Privacy Policy

Last updated: April 30, 2026

Tobari is a small shared board designed to sit quietly at the edge of everyday life. Tobari values being a quiet place to keep things, and keeps the information it handles to a minimum.

This policy explains plainly what Tobari collects, what it does not collect, and how collected information is handled.

1. Provider

2. What Tobari Values

  • Local first: Notes, drawings, and other content you create are stored on your device first.
  • Encrypted sharing: When you share with someone, content is encrypted on your device before it is sent to the server. The server cannot read the content.
  • Anonymous use: You do not need to provide an email address, phone number, or name to sign up.
  • No ads or tracking: Tobari does not use your data for behavioral analytics or advertising.
  • No push notifications: Tobari does not send push notifications to make you come back.

3. Information Handled

3.1 Information Stored on Your Device

Text, photos, drawings, board layout, and other things you create in Tobari are stored on your device.

Content that you have not shared is not sent to the server.

Account keys used for authentication and encryption are also stored only in the secure storage area on your device, such as Keychain.

3.2 Information Sent to the Server When Sharing

When you share a board with someone, the minimum information needed for syncing with participants is sent to the server.

  • Your randomly generated account ID
  • Public keys used for authentication and encryption with other participants
  • Encrypted posts, comments, images, and drawing data
  • Shared group metadata, such as invitations and join times

The server cannot read the contents of posts, comments, photos, or drawings.

They can only be decrypted on your device and the devices of members in the group.

3.3 Server Operation Logs

For abuse prevention and incident investigation, ordinary access logs such as access time and IP address may be stored on the server for a limited period.

These logs are not used to analyze your personal interests or behavior.

3.4 Information Tobari Does Not Collect

Tobari does not collect the following information.

  • Email address, phone number, name, or postal address
  • Location information, contacts, or access to your entire photo library
  • Advertising IDs or tracking IDs
  • Behavioral analytics, session duration, or browsing history

4. Purposes of Use

Collected information is used only for the following purposes.

  • Account authentication
  • Relaying and syncing data between group members
  • Maintaining service stability and preventing abuse

Tobari does not use information for advertising delivery or user profiling.

5. Sharing with Third Parties

Tobari does not sell or rent user information to third parties.

The following providers are used to operate the service.

  • Cloudflare (server, database, file storage)
  • Apple (App Store distribution and device-side security features)

These providers handle information only as needed to provide Tobari.

6. Notifications and Tracking

  • Tobari does not send push notifications.
  • Tobari does not send re-engagement notifications.
  • Tobari does not track you across apps or websites in a way covered by App Tracking Transparency.

7. Data Storage and Deletion

  • When you delete a post or comment, it will also be removed from shared members' devices as syncing proceeds.
  • If you want to delete your account, contact us through the form below with your account ID. We will delete your server-side information.
  • If you reset your device or uninstall the app, keys and data stored on that device will be lost. The app provides a recovery flow for taking over shared data.

8. Children

Tobari is not designed for children under the age of 13.

Because Tobari does not collect personal information during sign-up, it does not verify age.

9. Security

  • Shared content is encrypted on the device before it is sent.
  • Communication uses HTTPS.
  • Authentication is based on device keys, not passwords.

10. User Rights

Users may request disclosure, correction, or deletion of server-side data held by the provider.

Please contact us through the form below with your account ID.

11. Governing Law

The use of Tobari is governed by the laws of Japan.

12. Revisions

This policy may be revised as features are added or operations change.

Important changes will be announced in the app or by updating this page.

13. Contact