Privacy Policy
Last updated: November 14, 2026
The operator of Sandora ("the App"; Japanese telecommunications business notification number: A-08-23996; "we" or "us") establishes this Privacy Policy regarding the handling of users' personal information in the App.
Article 1 (Information We Collect)
We may collect the following information:
- Name or nickname
- Email address
- Date of birth
- Profile information (bio, country of residence, etc.)
- Chat message content (including posts in public chat rooms and on the timeline)
- Identifiers from Apple Sign-In
- Identifiers and email address from Google Sign-In
- Device tokens for push notifications
- App usage data
- Advertising identifier (IDFA, only if permitted by the user)
- Device information such as device model and OS version
- Diagnostic information generated when the App terminates abnormally
- Access logs automatically recorded when the App communicates with our servers (IP address, date and time of access, the URL accessed (which may include identifiers such as the user's ID), and the app and OS information sent by the device (User-Agent))
Article 2 (Purpose of Use)
We use the collected information for the following purposes:
- Providing and improving the App's services
- Improving the service by analyzing app usage
- Providing the random matching feature
- Providing public chat rooms and the timeline
- Sending push notifications
- Providing user support
- Preventing unauthorized use and impersonation
- Ensuring security and detecting unauthorized access (including aggregation and analysis of access logs)
- Responding to violations of the Terms of Service
- Reflecting whether you currently have the App open (online status) in the user icon shown to other users (online status is determined only on the server while you are connected and is not recorded or stored)
- Creating statistical data (in a non-personally identifiable format)
Article 3 (Third-Party Services)
The App uses the following third-party services, and their respective privacy policies apply:
- Apple Inc.: Used for authentication via Apple Sign-In and for delivering push notifications (Apple Push Notification service)
- Google LLC: Used for authentication via Google Sign-In, for serving in-app advertisements (Google AdMob), for collecting crash reports (Firebase Crashlytics), and for analyzing app usage (Firebase Analytics)
- RevenueCat, Inc.: Used for billing and subscription management
The information sent to these services, the purposes of use, and how to stop transmission are described in "External Transmission of Information."
Article 4 (Push Notifications)
The App uses push notifications to inform users of new messages, successful matches, and likes on their posts. Device tokens are collected and stored for this purpose. Push notifications can be disabled at any time through device settings.
Likes on a user's posts are also shown in the notification list within the App. Users are not notified of likes from users they have blocked or who have blocked them.
Article 5 (Disclosure to Third Parties)
We do not provide collected personal information to third parties, except in the following cases:
- With the user's consent
- When required by law
- When necessary to protect a person's life, body, or property
Article 6 (Data Storage)
Collected information is managed on secure servers, and appropriate measures are taken to prevent unauthorized access, loss, and leakage.
Article 7 (Data Retention Period)
Registration information is retained while the account is active. After account deletion, chat history, profile information, and other data will be promptly deleted. However, information that is required to be retained by law is excluded.
Access logs recorded to ensure security and detect unauthorized access are retained for up to 30 days and then deleted. They may be retained until that period has elapsed even after the account is deleted.
Notifications of likes on a user's posts (including the name of the user who liked the post, a reference to the post, and an excerpt of the post's text) are retained for 30 days from when they are created and then automatically deleted. Once the post has expired, the excerpt of its text is no longer shown in the notification. If a like is withdrawn, the corresponding notification is deleted. When an account is deleted, notifications sent to that user and notifications sent to other users as a result of that user's likes are deleted.
In addition, public chat rooms and posts on the timeline are handled as follows:
- A public room automatically ends 24 hours after it is opened (the user who opened it may also end it earlier).
- Posts in an ended public room remain viewable by any user of the App for 7 days (or only by the user who opened it, if that user chose to make it private when ending it); after those 7 days no user can view them. The records are retained on our servers to the extent necessary to respond to reports, and are deleted when the account is deleted.
- A post on the timeline expires 7 days after it is posted and can no longer be viewed in the App. Expired posts are retained for a further 30 days so that we can respond to reports, and are then deleted.
Article 8 (User Rights)
Users may request disclosure, correction, or deletion of their personal information. The account deletion feature allows users to delete their registration information and chat history.
Article 9 (Age Restriction)
The App is intended for users aged 18 and older. We do not intentionally collect personal information from individuals under 18. If we become aware that a user under 18 has registered, we will delete the account and associated data.
Article 10 (Changes to This Policy)
We may modify this Policy as necessary. Users will be notified within the App of any significant changes.
Contact
For privacy-related inquiries, please contact us through the inquiry form within the App.