EcorisMap

Privacy Policy

ECORIS Inc. (hereinafter referred to as the "Company") establishes this Privacy Policy (hereinafter referred to as the "Policy") regarding the handling of user information, including personal information, in the service "EcorisMap" provided by the Company (hereinafter referred to as the "Service").

1. User Information Collected and Collection Methods

In this Policy, "user information" means information related to the identification of users, behavioral history on communication services, and other information generated or accumulated in relation to users or users' devices, which the Company collects pursuant to this Policy. The user information collected by the Company in the Service is as follows, depending on the method of collection.

  1. Information provided by users

    Information provided by users in order to use the Service or through the use of the Service is as follows.

    • Email address and display name when registering an account
    • Survey data (location information, attribute information, photos, etc.) transmitted when using the project sharing features. This data is encrypted with end-to-end encryption and stored on the Company's servers, and the Company cannot view its contents. Photos may contain Exif information such as the date and time and the location where they were taken.
    • Project-related information such as project names
  2. Information collected by the Company when users use the Service

    The Company may collect information about access to and usage of the Service. This includes the following information.

    • Referrer
    • IP address
    • Server access log information
    • Cookies, app instance IDs, and other identifiers (advertising identifiers (ADID/IDFA) are not collected)

2. Purposes of Use

The specific purposes of use of user information related to the provision of the Service are as follows.

  1. To provide, maintain, protect, and improve the Service, including accepting registrations, verifying identity, authenticating users, and recording user settings
  2. To measure user traffic and behavior
  3. To provide information about the Service and respond to inquiries
  4. To respond to acts that violate the Company's terms, policies, and the like regarding the Service (hereinafter referred to as the "Terms, etc.")
  5. To notify users of changes to the Terms, etc. regarding the Service
  6. To prevent unauthorized use of the Service and ensure its security

3. Handling of Location Information

The Service uses the device's location information to display the current location on the map, record location data, record track logs, and the like. In principle, location information is processed and stored only within the user's device and is not transmitted to the Company's servers. However, only when using the data upload function of the project sharing features or the location sharing function, location information is encrypted and shared with project members via the Company's servers.

While a track log is being recorded, the Service acquires location information even when the app is not displayed on the screen (in the background). This is to record the route travelled during a survey without interruption, and a notification is displayed on the device while recording. Acquiring location information in the background requires the user's permission, which can be revoked at any time from the device's OS settings. Location information acquired in the background is also, in principle, stored only within the device, as described above.

4. Third-Party Services and Data Transmission

The Service uses third-party services that may collect user information in order to provide better services. Please refer to the linked pages for the privacy policies of the third-party providers.

Use of Google Analytics

The Service uses Google Analytics (Google Analytics for Firebase in the app) provided by Google LLC to understand service usage and improve quality. Google Analytics uses cookies or app identifiers (app instance IDs) to collect usage information (pages/screens viewed, usage time, device type, approximate region based on IP address, etc.) in a form that does not identify individuals. Advertising identifiers (ADID/IDFA) are not collected. The collected information is managed in accordance with Google's privacy policy.

Use of Firebase (Google LLC)

The account features and project sharing features of the Service use Firebase (Authentication, Cloud Firestore, Cloud Storage, etc.) provided by Google LLC. Authentication information such as the email address at account registration, and data transmitted through the project sharing features, are stored on Firebase servers. Survey data transmitted through the project sharing features is encrypted with end-to-end encryption, and neither the Company nor Google LLC can view its contents. However, metadata such as email addresses, display names, and project names is stored unencrypted to the extent necessary to provide the Service. This data is stored on servers located in a region within Japan (asia-northeast1).

Use of App Check (reCAPTCHA, etc.)

The Service uses Firebase App Check provided by Google LLC to prevent unauthorized access to the Company's servers. It verifies that access originates from a legitimate app or website using reCAPTCHA v3 on the web version, App Attest on iOS, and Play Integrity on Android. For this verification, information about the device or browser and about user interactions is transmitted to Google LLC and processed in accordance with Google's privacy policy and terms of service. This information is not used for any purpose other than detecting unauthorized use.

Voice Input

When using the voice input feature of the Service, the entered audio is converted to text by the speech recognition function provided by the device's operating system. Depending on its specifications, the audio data may be transmitted to and processed on the servers of the provider of that operating system (Apple Inc. or Google LLC). The Company does not collect or store audio data. If the voice input feature is not used, the microphone is not used.

Saving to Google Drive

When using the Google Drive save function of the Service, the saved data is stored only in the Google Drive of the user's own Google account and is not transmitted to or stored on the Company's servers. The Service can only access files created by the Service on Google Drive (using the "drive.file" scope of the Google Drive API). Since the management of saved data depends on the management of the user's own Google account, please pay close attention to managing your account credentials (password, two-factor authentication) and sharing settings on Google Drive.

5. Provision of Information to Third Parties

The Company will not provide personal information among user information to third parties (including those located outside Japan) without the prior consent of the user. However, this does not apply in the following cases where provision to third parties (including those located outside Japan) is necessary.

  1. When the Company entrusts all or part of the handling of personal information to the extent necessary to achieve the purposes of use
  2. When personal information is provided in connection with business succession due to merger or other reasons
  3. When it is necessary to cooperate with a national agency, a local government, or a person entrusted by either of them in executing affairs prescribed by laws and regulations, and obtaining the user's consent is likely to impede the execution of such affairs
  4. In other cases permitted by the Act on the Protection of Personal Information (hereinafter referred to as the "Personal Information Protection Act") and other laws and regulations

6. Disclosure, Correction, and Deletion of Personal Information

When the Company is requested by a user to disclose, correct, or delete personal information pursuant to the provisions of the Personal Information Protection Act, the Company will respond without delay after confirming that the request is from the user in person. However, this does not apply when the Company is not obligated to disclose, correct, or delete under the Personal Information Protection Act or other laws and regulations. Users can also delete their account and related data on the Company's servers by themselves using the account deletion function in the app. For the deletion procedure and the scope of information that is removed, see Account Deletion.

7. Contact Information

For opinions, questions, complaints, and other inquiries regarding the handling of user information, please contact us at the following.

5-3-21 Nakada, Taihaku-ku, Sendai, 981-1104, Japan
ECORIS Inc.
Contact: map@ecoris.co.jp

8. Procedures for Changing the Privacy Policy

The Company will change this Policy as necessary. However, in the case of changes to this Policy that require the consent of users under laws and regulations, the revised Policy shall apply only to users who have consented to the changes in the manner specified by the Company. When changing this Policy, the Company will announce the effective date and content of the revised Policy by displaying it on the Company's website or by other appropriate means, or notify users.

Established: August 10, 2022

Revised: July 13, 2026

Revised: July 18, 2026

Revised: August 1, 2026