Privacy policy

We collect as little as we can. Most of our apps never send your data to us at all.

Last updated: 30 September 2026

1. Who we are and what this covers

This policy explains how Kiyari GK (合同会社きやり, “Kiyari”, “we”), a limited liability company headquartered in Tokyo, Japan, handles personal information in accordance with Japan’s Act on the Protection of Personal Information (個人情報の保護に関する法律).

It covers this website (kiyari-group.com), its contact form, and our apps Cellar Book, Recipe Book, Learn Japanese, Yuki and Gym Bot. AI Broker (aibrokerhq.com) has accounts and subscriptions and is covered by its own privacy policy.

2. This website

This website has no accounts, advertising, analytics or tracking cookies.

  • Hosting. The site is served by Cloudflare, which processes technical request data such as your IP address, browser type and the pages requested, in order to deliver the site and protect it from abuse.
  • Fonts. Pages load typefaces from Google Fonts, so Google receives your IP address and browser details when a page loads.

3. The contact form and email

When you write to us, through the form or by email to [email protected], we receive your name, email address, company (if given), the topic and your message.

  • Purpose. We use this only to read and reply to your enquiry, and to keep a record of the correspondence. We do not add you to a mailing list and do not sell or share it for marketing.
  • Spam protection. The form uses Cloudflare Turnstile, which evaluates signals from your browser to tell people from automated traffic.
  • Delivery and storage. Your message is delivered by Cloudflare Email Routing to our mailbox, which is hosted by Google Workspace.
  • Retention. We keep correspondence for as long as needed to handle your enquiry and any follow-up, and delete it when it is no longer needed.

4. Our apps

None of our apps has accounts, analytics, advertising, cookies or error reporting. They are hosted on GitHub Pages, whose servers log technical request data such as IP addresses. What each app does with your data:

Cellar Book

Your wine records and settings are stored in your browser’s local storage and your photos in its IndexedDB database, on your device only. To read a label, the app sends the photo directly from your browser to OpenAI or Anthropic using an API key you provide; we have no server in between and never see the photo or the key. Your key is stored on your device. The provider’s own terms and privacy policy apply to what you send it.

Recipe Book

Your recipes, shopping lists and meal plans are stored on your device only. The app sends nothing to us or to anyone else.

Learn Japanese

Your progress is stored on your device. Pages load fonts from Google Fonts. Pronunciation practice uses your microphone with your permission; the audio is processed on your device and is not uploaded. The optional deep pronunciation check downloads a speech model from Hugging Face.

Yuki

Your settings and lesson progress are stored on your device, including an OpenAI API key if you choose to remember it. During a conversation, your microphone audio is sent directly from your browser to OpenAI’s realtime service using your own key; it does not pass through our servers. Without a key, the app plays a recorded introduction and sends nothing. The app loads a speech-processing library from the jsDelivr CDN.

Gym Bot

Your workouts and training history are stored on your device. Backups are saved as a file you choose where to keep. Spoken coaching uses your device’s built-in speech synthesis. The app sends nothing to us or to anyone else.

Because this data lives on your device, clearing your browser’s site data or uninstalling an app deletes it, and we cannot recover it for you.

5. Service providers and processing outside Japan

We use the providers named above: Cloudflare (hosting, spam protection and email routing), Google (Workspace mailbox and Fonts), GitHub (app hosting), and, only when you choose to use your own key, OpenAI or Anthropic. These providers may process data in the United States and other countries outside Japan, where data protection rules may differ from Japan’s. We do not otherwise provide your personal information to third parties unless the law requires it.

6. Your requests

You may ask us to disclose, correct, add to, delete or stop using personal information we hold about you, or to disclose records of its provision to third parties. Send the request to [email protected]. We will confirm your identity and respond without undue delay, as the Act requires. For data held only on your device, you can delete it yourself at any time.

7. Security

We limit what we collect, keep contact correspondence in an access-controlled mailbox, serve every page over HTTPS, and take reasonable measures to prevent loss, misuse or unauthorised access.

8. Children

Our website and apps are not directed at children. A child should use the contact form only with a parent or guardian’s consent.

9. Changes

We will update this page when our practices change and revise the date at the top. Significant changes will also be noted on our news page.

10. Contact

Kiyari GK (合同会社きやり), Tokyo, Japan. Enquiries about this policy: [email protected].