This is an English translation of our Privacy Policy, provided for your convenience. The Japanese version is the authoritative text; in the event of any discrepancy between this English version and the Japanese version, the Japanese version shall prevail.

SpicaGF (the "App") respects your privacy and is committed to protecting your personal information. This policy explains what information the App collects and how it is handled. This policy forms part of the App's Terms of Service.

1. Operator

The business handling personal information in the App is as follows.

• Operator: SpicaGF
• Contact: support@spicagf.app
• Operator's name, address, and other details: provided without delay through the contact point in Section 13 upon a request for disclosure.

2. Information We Collect

The App collects the following information.

• Account information: your email address (when you register with email/password), or your display name and email address from your Google account (when you sign in with Google).
• Data you enter: content you create or edit in the App, such as tasks, events, priorities, notes, and repeat settings.
• App settings: device-local settings related to display and behavior (theme, layout, etc.).
• Billing and purchase information: purchases of paid plans and the status of your subscription. Payment details such as credit card numbers are handled by the app store (Apple / Google) or the payment provider; the App does not retain them.
• Technical information: connection logs and similar technical information generated and recorded on the underlying infrastructure to provide and maintain the service. In addition, the advertising SDK (Google AdMob) used to show ads on the free plan may generate and collect diagnostic information such as crash and performance data, to maintain ad delivery and diagnose problems.

3. Purposes of Use

We use the collected information within the scope of the following purposes.

• Authenticating you and maintaining your signed-in state.
• Storing, syncing, and displaying your data such as tasks.
• Providing paid plans and managing billing.
• Responding to inquiries and providing support.
• Preventing misuse and maintaining and improving the service.

If we change a purpose of use, we will do so within a scope reasonably related to the purpose before the change, and we will give notice within the App.

4. Provision to Third Parties, Subcontractors, and External Services

The App uses Google Firebase (Authentication / Cloud Firestore) as the infrastructure for authentication and data storage, and RevenueCat, Inc. to manage the purchase and subscription status of paid plans, each as a subcontractor (processor). These providers handle the information in accordance with the App's instructions.

Paid plans are offered through in-app purchases on the App Store and Google Play. Payment is processed by Apple or Google under their respective privacy policies, and the App does not collect payment details such as credit card numbers. The App receives purchase and subscription status information from these stores.

On the free plan, the App may display advertising through Google's ad delivery service (Google AdMob). Ads are limited to non-personalized advertising (advertising that is not based on profiling of your interests); the App does not perform behavioral targeting based on your activity history. For ad delivery, fraud prevention, frequency capping, and similar purposes, Google may obtain information such as your IP address, coarse location, and device-related information, and Google's privacy policy applies to that handling. Ads are not shown to subscribers of a paid plan.

The App exercises necessary and appropriate supervision over these subcontractors to ensure the secure management of personal data. Except as required by law, the App does not sell or provide your personal information to third parties without your consent.

5. Cross-Border Transfer of Personal Data

Data you create or edit in the App (tasks, events, notes, etc.) is stored within Japan. Meanwhile, information related to authentication (Firebase Authentication; e.g., email addresses), information related to the purchase and subscription status of paid plans (including RevenueCat, Inc.), and information related to the delivery of ads shown on the free plan (including Google / AdMob) may be stored and processed outside Japan (including in the United States) by Google, Apple, and other providers.

For such overseas transfers, we rely on the fact that the recipient providers maintain systems conforming to the standards under Japan's Act on the Protection of Personal Information, and we take the measures necessary to ensure that those providers continuously implement appropriate protective measures. Information about the personal-data protection regimes in the destination countries and the protective measures the recipients take is available upon request through the contact point in Section 13.

6. Security Measures

The App takes the following measures to prevent leakage, loss, or damage of the personal information it collects, and for other secure management.

• Organizational and personnel measures: access to personal data is limited to the App's operator, and responsibility for its handling is clearly defined.
• Physical and technical measures: communications are encrypted (HTTPS), and access control is applied so that data can be accessed only from the authenticated account of the individual (read/write by that person only). The App uses infrastructure managed by Google.
• Understanding of the external environment: data you create is stored within Japan. Some information related to authentication and billing may be processed outside Japan, including in the United States, and we implement security measures with an understanding of the personal-data protection regimes of those countries.

7. Data Retention and Deletion

Data is retained while your account is active. You can delete your account and stored data (tasks, repeat settings, etc.) at any time from "Settings → Support → Delete account" in the App. Once deletion is performed, your authentication account and related data are deleted in a form that cannot be restored. We also accept deletion requests through the contact point in Section 13.

Technical information such as connection logs and data contained in backups are erased within 30 days after deletion is performed, in accordance with the storage cycle of the system. If there is information whose retention is required by law, we retain it until the applicable period has elapsed.

8. Responding to Requests for Disclosure and Similar

You may request, with respect to your own personal data held by the App, notification of the purpose of use, disclosure (including disclosure of records of provision to third parties), correction, addition, or deletion, suspension of use or erasure, and suspension of provision to third parties.

• How to request: please contact the point in Section 13.
• Identity verification: to prevent impersonation, we verify your identity by means such as contact from your registered email address.
• Response: we respond without delay in accordance with the law.
• Fee: for requests for notification of the purpose of use and for disclosure, a fee equivalent to actual costs applies.

You can view and edit your data at any time from within the App. Data export (CSV export) is also supported (some features may be paid).

9. Special Care-Required Personal Information

The App does not intend to collect special care-required personal information (sensitive information such as health or medical history). Whether you enter such information into free-text fields such as tasks or notes is at your own discretion.

10. Use by Minors

If a minor uses the App, they shall agree to this policy after obtaining the consent of a person with parental authority or another legal representative.

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will promptly delete it.

11. Use of On-Device Storage

The App uses on-device storage to maintain your signed-in state, to cache data for offline use, and to store device-local settings (theme, layout, etc.). These are for the purpose of providing the App's functions, and are not used for third-party tracking for behavioral targeting based on your activity history (ads shown on the free plan are limited to non-personalized advertising).

12. Changes to This Policy

We may revise this policy as necessary. If there is a material change, we will give notice within the App.

13. Complaints and Contact

For inquiries or complaints regarding this policy or the handling of personal information, please contact support@spicagf.app. You may also file a report with the Personal Information Protection Commission of Japan regarding the handling of personal information.

14. Your California Privacy Rights (CCPA/CPRA)

This section applies to residents of the State of California, USA. The categories of personal information we collect are described in Section 2, and the purposes of use in Section 3. We do not "sell" or "share" personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA); ads shown on the free plan are limited to non-personalized advertising and are not shared for cross-context behavioral advertising. California residents have the right to request access to, deletion of, and correction of the personal information we have collected, and the right to opt out of the sale or sharing of personal information (we do not sell or share). To exercise these rights, please contact us at the point in Section 13. We will not discriminate against you for exercising your rights.

Effective date: June 17, 2026

Last updated: July 25, 2026