Privacy Policy
This Policy may be provided in other languages. If a translation differs from the English version, the English version prevails (Section 14).
CACTUS TOKYO Inc. ("we", "us") handles information about users of the voice input app "SayonaraType" and the website sayonaratype.com (together, the "Service") as described below.
1. Information we collect
| Information | When | Why |
|---|---|---|
| Email address | When you register or sign in, join a waitlist, or contact us | To send sign-in codes, confirm it is you, answer your inquiries, and send notices about the Service |
| A device identifier, your Mac's name, the language settings of your Mac and browser, and the app version | At sign-in and each time you use the Service | To manage how many Macs you use at the same time, to set the default language for the app and our notices, to count usage by language and by country or region, and to tell you when an update is available. For usage statistics, we estimate your country or region from your language settings, not from your IP address. The device identifier is a one-way value made from a value unique to your Mac; we never receive the unique value itself |
| Consent record | At sign-in | The date and time you agreed to the Terms and this Policy, and which version |
| Usage | Each time you use voice input | Audio length, number of characters or words, the speaking language, type of processing, number of uses, success or failure, date and time, and daily totals. Used to manage the free plan, show your usage in the app, detect use that does not match the plan, manage our costs, and understand demand by language. This does not include what you said or the text |
| IP address | At registration, sign-in, download, and when you use the app | To prevent mass registrations and sign-in attempts (kept only for the period in Section 6). We also use it to estimate your approximate country, to show whether the paid plan is offered in your region (we do not store the estimated country) |
| Payment status | When you subscribe to or cancel the paid plan (Pro) | The payment provider's customer ID and your subscription status. We never receive your card number |
| Website usage records | When you browse the website or download the app | Where you came from (for example, values attached to ad links), actions on the page, and the date, country, and app version of downloads. Used to measure and improve our advertising (Section 7) |
| Content of inquiries, problem reports, waitlists, surveys, and similar | When you send them | To reply, send notices, and improve the Service |
| Information attached to problem reports | When you report a problem from the app | The app's activity log (processing times, success or failure, error reasons, sound level, and similar; it does not include what you said, the text, or your dictionary words), the app and macOS versions, your Mac model, and a screenshot if you choose to add one. Used to investigate and fix problems |
| Referral program activity | When a referral link is used | To match the person who referred and the person referred, and to provide the benefit |
In addition, we may collect activity records, settings, and similar information as needed to provide and improve the Service and prevent misuse.
We do not store your recorded audio, its transcript, or the cleaned-up text. They pass through our servers for processing, but we do not keep them on our servers or in our logs. However, the providers that process them for us may keep them for a certain period under their own rules (Section 3).
2. How we use information
To provide the Service; to handle sign-in and confirm it is you; to manage the free plan and usage; to bill you; to answer inquiries; to send notices about the Service (how-to guides, new features, and campaigns — you can stop these emails at any time using the link in the email); to detect and prevent misuse (account sharing, mass registration, automated use, and similar); to measure the effect of ads and improve ad delivery; to improve the Service (limited to statistics such as usage); to run referral programs and campaigns; to ask you to take part in surveys or interviews; to create and publish statistics that cannot identify individuals; to respond to violations of the Terms or misuse; to comply with the law; and for purposes related to these. We do not use your audio or text to train AI.
3. Providers that process information for us, and what they keep
We use the following types of providers to process information for us. When you use voice input, your audio and text go through our servers (our hosting and delivery provider) to the speech recognition and text clean-up providers, and only the result comes back to your Mac. The speech recognition and text clean-up providers are based in the United States. How each provider handles information follows the terms and documents that provider publishes. We may replace a provider with another that does the same kind of processing under equivalent conditions.
| Type of provider (country) | Information we pass on | What the provider keeps | Use for AI training |
|---|---|---|---|
| Speech recognition (United States) | Audio, words in your dictionary | We delete the transcript right after processing. The audio and processing records may be kept for a certain period under the provider's rules | Our settings prevent the provider from using them to improve its models |
| Text clean-up (United States and others) | The transcribed text, as much of the text just before it as is needed for clean-up, your dictionary and knowledge, and the text and memory used by the Memory feature (Section 8) | The provider states that it does not store inputs or outputs | Not used (provider's terms) |
| Backup speech recognition and text clean-up (the processing country is not specified; mainly the United States) | The same information, only when the providers above cannot process it | Kept for a certain period under the provider's rules, to monitor for misuse | Not used (terms for the paid API) |
| Sign-in authentication (United States) | Email address, IP address, app information | Your email address and sign-in records are kept while you have an account. They may be used inside the provider to provide and improve its service | — |
| Email delivery (United States) | Email address, email content (sign-in codes, notices) | Sent emails and records are kept for a certain period under the provider's rules | Not used (provider's rules) |
| Hosting and delivery (United States, EU, and others) | All traffic passes through it, for our servers, database, website, and app downloads | We store only the information in Section 1 in the database (not audio or text). Automatic saving of server traffic logs is turned off | — |
| Operator alert service (United States) | Details of the problem, part of your account ID and a partly hidden email address (for example, ab***@example.com), and the number and type of inquiries or waitlist sign-ups (not their content or email addresses) | Under the provider's rules | — |
4. Sharing with a third party (payment provider)
For the paid plan, we use a payment provider (currently Stripe). The paid plan is currently available only to customers in Japan. We do not collect or keep your card information. Stripe processes payments for us, but Stripe also decides on its own purposes for fraud prevention, legal compliance, and analyzing and improving its own products (transaction and device information is used to train its fraud-prevention AI models). For this reason, we treat providing information to Stripe as "sharing with a third party", and ask for your consent when you sign up for the paid plan (on the payment screen).
| Recipient | Information shared | How the recipient uses and keeps it |
|---|---|---|
| Stripe Japan, Inc. (Japan), together with Stripe, LLC (United States), Stripe Technology Europe Ltd (Ireland), and other Stripe group companies | Email address, our account ID, billing address and card information (you enter both directly into Stripe on the payment screen; card information never reaches us), and transaction and device information | To provide payments, prevent fraud, comply with the law, and analyze and improve Stripe's products. Transaction records are generally kept for at least 5 years after the relationship ends or after the last transaction |
5. Providing information to third parties in other countries (Article 28 of Japan's Act on the Protection of Personal Information)
Many of the providers in Sections 3 and 4 are outside Japan, so your information is sent to other countries. We show you the information below and ask for your consent at sign-in (for Stripe, at payment).
5-1. Recipient countries and their personal information protection systems
| Country | Recipients | That country's system (summary) |
|---|---|---|
| United States | Speech recognition, text clean-up, sign-in authentication, email delivery, hosting and delivery, operator alert service, Stripe, LLC, and providers of advertising and measurement tools (Section 7, if installed) | There is no comprehensive federal privacy law. Privacy is governed by sector-specific federal laws (health, finance, children's information, and others) and state laws (such as the California Consumer Privacy Act). The Federal Trade Commission (FTC) enforces against unfair or deceptive practices |
| EU (Ireland, the Netherlands, and others) | Stripe Technology Europe Ltd, servers of the speech recognition provider (the Netherlands), hosting and delivery | The EU General Data Protection Regulation (GDPR) applies. The EU is recognized as having a level of protection for individuals' rights and interests equivalent to Japan's |
| Singapore | Servers of the speech recognition provider | Singapore has the Personal Data Protection Act (PDPA), supervised by the Personal Data Protection Commission |
| Countries that cannot be identified | Backup speech recognition and text clean-up, text clean-up | The providers do not specify where they process data, so the country cannot be identified (they say "countries where the provider or its agents have facilities" or "the United States and other countries"). The main candidate is the United States |
The summaries of each country's system are based on the survey "Systems for the Protection of Personal Information in Foreign Countries" published by Japan's Personal Information Protection Commission.
5-2. Measures taken by the recipients
| Recipient | Main measures (as published by each provider) |
|---|---|
| Speech recognition | Data processing agreement (DPA), SOC 2, EU-U.S. Data Privacy Framework certification |
| Text clean-up | SOC 2 Type 2, does not store inputs or outputs |
| Backup speech recognition and text clean-up | Data processing agreement (DPA) as a data processor, no training on data from the paid API |
| Sign-in authentication | Data processing agreement (DPA), SOC 2 Type 2 |
| Email delivery | Data processing agreement (DPA), SOC 2 Type II, EU-U.S. Data Privacy Framework |
| Hosting and delivery | Data processing agreement (DPA), ISO 27001, ISO 27701, SOC 2 Type II, Global CBPR certification |
| Stripe | PCI DSS (Service Provider Level 1), SOC 1, SOC 2 Type II |
| Operator alert service | Under the provider's rules |
5-3. If you use the Service from outside Japan
We are a company in Japan. If you use the Service from outside Japan, your information is transferred from your country to Japan, where we manage it, and to the United States and the other countries in Section 5-1, where our providers process it. Your audio and text are processed by the speech recognition and text clean-up providers based in the United States, and we do not store them on our servers (Section 1). The measures our providers take are described in Section 5-2.
6. How long we keep information
We keep information for as long as needed for the purposes of use. As a guide:
| Information | Approximate period |
|---|---|
| Account information (email address, device identifier, Mac name, language settings, payment status, consent record, IP address at registration) | While you have an account (deleted if you ask us to delete it) |
| Usage | Records for each use: about 90 days. Daily totals by language (number of characters or words, number of uses, audio length): while you have an account |
| Records of sign-ins and sent codes (including IP address) | About 1 month |
| Website usage records (where you came from, actions, downloads) | Date, type, source, country, and app version are kept for statistics. The value used to match a download with a registration (Section 7) is deleted after about 7 days |
| Waitlist | Until we have sent the notice (deleted if you ask to unsubscribe) |
| Content of inquiries and problem reports (including attached records and screenshots) | About 1 year after we finish handling them (deleted if you ask us to delete it) |
7. Measuring ads, and sending information to outside parties
To count which ad brought visitors to our website, and to improve ad delivery, we do the following:
- We save information attached to ad links (values starting with "utm" and ad click IDs) in your browser (localStorage) for 30 days, and send it to us when you download or register
- We send page actions (button clicks, page views, questions selected, and similar) to us, together with the date and where you came from
- Download records keep the date, source, country, and app version. We do not keep the IP address itself. We turn it into a one-way value (a hash) and keep it only for a short period, to estimate which source a registration in the app came from if one happens during that time
On our website, we may install measurement tags from the following companies, to measure ad results and improve ad delivery. When you open a page, an installed tag sends the page you viewed, the referrer, ad click IDs, your browser and device type, your IP address, and identifiers such as cookies directly to that company, without going through us. How each company uses this information follows its own privacy policy. The outside tags used on our website are only those listed in this section.
| Company | Purpose | Explanation and settings |
|---|---|---|
| Google LLC (Google Ads, Google Analytics) | Measuring ad results and improving delivery; counting page views | https://policies.google.com/technologies/partner-sites ・ Ad settings https://adssettings.google.com/ |
| Meta Platforms, Inc. (Meta Pixel) | Measuring ad results and improving delivery | https://www.facebook.com/privacy/policy/ |
| LY Corporation (Yahoo! JAPAN Ads) | Measuring ad results and improving delivery | https://www.lycorp.co.jp/en/company/privacypolicy/ |
| Microsoft Corporation (Microsoft Advertising) | Measuring ad results and improving delivery | https://privacy.microsoft.com/en-us/privacystatement |
| X Corp. (X Ads) | Measuring ad results and improving delivery | https://x.com/en/privacy |
| TikTok Pte. Ltd. (TikTok Ads) | Measuring ad results and improving delivery | https://www.tiktok.com/legal/page/row/privacy-policy/en |
You can refuse or delete cookies in your browser settings. Even if you refuse them, you can still browse the website and download the app.
8. Information stored on your Mac
To provide and improve its features, the app may store on your Mac your dictionary, settings, usage records, words taken from input fields, logs, and — depending on the features you turn on — what you said and information based on it. We do not store any of this on our servers (only the dictionary words, knowledge, and similar items needed for processing are sent, as described in Section 3). It is stored in your macOS user Library (the SayonaraType folders in Application Support and Logs), and you can delete it at any time (the dictionary and similar items from the app's screens; everything else by deleting the files in those folders). Logs are deleted automatically after a certain period.
- Words taken from input fields: When you correct text you entered, the app adds the corrected words to your dictionary. To do this, it may read, on your Mac, the text you selected or the contents of the input field, and compare it with the text it just entered. This comparison happens only on your Mac; the text is not sent anywhere, and only the extracted words are kept
- Memory (paid plan): This feature summarizes what it learns about you from what you say, and saves the summary on your Mac. It turns on automatically with the paid plan, and the app lets you know when it does. You can turn it off and delete it at any time from the app's screen. While it is on, the app temporarily collects your cleaned-up text on your Mac and sends it in batches to the text clean-up provider (Section 3) to create summaries. Our servers do not store the text or the memory. We may use the summaries when cleaning up your text in the future
- Speech history: So that you can copy text later (for example, if it was not entered), the app saves on your Mac the text you said in the last 24 hours. It is deleted automatically after 24 hours. For speech that could not be entered, the app keeps the audio only in the app's memory, for a short time, so it can try to turn it into text again (it is not saved to a file)
- Sign-in status: Stored in the macOS Keychain (not synced to iCloud)
If you turn on an integration, the app may export your dictionary and similar items on your Mac to an app or folder you choose. How they are handled there follows that app's or service's rules.
9. Security measures
- Organization and people: We limit who can handle personal data, and we have set procedures for handling it
- Technology: All communication is encrypted (TLS). API keys for outside providers are held only on our servers and are not included in the app. We do not use passwords; you sign in with a 6-digit code sent to your email. Our servers do not store audio or text, and do not keep them in logs
- Understanding the environment abroad: We use providers in the United States and other countries. We understand each country's personal information protection system, as described in Section 5, and we check each provider's measures before using it
10. Consent
In the app, you agree to this Policy (including the processing by providers in Section 3 and the provision to third parties in other countries in Section 5) by pressing "Agree to the Terms and Privacy Policy and continue" on the sign-in screen. You agree to the sharing with the payment provider (Section 4) on the payment screen for the paid plan.
11. Requests to access, correct, delete, or stop using your information
Please contact info@sayonaratype.com or use the contact form on our website. We will respond after confirming that you are the person concerned. You can ask us to:
- give you access to the personal data we hold about you (including records of sharing with third parties)
- correct it
- delete it
- stop using it, or stop sharing it with third parties (object)
You cannot delete your account from inside the app. Please ask us using the contact point above. When we receive a deletion request, we delete your account information and usage records in our database, your sign-in authentication account, and your customer information at the payment provider (any paid contract ends at that point). However, the payment provider keeps payment records that must be kept for legal or accounting reasons. Our database backups may still contain your data for up to 30 days after deletion, after which it is deleted automatically. We cannot delete information on your Mac (Section 8), so please delete it yourself.
12. Who we are and how to contact us
CACTUS TOKYO Inc. Keiji Kumagai, Representative Director 4-18-15-2-3F-3 Taishido, Setagaya-ku, Tokyo 154-0004, Japan Contact: info@sayonaratype.com
12-2. Business succession
If the Service's business is taken over by another company because of a merger, business transfer, or other reason, your information may be passed to that company (under Article 27(5)(ii) of Japan's Act on the Protection of Personal Information, this is not treated as providing information to a third party). In that case, the successor will handle your information within the scope of this Policy, and we will announce the succession on our website before it happens.
13. Changes to this Policy
If we change this Policy, we will announce it on this page, and the change applies from the time it is posted. Where the law requires your consent or a notice for a change, we will do it in that way.
14. Language
This Policy may be provided in other languages. If a translation differs from the English version, the English version prevails.
English version first published: October 23, 2026 (translated from the Japanese version established on October 12, 2026 and last revised on October 19, 2026, including the October 23, 2026 additions on usage records, with additions for users outside Japan)