Privacy Policy

• Drawings and originals: lines drawn in the app become the friend's original exactly as drawn. An AI-created look never overwrites the original.
• Imported images: the app receives only the image a user selects with the system photo picker. It does not request access to the full photo library.
• Camera and motion: the camera is used only when the user chooses to photograph a paper drawing or start AR, and motion values are used only during tilt play. AR frames and motion values are not saved or transmitted.
• Name: the name a user gives the friend.
• On-device record: the original, name, and parent-selected looks are stored on this device. Native apps encrypt this record.
• Optional AI transformation: only when the feature is shown and a parent consents for that specific use, the background-removed original or an approved character look is sent to Microsoft Azure. We do not send the name, pre-crop photo, or play history. If Microsoft's safety systems flag an issue, authorized personnel may review input or output.
• Reporting generated images: we receive the reason, an opaque generation request identifier, and a matching image hash. The generated image is sent only when a parent checks the additional-send option, and is deleted within 30 days. The original and name are not included.

Unless AI transformation is used, the original and name can remain on the device. The currently distributed native version does not show AI transformation and has no path that sends a drawing to our server. The app does not use the microphone, location, or contacts, and does not perform advertising analytics or tracking.

On-device information is used to move the picture and let the user meet the same named friend later. Optional AI-transformation data is used only to generate and safety-check another look; report data is used to investigate problems and prevent recurrence. We do not use it for advertising, sale, or foundation-model training.

The app is designed for a parent and child to use together on a parent's device, with children's privacy principles in mind. Parent checks protect sharing, physical-goods sales-launch information, replacement of the current friend, deletion, and links to legal or account-management pages outside the app.

The parent area can open this privacy policy, terms, store subscription management, previous Lumisia account management, and support in a browser. No information is sent until a link is opened; the destination's policy then applies.

A parent may explicitly save an on-device PNG for a possible future order through the system share or save screen and open physical-goods sales-launch information in a browser. The app does not upload the drawing automatically. Before sales open, no image upload, order, or payment occurs. If an external page is used after sales open, the destination's policies apply.

Previous Lumisia accounts and subscriptions are managed separately. Kakitomo does not read that information.

The original, name, and saved looks remain on the user's device and can be erased with "Erase all saved data" or by deleting the app. The AI-transform API does not normally persist images on our server. Microsoft handles safety-flagged material under its Azure terms and policies. Optional report attachments and report records are deleted within 30 days. If an on-device record cannot be opened, the app does not silently overwrite it.

Contact: privacy@lumisia.world

We will announce material changes in the app or on our website.

Operator: EISOL LLC — Famille Nakano 101, 5-18-1 Nakanokamicho, Hachioji, Tokyo, Japan