Privacy Policy

Last updated: July 13, 2026

Callirrhoe Inc. (hereinafter “we,” “us,” or “our”) establishes this Privacy Policy (the “Policy”) regarding the handling of personal information in the mobile application “Hanabi Bloom” (the “App”) as follows.

1. Information We Collect

1.1 Information Stored on Your Device

The App stores gameplay data on your device, including game progress, reached stages, owned fireworks, coins, and various settings. Except for information transmitted through online features (see 1.2 below), this information is not sent to our servers or those of any third party.

The App also includes features that capture screenshots during gameplay and save them on your device, as well as a feature that optionally saves captured images to your device’s photo library (camera roll). These images are stored on your device and are not transmitted to our servers.

1.2 Information Collected and Processed Through Online Features (Ranking, Friends, Versus)

The App provides online features such as unified rankings, friends, and friend battles. In connection with these features, the following information is processed and stored through Unity Technologies’ Unity Gaming Services (“UGS”). No account registration (such as an email address) is required, and you are identified by an anonymous ID. If you optionally sign in (link) with a Google or Apple account, that account’s identifier is processed for authentication purposes.

• Anonymous authentication ID (an identifier issued by UGS; not linked to your name or email address)
• Linked account identifier (only if you sign in with Google / Apple)
• Player display name (default is “Guest + number”; can be changed optionally. It is shown to other users in ranking and friend features)
• Scores and ranking records
• Friend relationships and friend request information
• Friend battle records (opponent, win/loss, score)
• Records of fireworks obtained in the game (which fireworks you have unlocked; used for popularity aggregation)

These are used to provide ranking displays, friend features, and versus features, and to aggregate popular fireworks as a service improvement. We do not collect directly identifying information such as your name, email address, or phone number through online features. Records of obtained fireworks are also aggregated into totals showing which fireworks are chosen most often; these totals are stored in a form not linked to individual users and cannot identify you personally.

1.3 Information Automatically Collected Through Advertising

The App serves advertisements via Google AdMob. In connection with this, the following information may be automatically collected and processed.

• Device information (OS, device model, language settings)
• Advertising identifier (Android Advertising ID / IDFA)
• IP address
• Information about ad display and interaction

1.4 Information You Provide

• Profile display name (set optionally within the App. Stored in UGS for online features and shown to other users in rankings and friends)
• Your name, email address, and content when you contact us
• In-app purchase and subscription information (purchase processing is handled by Google / Apple)

1.5 Information We Do Not Collect

The App does not collect the following information.

• Contacts (address book)
• Location information (GPS)
• Camera images / microphone audio (the App does not take photos or record audio)
• Health / fitness data
• Name, email address, phone number (except when you voluntarily provide them when contacting us)

2. How We Use Information

• To provide and operate the App’s services
• To provide online features such as ranking, friends, and versus
• To improve features and develop new ones
• To detect and fix issues
• To respond to user support
• To prevent fraudulent activity (such as illegitimate scores)
• To serve advertisements and measure their effectiveness
• To respond as required by law

3. Sharing with Third Parties

We do not provide collected personal information to third parties except in the following cases. To the extent necessary for online features and advertising, we may entrust data processing to (or process data through) the service providers listed in Section 4.

• When the user has given consent
• When required by law
• When necessary to protect a person’s life, body, or property
• When particularly necessary for improving public health or promoting the sound development of children
• When necessary to cooperate with a government agency carrying out duties prescribed by law

In the ranking feature, the player display name and score you set are made public to other users of the App.

4. Third-Party Services We Use

The App uses the following services. They may collect and process information based on their own privacy policies.

4.1 Unity Gaming Services (Online Features: Ranking, Friends, Versus)

Provider: Unity Technologies
Purpose: Anonymous authentication (optional Google / Apple linking), unified rankings, friends, friend battles
Information processed: Anonymous authentication ID, linked account identifier, player display name, scores, friend relationships, battle records, records of fireworks obtained in the game
Privacy Policy: https://unity.com/legal/privacy-policy

4.2 Google AdMob (Advertising)

Information collected: Advertising ID, device information, IP address, ad viewing history
Privacy Policy: https://policies.google.com/privacy

4.3 Google Play / Apple App Store

Purpose: App distribution, in-app purchase and subscription processing, account linking (sign-in)
Please refer to each company’s privacy policy.

5. Advertising

The App serves advertisements through Google AdMob. The ads served may be personalized based on the user’s interests. Note that if you subscribe to the monthly membership, no ads are displayed within the App.

5.1 Ad Personalization Settings

If you wish to stop personalized advertising, you can change your settings using the following methods.

• Android: Settings → Google → Ads → “Opt out of Ads Personalization”
• iOS: Settings → Privacy & Security → Tracking

5.2 Ad Consent for EU Users (GDPR Compliance)

If you use the App from within the EU, the Google User Messaging Platform (UMP) will display a consent screen for personalized advertising. Even if you do not consent, you can continue to use the App, and non-personalized ads will be displayed.

5.3 Rewarded Ads

The App provides rewarded ads that allow you to earn rewards (such as coins, continuing a game, or recovering lives) by voluntarily watching them. Viewing is entirely optional.

6. Your Rights

You have the following rights regarding your personal information.

• Right to request disclosure
• Right to request correction, addition, or deletion
• Right to request suspension of use
• Right to request suspension of third-party provision
• Right to data portability (for users to whom GDPR applies)

6.1 How to Delete Your Data

The App’s data is stored both on your device (game progress, display name, settings, etc.) and on UGS for online features (authentication ID, player display name, scores, ranking records, friends, battle records). You can delete it using the following methods. For details, please also refer to the dedicated page Account and Data Deletion.

Method A (Delete within the App: on-device + online):

• Tap “Settings” → “Delete Account / Data” in the App
• When you confirm and execute deletion, in addition to the on-device game data (player display name, progress, scores, owned coins, settings, captured images in the in-app gallery, etc.), we delete, to the extent technically possible, your data on the servers we manage (UGS). Specifically, we delete your authentication account (anonymous, or the Google / Apple linked identifier and player display name) and the cloud-saved data associated with that account (progress/settings sync data, friend battle and battle inbox records, purchase/entitlement information, etc.). Images that you yourself have exported to your device’s photo library (camera roll) remain undeleted, as they belong to you
• Regarding ranking scores and friend relationships: When your authentication account is deleted by this operation, the scores recorded in the ranking and your player ID remaining in other users’ friend lists become information that cannot identify you personally (pseudonymized records with the player ID detached). These are deleted in accordance with UGS’s retention policy and our periodic cleanup (such as the automatic deletion described in “9. Data Retention” below)

Method B (Delete via device operation):

• Uninstalling the App, or running “Settings → Apps → Hanabi Bloom → Storage → Clear data” on your device, deletes the on-device data
• However, this operation alone does not delete the online data on UGS. If you also wish to delete online data, please use Method A above or Method C below. Note that an unlinked (anonymous) account cannot be restored once the App is uninstalled

Method C (Request deletion from us): To prevent third parties from deleting accounts through impersonation, we only accept requests when identity can be verified.

• If linked with a Google or Apple account: Please send an email from the linked email address to privacy@hanabibloom.com with the subject “Data Deletion Request.” Since identity is verified by the linked email, providing your player ID or display name is optional. Please note that we cannot perform deletion based solely on a player ID or display name, as identity cannot be verified
• If not linked (anonymous): Since there is no way to verify your identity from outside the App, we cannot accept deletion via the email channel (to prevent impersonated deletion by third parties). Please delete the data yourself using Method A (in-app) or Method B (device side) above. Even if you cannot delete it while unlinked, records remaining on the server are automatically deleted if there is no access for 365 days or more from the last login (see “9. Data Retention” below)
• For linked accounts, including deletion of any name, email address, and inquiry content we have received, we will verify your identity and delete the data within 30 days of receipt, then notify you of completion

Regarding information stored on other users’ side: Due to the nature of the friend and versus features, information stored on other users’ devices/accounts, such as records of battle challenges and results you sent to other users before deletion, may not be deleted by your own deletion operation. This is pseudonymized information that does not include names, contact details, etc., and is deleted in accordance with each data’s retention period and our periodic cleanup.

However, data subject to a statutory retention obligation (such as transaction records) will be deleted after the applicable retention period has elapsed. For details, please refer to “9. Data Retention.”

7. Children’s Privacy

7.1 Children Under 13 (COPPA Compliance)

The App is not primarily intended for children under 13. We do not intentionally collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will promptly delete such information.

7.2 Children Under 16 (GDPR Compliance)

Users within the EU who are under 16 should use the App with the consent of a parent or guardian.

8. iOS App Tracking Transparency

On devices running iOS 14.5 or later, in accordance with Apple’s App Tracking Transparency (ATT) framework, the App requests permission regarding user tracking.

• If you select “Allow Tracking”: personalized ads will be displayed
• If you select “Ask App Not to Track”: non-personalized ads will be displayed

You can change this setting at any time from “Settings” → “Privacy & Security” → “Tracking” on iOS.

9. Data Retention

We retain personal information to the extent necessary to achieve the purposes of use, and promptly delete data that is no longer needed. The main data retention periods are as follows.

In addition, for server operation optimization and privacy protection (preventing retention of unnecessary data), we may automatically delete all data on the server (progress, friend relationships, etc.) without prior notice for anonymous (guest) accounts that have never made a purchase and are not linked to an external account (Google / Apple, etc.) if there is no access for 365 days or more from the last login. Accounts with a past purchase history are excluded from this automatic deletion in order to protect assets (deletion requests by the account holder are still accepted).

10. International Data Transfers

The third-party services used by the App (Unity Gaming Services, Google AdMob, etc.) operate globally, and collected information may be processed and stored on servers outside Japan (including the United States). These services take appropriate data protection measures in accordance with the laws of each country and region. For an overview of the personal information protection systems of each country and region, please refer to the website of the Personal Information Protection Commission (https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/).

11. Changes to This Policy

We may change this Policy as necessary due to changes in laws, changes in service content, or other reasons. If there are significant changes, we will notify you in advance within the App or on our website.

12. Governing Law and Jurisdiction

The interpretation and application of this Policy shall be governed by Japanese law. In the event of a dispute between us and a user in connection with this Policy or the App, the Sapporo District Court shall be the court of exclusive agreed jurisdiction for the first instance.

13. Contact Us

For questions about this Policy or inquiries regarding the handling of personal information, please contact us at the following.

privacy@hanabibloom.com

* For general support and bug reports, please contact us via “Settings → Contact” within the App.

Complaints regarding the handling of personal information may also be filed with the Personal Information Protection Commission (Phone: +81-3-6457-9849).