Effective August 8, 2026
tokoro does not collect your records. They stay on your device, and — if you turn sync on — in your own iCloud. The developer cannot see them.
tokoro has no accounts. It does not ask for or collect your name, email, phone number, date of birth, location, contacts, photos, health data, advertising identifier, device identifier, or usage analytics. There is no analytics SDK and no advertising SDK in the app.
Your records (the time, the weight of mind in three steps, and any note you write yourself) and your settings (theme, reminder count, subscription state) are stored on your device.
Nothing is ever sent to the developer. tokoro does not operate a server. If you turn on iCloud sync, a copy is stored in your own iCloud account — see section 3.
The monthly letter is built on your device from your own records, using fixed rules. No AI is involved and your notes never leave the device to create it.
With sync on, your records are stored in your own iCloud account, in a private database that only you can access. Apple handles the storage and the transfer, and Apple's privacy policy applies to it. The developer has no access to this data.
Turning sync off leaves the records on your device untouched.
Subscriptions are handled by Apple. tokoro never receives or stores payment methods, card numbers, or billing addresses. The app only knows whether a valid subscription exists, and it determines that on your device.
Reminders are scheduled locally on your device. No push server is involved, so nothing leaves your device because of a reminder. You can turn them off at any time in Settings.