Privacy Policy(en)

Last Updated: August 20, 2026

Clink (hereinafter referred to as the "Operator") hereby establishes this Privacy Policy (hereinafter referred to as "this Policy") in order to appropriately handle the Personal Information and other information concerning persons who use "Plop" (hereinafter referred to as "the Service") (such persons hereinafter referred to as "Users") (such Personal Information and other information hereinafter referred to as "User Information").

1. Information Collected

In providing the Service, the Operator may collect the following information.
(1) Information Concerning the Account and the Individual
Nickname, email address, profile image, authentication identifier, age or age range, language, country/region, and other information registered by the User
(2) Information Relating to Dietary Habits and Health
Dietary preferences, ingredients to avoid, food allergies, and other information relating to dietary habits and health entered by the User
(3) Information Relating to Recipes and Use of AI
Recipe name, ingredients, quantities, cooking instructions, cooking time, Cooking Timeline, images, publication settings, save/viewing history, content input to the AI, AI-Generated Content, and its evaluation and revision history
(4) Location Information
Information relating to the country/region estimated from the IP address and other communication information
(5) Information Relating to Devices, Communications, and Usage Status
IP address, device identification information, advertising identifier, OS, device model, application version, language settings, cookies, local storage, access date and time, operation history, error logs, crash information, and security logs
(6) Information Relating to Purchases and Contracts
Contract plan, date and time of purchase, amount, currency, transaction identifier, subscription status, payment results, and other payment management information provided by Apple, Google, or Stripe. The Operator does not, however, directly collect credit card numbers, security codes, or other payment information managed by the payment service providers.
(7) Inquiry Information
Name, email address, content of the inquiry, attached files, response history, and other information necessary to respond to the inquiry
(8) Published Information
Published Recipes, nicknames, and other information the User has chosen to make public

2. Methods of Collection

The Operator collects information through input and submission by Users, information transmitted from devices, provision by payment service providers, authentication providers, and other business operators necessary for the provision of the Service, and through other lawful methods.

3. Purpose of Use

The Operator shall use the User Information it collects for the following purposes.
(1) To provide the Service, authenticate identity, manage accounts, and provide user support;
(2) To enable the creation, storage, organization, publication, and sharing of recipes, and to provide the Cooking Timeline;
(3) To provide recipes and other features tailored to a User's input content, region, season, dietary preferences, ingredients to avoid, allergy information, and other such information;
(4) To generate recipes, ingredients, quantities, cooking instructions, and Cooking Timelines by means of AI;
(5) To manage paid plans, support payments, billing, contract status, cancellation, and refunds;
(6) To respond to inquiries, complaints, exercise of rights, and disputes;
(7) To detect, investigate, and prevent unauthorized use, violations of the Terms of Use, infringement of rights, dangerous posts, and security threats;
(8) To analyze the usage status, failures, quality, and functionality of the Service, and to improve and develop the same;
(9) To provide notice of material changes, failures, security information, and other matters concerning the Service;
(10) To comply with requirements under laws and regulations, and to respond to requests from courts, administrative agencies, and other public authorities;
(11) For purposes incidental to the foregoing purposes.

4. Handling of Allergy Information, Etc.

  1. Allergy information and other User Information indicating health conditions may constitute Special Care-Required Personal Information under the Act on the Protection of Personal Information of Japan (APPI), or sensitive information or special categories of personal data under the laws of other jurisdictions.
  2. Input of allergy information is voluntary. The Operator shall clearly indicate the purpose of use on the input screen or elsewhere, and shall collect and use such information only after obtaining the consent required under applicable laws.
  3. Users may delete allergy information from the settings within the app. In addition, a User who wishes to withdraw consent may make a request to the contact point.
  4. Where a User inputs allergy information concerning a family member or other third party, the User must be lawfully authorized to provide such information, including by obtaining the necessary consent from such third party.

5. Published Information

  1. Recipes, nicknames, and other information that a User elects to make public may be viewed by an indefinite and unspecified number of persons on the Internet.
  2. Even after a User's withdrawal, Published Recipes may remain on the Service.
  3. Users should not include in Published Recipes their address, telephone number, email address, family health information, or any other information they do not wish to make public.

6. Outsourcing to External Business Operators and Third-Party Provision

  1. The Operator may outsource cloud, authentication, database, storage, AI, payment, notification, email, access analytics, failure analysis, inquiry management, and other operations to external business operators to the extent necessary for the provision of the Service.
  2. In selecting an outsourcing vendor, the Operator shall implement contractual measures, access controls, supervision, and other necessary and appropriate measures in accordance with the nature of the information handled and the risks involved.
  3. Except in the following cases, the Operator shall not provide Personal Data to third parties without the consent of the data subject.
    (1) Where based on laws and regulations
    (2) Where necessary for the protection of a person's life, body, or property, and it is difficult to obtain the consent of the data subject
    (3) Where particularly necessary for improving public health or promoting the sound development of children, and it is difficult to obtain the consent of the data subject
    (4) Where it is necessary to cooperate with a national or local government entity in the performance of affairs prescribed by laws and regulations, and obtaining consent is likely to impede the performance of such affairs
    (5) Where provided in connection with a business succession
    (6) Where otherwise permitted under applicable laws

7. External Services Used

In providing the Service, the Operator uses the following external services.
(1) Google Firebase (authentication, data management, access analytics, failure analysis, notifications, and other backend functions)
(2) RevenueCat (subscription management)
(3) Cloudflare (AI functions, bot countermeasures, and other backend functions)
(5) ClickUp (inquiries and bug reports)
(6) Resend (sending of authentication emails)
(7) Apple App Store (distribution of the iOS app, purchases, and subscription management)
(8) Google Play (distribution of the Android app, purchases, and subscription management)
(9) Stripe (payment processing and subscription management for the web version)

8. Handling in Foreign Countries and Cross-Border Transfer

  1. In providing the Service, the Operator uses cloud services, AI services, payment services, and other external services provided by business operators located in foreign countries. For this reason, Personal Data may be stored or processed outside Japan.
  2. Where the Operator handles Personal Data in a foreign country, the Operator shall take necessary measures in accordance with applicable laws.

9. External Transmission

In connection with the Service, the Operator may transmit information concerning Users to external business operators to the extent necessary for providing the Service, authentication, payment, notifications, failure analysis, security measures, and other matters necessary for its operation.

10. Retention Period

The Operator shall retain Personal Information only for the period necessary to achieve the purposes of use and for the period required to be retained under applicable laws and regulations, and shall thereafter handle such information by deletion, anonymization, or other appropriate means.

11. Security Control Measures

To prevent the leakage, loss, or damage of Personal Data and for other security control purposes, the Operator shall take necessary and appropriate measures, including the following.
(1) Establishing basic policies and handling procedures concerning the handling of Personal Data
(2) Access control, authentication, encryption, log management, and other technical measures
(3) Selection, contracting, and supervision of outsourcing vendors
(4) Establishing a reporting and communication system for cases where a leakage or similar incident occurs

12. Rights of Data Subjects and Request Procedures

  1. Users may, in accordance with applicable laws, request, with respect to Retained Personal Data concerning themselves, notice of the purpose of use, disclosure, disclosure of records of provision to third parties, correction, addition, deletion, suspension of use, erasure, or suspension of third-party provision.
  2. To make a request, please submit the desired content of the request, the account concerned, and the information necessary for identity verification through the inquiry form URL set forth in Article 1.
  3. The Operator shall verify the identity of the requester by reasonable means appropriate to the nature of the information handled, such as login to the account, confirmation to the registered email address, or other methods.
  4. In the case of a request made by an agent, the Operator may request the submission of materials confirming the agent's authority to act.
  5. Where applicable laws and regulations permit the Operator not to comply with a request, the Operator may decline to comply with all or part of such request. In such case, the Operator shall notify the requester of the reasons therefor to the extent required by applicable laws and regulations.
  6. Where the Operator charges a fee for notice of the purpose of use or disclosure, the Operator shall set a reasonable amount taking into account actual costs and shall publish such amount in advance.

13. Additional Provisions for Users in the EU, EEA, and the United Kingdom

  1. Scope of Application This Section shall apply where the EU General Data Protection Regulation (GDPR) or the UK GDPR applies.
  2. Controller The Controller of Personal Data is Su Jian-Wei. Contact details are set forth in Article 1 of this Policy.
  3. Legal Basis for Processing
    The Operator shall handle Personal Data based on any of the following legal bases.
    (1) Performance of a contract (account management, provision of the Service, payment processing, support, etc.)
    (2) Consent of the User (handling of allergy information and other information requiring consent, etc.)
    (3) Legitimate interests of the Operator or a third party (security measures, prevention of unauthorized use, quality improvement, failure analysis, and other matters relating to the proper operation of the Service)
    (4) Compliance with legal obligations
  4. Special Categories of Personal Data Where the Operator handles allergy information or other special categories of personal data, the Operator shall handle such data appropriately in accordance with applicable laws.
  5. Rights of Users Users may, in accordance with applicable laws, request access to, rectification of, and erasure of their Personal Data, restriction of processing, and data portability, and may object to processing and withdraw consent. Users may also lodge a complaint with a supervisory authority pursuant to applicable laws.
  6. Automated Decision-Making The Operator shall not engage in decision-making based solely on automated processing that produces legal effects concerning a User or similarly significantly affects the User.

14. Additional Provisions for California Users

  1. This Section shall apply where the California Consumer Privacy Act (CCPA/CPRA) applies. Regardless of its applicability, the Operator may respond to equivalent requests to a reasonable extent.
  2. The categories of Personal Information collected by the Operator are as set forth in Article 2 of this Policy.
  3. The sources of collection, purposes of use, and recipients of provision are as set forth in this Policy.
  4. The Operator does not sell Personal Information in exchange for money or other consideration.
  5. Rights under applicable laws include the rights to know, access, delete, and correct, as well as other similar rights.
  6. Requests may be made through the contact point set forth in this Policy.

15. Children's Privacy

  1. Minors shall use the Service only after obtaining the consent of a person with parental authority or other legal representative.
  2. If it becomes apparent that the Operator has collected Personal Information from a minor without the consent of a legal representative, the Operator shall take the necessary measures in accordance with applicable laws.

16. Amendment of this Policy

  1. The Operator may revise this Policy in response to changes in applicable laws and regulations, the content of the Service, or the handling of information.
  2. Where a material change is made, the Operator shall give notice thereof by display on the Service or by other appropriate means. In addition, for any change requiring the User's consent under applicable laws, the Operator shall obtain such consent anew.
  3. The most current version shall be posted in the menu within the Service or in another location where Users may check it at any time.

17. Inquiries and Complaints

For inquiries regarding this Policy, the handling of Personal Information, or the exercise of a User's rights, please contact the contact point set forth in the following Article.

18. Personal Information Handling Business Operator

Trade Name: Clink
Name: Su Jian-Wei
Address: ParkFront Hakata-Ekimae 1-chome 5F-B, 1-23-2 Hakata-Ekimae, Hakata-ku, Fukuoka-shi, Fukuoka, Japan
Contact Point: https://plop.onl/support
Telephone Number: The Operator shall disclose the telephone number without delay upon request.

Date of Enactment: August 20, 2026