Privacy Policy

1. Information We Collect

• Nickname
• Birth month and year (e.g., 2008-04; we do not collect the exact day)
• Country of origin
• Authentication information issued by Supabase Auth (identifiers, tokens, and minimal data needed for authentication, such as email address)
• Technical information (IP address, browser and device info, error logs in minimal scope)
• If you use the scan grading feature, images of your answer sheets and the results of reading them (see Section 5)

2. Purposes of Use

• Content optimization based on birth month/year and country to improve user experience
• Identity verification and authentication using Supabase Auth (login/session management)
• Account operation (basic settings, support, important notices)
• Safety and security (fraud prevention, incident response)
• Legal compliance (fulfilling legal obligations, protecting rights)

3. How We Obtain Information

• Information users enter and submit (nickname, birth month/year, country)
• Identifiers and tokens obtained via Supabase Auth
• Technical information automatically transmitted during communication

4. Cookies and Similar Technologies

We use only the minimum necessary cookies/storage for authentication and session maintenance (including Supabase Auth). We do not use third-party cookies for behavioral tracking or advertising at this time. We will update this policy if that changes.

5. Scan Grading (Reading Answer Sheets)

The Service includes a feature that photographs the answers you wrote on a printed worksheet and grades them automatically. The following applies only when you use that feature.

• What we obtain: the photographed image of the answer sheet. After the page is de-skewed in your browser, we store the corrected image in our storage (Cloudflare R2).
• What we send to an external AI: only the cropped images of the answer boxes, together with formatting hints for each box (expected number of characters, unit symbols, and whether it is a fraction). We do not send the whole page image, the name field image, any information identifying the worksheet, or the correct answers. Boxes are identified by anonymous sequential numbers unrelated to their content.
• Recipient: we entrust optical character recognition to Vertex AI (Gemini) on Google Cloud, processed in a United States region. Under that service's terms, the data we send is not used to train their generative AI models.
• Retention: corrected images are deleted automatically after 90 days. The results of the reading (recognized characters, correct/incorrect marks, timestamp, and which worksheet) are kept until you delete them.
• Purposes: displaying and keeping a history of grading results, and improving recognition accuracy. Corrections you make to misread values are used to improve accuracy.
• How to delete: you can delete each grading record individually, or delete them all at once from your dashboard. If you delete your account, all images and reading results are deleted.

6. Sharing with Third Parties

We do not provide personal information to third parties without your consent, except as required by law, to protect life or property, or when necessary to achieve the purposes described above through service providers.

7. Entrusted Processing and Joint Use

• We entrust authentication functions to Supabase (Supabase Inc.). Our processors implement appropriate security measures under our control. For Supabase privacy information, seehere.
• We entrust the storage of answer sheet images to Cloudflare (Cloudflare, Inc.) and the character recognition of answer boxes to Google Cloud (Google LLC). See their privacy information atCloudflare and Google.
• We do not conduct joint use at this time. If started, we will disclose scope, items, and controller.

8. International Transfers

Supabase servers are located in the Tokyo region (Japan). By contrast, Cloudflare, which stores answer sheet images, and Google Cloud, which performs character recognition, may process data outside your country (for example, in the United States). In every case we handle data with appropriate safeguards in accordance with applicable laws.

9. Retention

We retain information for as long as necessary to fulfill the purposes and delete or anonymize it when no longer needed. When you delete your account, we delete related data except where retention is required by law.

Images of answer sheets stored by scan grading are deleted automatically after 90 days, as described in Section 5.

10. Security Measures

We implement technical and organizational measures such as access control, least-privilege design, encryption in transit, and logging. We limit the data collected to the minimum necessary (e.g., birth is stored as year-month only).

11. Your Rights

You may request disclosure, correction, suspension of use, or deletion of your personal information. Please contact us at the address below. We will respond within a reasonable scope unless otherwise required by law.

12. Minors

Minors should use the service with the consent of a guardian.

13. Compliance

We comply with applicable privacy laws and guidelines. Where regional laws (e.g., GDPR) apply, we handle data in accordance with those laws to the extent applicable.

14. Changes to This Policy

We may update this Policy due to legal changes or service updates. For material changes, we will notify you in the service. The latest version will apply after updates.

15. Company and Contact

• Company: dig hacks, Inc.
• Contact: info@diglabo.com

16. Effective Date and Last Updated

Effective: 2025-10-16 / Last Updated: 2026-08-25