Terrapi Privacy Policy
Effective date: October 19, 2026
Operator and purposes
DOTNULL K.K. provides Terrapi, a virtual pet care app. The app handles information needed to save pet data, record focus time, provide optional step counting, optional app restrictions and widgets, and purchase and restore membership.
Information handled on your device
Pet names and progress, focus records and settings are stored on your device. Steps are read when you grant permission through the operating system and are used for walking progress. Step data is not sent to our servers.
App restrictions apply to the targets you authorise and select. On iOS, the app uses Screen Time; on Android, it uses permissions such as usage access and display over other apps. Selected targets and usage information are not used for advertising or tracking.
Pet images, names and status needed for widgets are shared locally between the main app and its extensions.
On iOS, Screen Time authorization is required to start a manual focus session. With your authorization, the app checks other-app use on your device, whether app restrictions are on or off, to determine whether focus can continue and whether growth and focus credit can be awarded. Information needed for this check and reasons for verification failures are stored on your device. App usage, selected targets and verification results are not sent to our servers or used for advertising or tracking. If verification is unavailable, that session ends without growth or focus credit.
Purchase information
Payments are made through Apple’s or Google’s store; we do not receive credit card numbers. We handle proof of purchase and transaction information supplied by the store to activate and restore purchases.
To verify purchases, restorations and entitlements, the app sends Apple-signed proof of purchase on iOS or Google Play purchase tokens on Android, together with product identifiers, to a verification server on Google Firebase / Google Cloud. The server queries Apple or Google for the current purchase status. We also use renewal and revocation notifications from the stores.
The server stores verification results, including an identifier for matching a purchase chain or purchase token after SHA-256 hashing, the product, purchase status, expiry date, free trial status and verification time. Raw proof of purchase, raw purchase tokens, pets, steps and focus history are not stored in this database. The verification database and server are located in the Tokyo region. Apple’s and Google’s handling of purchase information is also subject to their own terms.
To prevent access from unauthorised apps, we use Firebase App Check and either App Attest on iOS or Play Integrity on Android. These providers process information needed to verify app and device authenticity. Firebase SDKs may process technical information such as per-installation identifiers and app, device, operating system and SDK types and versions. This is used to verify authenticity, provide functionality, and maintain and improve SDK quality. This communication takes place when using purchase features or the review access described below. It is not used for advertising tracking.
Review access
On Android, an access code supplied to store reviewers is sent to the verification server. Only a valid code enables temporary use of membership features. No purchase or free trial is started. The code itself and the user’s account information are not saved in the purchase verification database; codes are checked against a hash stored on the server. As with normal purchase verification, app authenticity checks and operational communication logs are processed.
Retention periods
Purchase verification results are retained while the service is provided, to restore memberships, including one-time purchases, check purchase status, and prevent entitlements being incorrectly reactivated after refunds or expiry. Information that is no longer needed is deleted unless retention is required by law.
Purchase notifications from Google may contain purchase tokens. To ensure delivery, unprocessed notifications are temporarily retained for up to 24 hours by Google Cloud’s delivery service and retried on failure. This delivery retention is separate from the purchase verification database, which does not store raw purchase tokens.
Operational communication and processing logs include information such as IP addresses, the function called, access time and response result. Their standard retention period is 30 days. Mandatory audit logs, including logs of cloud administration operations, are retained for 400 days. Proof of purchase and purchase tokens are not written to the app’s processing logs.
Backups and sharing
If you export and share a backup, the file is sent to the app or service you select. Its handling is also subject to the recipient’s terms. Depending on your device settings, app data may also be included in backups provided by the operating system.
Permissions and data management
Permissions such as step counting and Screen Time can be changed in your device settings. Some features become unavailable if permissions are withdrawn. To delete local data, delete the app or use the operating system’s data deletion function, and separately check any exported backups and operating system backups.
Requesting deletion of server data
Contact terrapi@dotnull.co.jp about disclosure, correction, suspension of use or deletion of information we handle. For a deletion request, use the subject “Terrapi data deletion request” and state the store you use (Apple / Google) and the information you want deleted. The app has no user registration, and an email address alone cannot identify purchase verification results, so we will reply with the necessary verification steps. After verifying your identity and the information concerned, we will respond in accordance with applicable law. You do not need to attach passwords, credit card numbers, raw proof of purchase or purchase tokens to your initial enquiry.
Deleting purchase verification results is a separate procedure from cancelling subscriptions or requesting refunds through a store. We cannot delete purchase information held by Apple or Google. If you subsequently purchase or restore a purchase, new verification results may be stored to verify the store’s information.
Contact and changes
For enquiries about this Policy, contact terrapi@dotnull.co.jp. We handle your sender address and enquiry content to reply and carry out necessary checks. We update the public page when functionality or information handling changes.
Operator: DOTNULL K.K.