uses Google Gemini for readings and the OpenAI API for conversations with the girl, including conversations after drawing an omikuji. Messages are used to generate and adjust responses to fit the flow of the conversation.
Gemini receives the words of the wish and omikuji. OpenAI receives the current message, relevant conversation history (including the girl's responses), and other information needed for the flow of the conversation. Depending on the conversation, the words of the wish and omikuji and the reading results are also sent. Please do not enter information that could identify a person, such as a name, address, or contact details. If you enter it, that information may also be sent.
Each provider may retain information under its own terms and privacy policies. This retention is separate from deletion by the app.
You can change your participation in usage analytics and crash diagnostics through the "Improvement Support" option in Settings. Information needed to provide features such as authentication, purchases, notifications, and AI generation is handled separately from this setting.
You may control camera access through your device settings. If camera access is disabled, gesture-based features will be unavailable.
When you save a Kotonoha Fortune result as an image, the app asks for permission to add photos to your photo library. The app only adds the image you choose to save; it does not read your photos. The image is created on your device and is not uploaded. You may control this permission through your device settings.
Local app data is stored on your device and will be removed when you uninstall the app.
The text of readings and conversations is deleted by a scheduled process after 24 hours have elapsed from the start of each respective processing operation. This includes the words of the wish and omikuji and the reading results. Adding messages does not extend the retention period. Deletion may be delayed depending on processing conditions.
Text and additional details submitted in a report are retained for 90 days from submission for review and improvement, then deleted by a scheduled process. A copy included in a report is retained for this period even after the regular reading or conversation text is deleted.
Conversation records other than the text are retained separately, linked to your anonymous account, to continue conversations and avoid repetition. They are not all deleted as part of the 24-hour text deletion. Other data, such as balances and worship records, is also retained in association with your anonymous account.
AI providers may retain information separately, as described in Section 3.5.
You can request deletion of your account and associated data in the app from "Shrine Office" → "Information" → "Contact & reports" → "Delete account." For the steps and what is deleted, please see Account and Data Deletion. If you cannot make a request from the app, you can also request deletion by email, as described on that page. If we cannot identify your account, we may be unable to delete it.
Once your request is accepted, the records on your device are deleted immediately and the account can no longer be used. Records on our servers are reviewed and deleted by the operator, usually within a few days to one month of your request. A request cannot be withdrawn, and deleted data cannot be restored.
After deletion, the following records are kept:
If the consistency of purchase information cannot be confirmed, customer and purchase information may remain with RevenueCat, our purchase management service, to prevent purchases from being applied incorrectly. In that case, some Monthly Musubi membership benefits may not carry over to a new account.
Records remaining on other devices, and images or files you have saved, cannot be deleted remotely. Backups and similar copies follow each service's retention and recovery procedures; immediate deletion of all copies is not guaranteed.
Purchase records held by the App Store and Google Play cannot be deleted from the app. For retention by AI providers, please see Section 3.5.
Third-party services may process data in countries outside your own, including the United States, in accordance with their privacy policies.
Reasonable technical measures are taken to protect data handled by the app. However, no system can guarantee absolute security.
This Privacy Policy may be updated from time to time. The "Last Updated" date will reflect any changes.
If you have questions about this Privacy Policy, please contact:
Email: lexipecid@gmail.com
Tokoyo Musubi Shrine