Privacy Policy

Last updated: 2026-09-19

This policy explains how NEVELL Inc. (“we”) handles information in the app “myupuri” (the “Service”).

1. What we collect

We collect the information below. We do not collect your location (GPS or similar).

Account information: the identifier from the Apple / Google / LINE account you signed in with, your email address, nickname, icon (emoji and colour, or a profile photo), date of birth, invite code, and who invited you
Photos and videos you shoot: strip images and individual shots (each as the original and a thumbnail), and the video recorded during the shoot (with sound if you allowed the microphone). See “2. Storing your photos and videos”
Profile photo (if you set one): a photo you take with the camera or pick from your photo library, cropped around the centre and reduced in size
Notification information: the device token used to deliver push notifications (notifications start switched on and your device asks for permission; you can turn them off in the app at any time)
Country, time zone and language: the country estimated from your device’s time zone and region settings, your time zone and your language (saved with your account)
Usage records: sign-in times, app version, device model, error logs
Inquiries: the email address, name and message you enter in the contact form (in the app or on this website). When you send it from the app, we also receive the app version, device model, OS version and your account ID
Purchase information: in-app purchase receipts (we never receive your card number)
Point information: records of points added and used (when, and what for)
Photos and requests for AI edits: when you use AI edit, the photo and what you ask for (a template or your own words). The photo is sent through our servers to an image-generation AI service and is not kept on our servers. We record the request and its time to check for misuse and to answer inquiries

2. Storing your photos and videos

Photos and videos are saved on your phone and on the phone of the person you shot with. The phones exchange them directly, on the spot, over Bluetooth or the local network.

We also store them on our servers, linked to your own account, as a backup. Each participant’s app uploads its own copy to that participant’s own account.

What we store: for each shoot, the strip image (original and thumbnail), the individual shots (up to 8, each as original and thumbnail) and one video
Where: on Amazon Web Services cloud infrastructure managed by us
Why: as a backup, and to restore your photos and videos when you change phones or reinstall the app
Who can see them: only the account holder. They are not shown to other users, not published, and not used for advertising or to train AI.
How we handle them: only as needed to run the Service (storing, creating thumbnails, restoring and deleting) and to act under the law or our terms
How long: until you delete them or delete your account
Deleting: when you delete a photo or an album in the app, the copy on our servers is deleted too (if you are offline, it is deleted automatically later). When you delete your account, all photos and videos on our servers are deleted.
The other person’s copy: the other person’s app stores their own copy in their own account. Deleting your photos or your account does not delete their copy.

3. How we use it

to provide the Service (sign-in, invites, storing and restoring your photos and videos, albums, seasonal designs, points and paid features, AI edits);
to show your icon, including your profile photo, to the people you shoot with;
to deliver announcements and push notifications (including choosing which in-app announcements and campaigns to show based on your estimated country, time zone and language);
to prevent misuse and to check age;
to answer your enquiries;
to improve quality (investigating problems from usage records);
to deal with breaches of our terms and to comply with the law.

4. Sharing and outsourcing

We do not share your information with third parties without your consent, except where the law requires it.

Where needed to run the Service, we may entrust the handling of information to outside service providers. We choose them carefully and supervise them as required. The main companies involved in the Service are:

Storage and email (service provider): Amazon Web Services (the servers where we store photos and videos, and sending verification-code and inquiry confirmation emails)
Sign-in: Apple, Google, LINE (we send tokens to verify your sign-in)
Push notifications: Apple, Google (to deliver notifications, we send the notification token and the notification content to their notification services)
Distribution and payments: Apple, Google
AI edits (service provider outside Japan): OpenAI (USA). Only when you use AI edit, and after you agree in the app, we send the photo and your request. OpenAI does not use this data to train its AI (it keeps it for up to 30 days to check for misuse)
Transfers to a third party outside Japan: the AI edit service is in the United States. The United States has no comprehensive national data protection law equivalent to Japan’s Act on the Protection of Personal Information (there are state laws). Contact us to learn about the measures the recipient takes to protect personal data

5. How long we keep it

We keep account information until you delete your account.
We keep your photos and videos until you delete them or delete your account.
We keep inquiries for as long as we need them to respond, including to follow-up questions about the same matter.
We keep records of points added and used as transaction records for as long as needed, even after the points expire.
We do not keep AI edit photos. We keep the record of what was requested and when for as long as needed.
When you delete your account, we first delete all photos and videos stored on our servers, and then erase your name, email address, nickname, date of birth, sign-in identifiers and similar information. Your profile photo is also removed from your account and is no longer shown.
Records we are required by law to keep are kept for the period the law requires.

6. Deleting your data

You can delete your account at any time from “Me” → delete account. See Deleting your account.

When you delete a photo or an album in the app, the copy on our servers is deleted as well. If you are offline, it is deleted automatically once you are connected again.

If you signed in with Apple, we also revoke the Apple token when you delete your account.

7. Children

The Service is not for people under 13. If we learn that we hold information about someone under 13, we delete it promptly.

8. Security

All communication with our servers is encrypted (HTTPS).
Information such as email addresses is stored encrypted in our database.
Photos and videos on our servers are managed so that only the account holder can retrieve them, and they are never placed anywhere public.
Between phones, photos travel directly from device to device, and only between the phones connected together at that moment.

9. Changes

If we change this policy we will announce it in the app or on this page.

10. Contact

For questions about personal data, including requests to disclose, correct or delete it, use the contact form.

This English text is a reference translation. The legally binding version is the Japanese one; if the two differ, the Japanese version prevails.

Operator: NEVELL Inc. ／ Contact: Contact form