KANIYONIKA Privacy Policy

Effective date: October 21, 2026.

1. Operator and scope

KANIYONIKA is the trade name of a sole proprietor operating in Japan. In this policy, “we,” “us,” and “our” refer to that proprietor. We handle personal information in accordance with applicable law and the rules of the distribution and advertising services we use.

This policy applies across the apps, games, websites, Lumopi-branded services, and related inquiries provided or handled by KANIYONIKA. Where applicable law or the rules of the distribution and advertising services we use require additional information about a feature, we provide it before you use that feature. That information supplements this policy for the relevant processing.

For privacy inquiries and requests, contact ks.develox+contact@gmail.com. We review inquiries concerning the operator and respond to the extent and in the manner required by applicable law.

2. Information we handle and why

The information processed depends on the features you use and the settings you choose. We handle the following information to the extent needed for the corresponding purposes. This includes information processed or stored only on your device without being sent to us or an external provider.

If we begin sending marketing emails, we will send them only to people who have separately opted in. We do not use an inquiry email address for marketing without that consent. Each marketing email will include a way to unsubscribe.

Age assurance information: In services that use age assurance, we use age ranges, sharing or verification status, and parental restrictions provided by Apple or Google Play, or an age range derived from your on-device answers, to protect minors and apply the corresponding restrictions on advertising and data use. We do not receive your date of birth from Apple or Google Play age APIs. When needed, you may be asked to enter your date of birth to determine an age range on your device. The date you enter is processed temporarily on your device only; it is not stored or sent to us or external providers. We store the necessary age range, protection state, and response on your device. We do not send the age range itself as an analytics event or user property, or use it for age-based advertising targeting. We provide advertising and consent-management providers with protection settings, such as child or teen treatment and an indication that a user is below the age of consent. Providing or sharing an age range does not constitute consent to advertising or analytics.

3. Cookies, advertising, and analytics

We use cookies, browser and app storage, SDKs, and similar technologies to remember settings and consent choices, operate services, display advertising, and analyze usage. We distinguish processing needed to operate a service from advertising and analytics processing. Where applicable law or the rules of the distribution and advertising services we use require consent, we obtain it before that processing begins.

We obtain consent and handle its withdrawal in accordance with applicable law and the rules of the distribution and advertising services we use. You can change or withdraw consent through the privacy settings or other controls explained when consent is requested. Withdrawal does not affect lawful processing before withdrawal. If you cannot find the relevant controls, contact us using the address in Section 1.

If you decline personalized advertising, non-personalized ads may still appear depending on your choices and regional requirements. Information may still be processed to deliver those ads and prevent fraud. The applicable consent interface, privacy settings, or related notices identify the advertising providers involved and explain your choices.

In apps with a usage-data setting, you can turn it off to stop collection for our usage analytics. This setting alone does not stop all processing by advertising providers or delete information already sent.

4. External providers and international processing

We use external providers for service delivery and storage, advertising, analytics, notifications, payments, and email support. They handle information needed for their respective roles. Principal services used according to the relevant features, with links to their privacy information, include:

For external providers’ handling of information, we verify safeguards required by applicable law and the rules of the distribution and advertising services we use through providers’ contractual terms, public documentation, available settings, and similar means, and take the required steps. Where those laws or rules require it, we also verify that providers offer protection equal to or greater than that stated in this policy. Where we entrust personal data processing to a provider, we exercise the necessary and appropriate oversight required by applicable law. Where a provider processes information under its own responsibility and for its own purposes, its privacy policy also applies.

We may also disclose information with your consent, where required by law, or where legally permitted and necessary to protect life, physical safety, or rights. We do not sell inquiry contact lists or give them to other companies for those companies’ own marketing.

Information may be processed in Japan, the United States, and other countries where providers have operations or facilities. For international transfers, we take measures appropriate to the transfer under applicable law, such as obtaining required consent, assessing the destination’s level of protection, or using contractual safeguards. You can contact us using Section 1 for details of applicable safeguards and how to obtain information about them.

In apps that link AdMob with Google Analytics for Firebase, measurement information, including usage and advertising revenue, is exchanged between these services for advertising measurement, service improvement, and monetization analysis. We do not send age ranges obtained by the app as analytics events or user properties for this linkage.

5. Retention and deletion

We retain information under our control according to the following criteria for as long as needed for its purposes or required by law. When retention is no longer necessary, we delete the information, make it no longer personally identifiable, or take other action in accordance with applicable law.

Where a legal duty or a specific dispute requires longer retention, we limit the information and period to what is necessary. Information that external providers retain under their own responsibility is also subject to their retention and deletion policies.

6. Your choices and requests

You can delete or restrict cookies and site data through browser settings. Device settings let you change permissions for the microphone, notifications, tracking, and similar features. Some related features may become unavailable as a result.

Deleting information on your device does not necessarily delete information already sent to a server. You may request access, a copy, correction, deletion, cessation of use, withdrawal of consent, or similar action concerning information we control under applicable law or the rules of the distribution services we use. Contact us using Section 1 and identify the relevant service and your request.

Depending on applicable law, you may also have rights to restrict processing, data portability, and complain to a supervisory authority. We carry out any necessary identity verification and respond to the extent, in the manner, and within the deadlines required by applicable law and rules. Information requested for identity verification is limited to what is necessary. Where legal conditions or exceptions prevent us from fulfilling all or part of a request, we provide the reasons and information about appeal or similar options required by law.

Objecting to processing: Under applicable law, you may object to processing based on legitimate interests on grounds relating to your particular situation. You may unsubscribe from marketing emails at any time. Where you object to processing for direct marketing under applicable law, we stop using your information for that purpose. Contact us using Section 1.

Where data disclosure for advertising constitutes a “sale,” “sharing,” or “targeted advertising” under the law applicable to you, we honor opt-out rights as required by that law. Use the relevant privacy settings or the contact in Section 1. Where legally required, we also honor valid opt-out signals such as Global Privacy Control. We do not subject you to treatment prohibited by law for exercising your rights.

7. Children’s information

We recognize that children and users whose ages are unknown may use general-audience services. For services directed to children, we provide the information and safeguards required by applicable law and the rules of the distribution and advertising services we use, according to the intended age group and data practices.

Where parental consent is legally required for collecting or using information, we obtain it first. If we learn that we collected a child’s information without required consent, we investigate and take necessary action, including deletion where appropriate. Parents or guardians may contact us using Section 1 about access, deletion, or related concerns.

8. Legal bases

Where the GDPR or similar laws require a legal basis, we use the following bases according to the purpose:

If information necessary for a feature is not provided, we may be unable to provide that feature. We do not automatically substitute another legal basis for processing that requires consent.

9. Protecting information

We take the security measures required by applicable law according to the nature of the information, the scale of our business, and the risks, including access restrictions, protection of communications, system updates, and oversight of providers. If a data breach or similar incident occurs, we investigate, respond, and notify affected individuals and authorities as required by applicable law.

10. Changes to this policy

We update this policy when data practices, legal requirements, or other relevant circumstances change and publish the current text and effective date on this page. We provide notice of changes when and in the manner required by applicable law or the rules of the distribution and advertising services we use. Where fresh consent is required, we obtain it.