Privacy Policy

Last updated: August 28, 2026 · Effective: August 28, 2026

Akihabara Company (sole proprietor: Yuki Dobashi; "we", "us") operates the mobile application ChekySite (the "App"). This policy explains what information the App handles, where it is stored, and how you can remove it.

Summary
① The App requests read-only access to your Google data. It never writes or modifies anything.
② All data stays on your device. We operate no server and receive none of your data.
③ We never use your data for advertising and never sell or transfer it to third parties.

1. Who we are

Business name	Akihabara Company Operating its web design business under the trade name SAITO (彩灯). The domain saito-tokyo.jp, where this policy is hosted, is owned and operated by us.
Representative	Yuki Dobashi
Address	Espoir 602, 3-16-14 Sotokanda, Chiyoda-ku, Tokyo, Japan
Contact	info@saito-tokyo.jp

2. Google user data the App accesses

When and only when you sign in with Google and grant consent, the App reads data through the following OAuth scopes. All requested scopes are read-only. The App never requests write, edit, or delete permissions.

Scope	Data read	Why it is needed
`https://www.googleapis.com/auth/analytics.readonly`	Your Google Analytics 4 account and property list, and aggregated report metrics: users, new vs. returning users, page views by page, traffic sources, country / region / city, device category, and realtime active user counts.	To display your website's traffic inside the App. Without this scope the App cannot list your GA4 properties or show any traffic figures. A narrower scope does not exist — this is the only read-only scope Google offers for the Analytics Data and Admin APIs.
`https://www.googleapis.com/auth/webmasters.readonly`	Your list of verified sites in Google Search Console, and Search Analytics data: query, page, country, device, impressions, clicks, CTR, and average position.	To display how your site is found in Google Search and how that changes over time. This is the read-only alternative to `webmasters`; we deliberately request the narrower read-only scope.
`openid`, `email`	Your email address and account identifier.	To show which Google account is currently connected on the App's settings screen.

The App does not access any other Google service — no Gmail, Drive, Contacts, Calendar, or Photos.

3. Data stored on your device

Item	Where	Purpose
Your Google sign-in state	Held on-device by Google's own sign-in components (Android: Google Play services; iOS: the Google Sign-In SDK). The App does not store tokens itself.	So you do not have to sign in again every time you open the App
Selected site, language, and display preferences	App storage on the device	To restore your view on the next launch
Short-lived cache of API responses	App storage on the device	To avoid exhausting Google API quota when switching screens, and to keep the App fast. Entries expire automatically within minutes to hours.

We operate no backend server. The App calls Google's APIs directly from your device and renders the response on screen. Your analytics data, search data, and OAuth tokens are never transmitted to, or stored on, any infrastructure controlled by us.

4. What we do not collect

Any information identifying individual visitors to your website — the App provides no tracking tag of its own.
Your name, postal address, phone number, date of birth, or payment information.
Device contacts, photos, precise location, microphone, or camera.
Advertising identifiers (IDFA / Android Advertising ID). The App shows no ads and performs no tracking.

5. Limited Use disclosure

ChekySite's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we do not:

Use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
Sell or transfer Google user data to third parties such as advertising platforms, data brokers, or information resellers.
Use Google user data for any purpose other than displaying it to you within the App's user-facing features.
Allow humans to read Google user data, except: (a) with your affirmative agreement for specific data, for example while troubleshooting an issue you reported; (b) where necessary for security purposes such as investigating abuse; or (c) to comply with applicable law.

The App does not send Google user data to any external AI or machine-learning service. If such a feature is ever introduced, this policy will be updated in advance and the feature will operate only with your explicit, separate consent.

6. Sharing and disclosure

We do not share, sell, rent, or disclose your Google user data to any third party, and we use no sub-processors for it. The only network destinations the App contacts are Google's own API endpoints. The App contains no third-party analytics SDK, advertising SDK, or crash-reporting service.

7. Retention

Sign-in state — held by Google's on-device sign-in components until you sign out or disconnect your account.
Cached API responses — expire automatically within minutes to hours, and are cleared entirely on sign-out.
Preferences — retained until you delete the App.

All of the above exist only on your device. We hold no copy of your data to retain or delete.

8. How to revoke access and delete your data

8-1. From inside the App

Open Settings → Disconnect account. The App will:

Send a token revocation request to Google;
Have Google's on-device sign-in components discard the authorization;
Delete all cached data and saved preferences.

After this, no ChekySite data remains on the device.

8-2. From your Google Account

You can revoke ChekySite's access at any time from Google Account → Third-party apps & services.

8-3. By deleting the App

Deleting the App removes its on-device storage. We recommend also performing step 8-1 or 8-2 so that the authorization is revoked on Google's side as well.

9. Security

Sign-in uses Google's official sign-in components (Android: the Credential Manager provided by Google Play services; iOS: the Google Sign-In SDK). Google presents the sign-in screen; the App never sees your password.
No client secret or other credential is embedded in the App binary. On Android, Google verifies the App by its package name and signing-certificate fingerprint.
OAuth tokens are held and managed on-device by those Google components. The App does not persist them itself; it requests a token from Google each time one is needed.
All scopes requested are read-only. The App cannot write to, modify, or delete any Google data.
All communication with Google is encrypted in transit using HTTPS/TLS.

10. International transfers

We do not collect your data onto our own infrastructure. Network requests travel directly between your device and Google's servers. For information about Google's processing and server locations, see the Google Privacy Policy.

11. Children

The App is intended for website owners and operators and is not directed to children under 16. We do not knowingly collect information from children under 16.

12. Your rights (GDPR / UK GDPR / CCPA-CPRA)

You may request access to, correction of, restriction of, or deletion of your personal data. Because we retain no personal data on our side, you can exercise deletion yourself and immediately using the steps in section 8.

We do not sell or share personal information as those terms are defined under the CCPA/CPRA. For any question about your rights, contact us at the address below.

13. Changes to this policy

We may update this policy to reflect changes in the App or in applicable law. Material changes will be posted on this page with a new effective date and announced inside the App.

14. Contact

Akihabara Company — Yuki Dobashi
info@saito-tokyo.jp