Privacy Policy

Introduction

This policy explains how Kunio Ozawa ("we") handles information about you in Helico, a Bluesky client app (the "App"), and on the website helico.oza.works (the "Site").

1. Who we are

• Operator: Kunio Ozawa (individual)
• Contact: support@oza.works

2. Your Bluesky data

Your posts, messages, and account data are exchanged directly between the App and Bluesky and do not pass through our servers, except as described in Section 3. Bluesky's privacy policy applies to that data. Your sign-in credentials are stored only on your device and are never sent to us.

3. What we handle and why

Usage analytics — To improve the App, we send Mixpanel a per-device identifier, records of in-app activity (including the names of feeds you view and hashtags you tap), device information, your approximate location estimated from your IP address, and your subscription status. This does not include your Bluesky account or the text of your posts. The data is deleted when the retention period set in our Mixpanel plan expires. You can turn this off in the App under Settings > Privacy.

Crash and error reports — To fix bugs, we send Sentry technical and device information when a problem occurs. Reports are deleted 30 days after receipt. You can turn this off in the App under Settings > Privacy.

Push notifications (Premium) — If you turn on push notifications, we register your Bluesky DID, your device’s notification token, your notification settings, and the number that identifies your Premium purchase on our server. We use them to create notifications from public Bluesky information and send them through Apple Push Notification service (APNs), and to check your Premium expiration date with Apple. We do not store notification content. We delete your registration when you turn notifications off, sign out, or your Premium expires, or 30 days after the registration was last renewed. Records kept to prevent duplicate notifications are deleted after 7 days.

Chat notifications (Premium) — If you turn on chat notifications (optional; you can turn them off at any time in Settings), the app sends our server an authentication token that expires after 60 minutes and can only be used to read new chat messages. Our server uses this token to fetch new messages addressed to you (message text and the sender's name and avatar) from Bluesky's chat service and delivers them to your device as notifications through Apple Push Notification service (APNs). We do not store message contents; they are discarded once the notification is sent. Tokens stop working when they expire and are deleted from our server about 24 hours after we receive them.

Visiting the Site — We use Cloudflare Web Analytics to count visits. No cookies are used.

Contacting us — We use your message and email address only to respond to you.

Operational logs kept to investigate failures, which may include DIDs, are deleted when each service's retention period expires.

4. Service providers and international transfers

We do not sell your information or share it for advertising, and the App does not track you across other companies’ apps or websites. Except as required by law, we provide personal information only to the following service providers:

• Mixpanel, Inc. (United States) — analytics
• Functional Software, Inc. (Sentry; a US company, data stored in Germany) — crash and error reports
• Cloudflare, Inc. (a US company; data stored in various countries, including in the Asia-Pacific region) — Site delivery and analytics, push notification registrations
• Google LLC (Google Cloud, United States) — sending notifications
• Apple Inc. (United States) — delivering notifications, verifying purchases

We use these providers after confirming that each has put in place a system that meets the standards set by the Personal Information Protection Commission of Japan. On request, we will provide information about those systems and the data protection laws of the countries involved.

5. Security

We encrypt connections, keep only the information we need, automatically delete data after its retention period, and limit who can access it. Details are available on request.

6. Your rights

You can turn off analytics, crash and error reports, and push notifications at any time in the App's settings. You may request access to, deletion of, or suspension of the use of personal information we hold that is linked to your Bluesky account (such as push notification registrations) by contacting us at the address in Section 1. We will verify your identity through a message from the Bluesky account concerned and respond without delay, free of charge. Analytics and error reports are recorded under per-device identifiers that we cannot link to you, so we cannot act on individual requests for that data; you can stop sending it at any time in the App's settings.

If you live in the European Economic Area, the United Kingdom, or Switzerland, you also have the rights to data portability and to object to processing, and you may lodge a complaint with the data protection authority in your country. Our legal basis is performance of a contract for notification features and Premium checks, and our legitimate interest in improving the App for analytics and error reports.

7. Other

• The App is not intended for children under 13 and restricts use when a user is determined to be under 13.
• We do not change our behavior in response to browser Do Not Track signals.
• We may update this policy as needed and will post it on this page with its effective date.