Privacy Policy
Last updated: November 1, 2026
1. Our Core Privacy Philosophy
At Kiroku (accessible via kirokuapp.com and the Kiroku mobile apps), we believe your anime and manga tastes are personal. We do not sell your personal data, and we do not track your activity across third-party websites or services for advertising purposes.
2. Information We Collect
To provide our social anime tracking and Taste Match™ services, we collect minimal and necessary information:
- Account Information: When you register via email, Google, or Apple, we store your username, email address, password hash (encrypted using bcrypt), and optional bio/avatar selection.
- Anime & Manga Library Activity: Your watch/read status (e.g. Watching, Completed), episode progress, personal ratings (1–10), and custom curated lists.
- Taste Match™ Data: Algorithmic vectors derived from your ratings and favorite genres to calculate compatibility percentages with friends.
- Third-Party Integrations: If you connect MyAnimeList (MAL), we store your MAL username and OAuth access tokens encrypted with AES-256-GCM.
- Device & Crash Diagnostics: Anonymous diagnostic information (app version, crash stack traces) collected via Sentry to fix bugs and improve stability. No personally identifiable information (PII) is included in crash reports.
3. How We Use Your Information
We use the data we collect solely for the following operational purposes:
- To maintain your account, authenticate your sessions, and secure your profile.
- To synchronize your anime/manga progress across devices and with MyAnimeList.
- To compute community recommendations and Taste Match™ compatibility scores.
- To send essential transactional notifications (password resets, discussion replies, push notifications when followed).
- To enforce our Community Guidelines and protect users against harassment and abusive behavior.
4. No Third-Party Tracking & No Advertising
Kiroku does not display third-party behavioral advertisements. We do not use third-party analytics SDKs that track your activity across other applications or websites. Under Apple's App Tracking Transparency (ATT) framework, Kiroku does not track users.
5. Public Profile Privacy
By default, other registered users can view your public profile (username, avatar, rank tier, badges, public lists, and anime scores). However, your private email address, real name, and authentication tokens are strictly private and are never exposed via our public API endpoints.
6. Account & Data Deletion Guarantee (Apple 5.1.1(v))
You have full control over your data. In full compliance with Apple App Store Review Guidelines:
Immediate Self-Serve Account Deletion:
You can permanently delete your account and all associated personal data directly within the Kiroku mobile app by opening Settings → Account → Delete account.
Upon confirming deletion:
- Your personal identification records (email, username, name, avatar) are permanently anonymized/purged.
- If you signed in with Apple, our servers invoke Apple's token revocation API (
/auth/revoke) to sever all authorization links. - Your MAL tokens, device push notification tokens, and follower connections are permanently removed.
7. Data Retention & Security
All data transmission between the mobile application and our servers is secured via HTTPS/TLS 1.3 encryption. Passwords and sensitive external tokens are encrypted using industry-standard hashing and AES-256-GCM encryption.
8. Children's Privacy
Kiroku is rated 16+ on the App Store due to anime/manga themes and community interaction. We do not knowingly collect personal information from children under the age of 13. If we discover that a child under 13 has provided personal data, we will immediately delete that account.
9. Contact Us
If you have any questions, requests, or privacy concerns regarding this policy, please reach out to our privacy officer at:
support@kirokuapp.com