Privacy Policy

In short: Perk Patrol stores which card products you own, not your card numbers — it never asks for one and has nowhere to put one. There is no analytics, no crash reporting and no advertising in the app, and it asks your phone for no permission except internet access. You can delete your account and your cards from inside the app; deleting the assistant's record of your conversations is a request to us for now, and the section below says which is which.

Perk Patrol is not released yet, so nobody’s data is being processed under this policy today. It is published now because it describes how the app will handle your data when it is, and because the App Store and Google Play require a permanent address for it before review.

Who is responsible

The data controller is Hiroyuki Momoi, an individual trading as TOKIWAYA. TOKIWAYA is a trade name, not a separate company — if you exercise a right described below, you are dealing with a person.

Contact: support@tokiwaya.dev.

What Perk Patrol collects

Your account. You sign in with an email address and password, or with Google. That gives us your email address, the identifier Google provides if you use Google sign-in, and an internal account identifier. It is used to sign you in and to keep your data yours.

The cards you add. For each card you add, Perk Patrol stores the card product you picked from its catalogue — the product, not an account — along with an optional nickname you may type, and the times the entry was created and changed. Only you can read or change this; it is enforced by the database’s own rules, not only by the app. A copy is kept on your device, so your cards are there without a network.

Your conversations. What you ask the assistant, and what it answers, is stored so you can come back to it.

What Perk Patrol never collects

It never asks for or reads your card number, expiry date, security code, or any banking credential. There is no field for one and no connection to a bank or card issuer that could supply one. The one thing to know: the nickname is free text, so please do not type anything sensitive into it — it is a label for you, not a place for card details.

Beyond that, the app contains:

On Android, the only permission the app declares is internet access. On iOS it asks for none.

What the assistant is told

When Perk Patrol answers a question, the assistant is given your messages in that conversation and the list of card products you own — and nothing else about you. Earlier turns are sent again each time, so the assistant can follow what you are talking about; please do not type anything into a conversation that you would not want sent to it. Your nickname for a card is never sent. Your identity is never put into the request the assistant reads — it travels separately, as an identifier derived from your account rather than the account itself. The assistant is not told who you are.

Who else is involved

Google, as a processor, runs the services Perk Patrol is built on: sign-in, the database your cards are stored in, and the cloud services that run the assistant. Your data is not sold, and it is not shared with anyone for advertising or marketing.

Deleting your account and your data

From inside the app, you can delete your account. That removes the cards you added, the copy held on your device, and your sign-in account. If the first step cannot reach the server, nothing is deleted at all. If a later step does not complete, the app tells you which part did not, rather than reporting plain success.

It does not yet remove the assistant’s server-side record of your conversations. The mechanism to delete those exists, but the app does not call it yet, so today that step is manual: write to support@tokiwaya.dev and we will delete them. When the app does it for you, this page will say so instead. We would rather tell you this than let you assume it.

Two things no deletion removes, and it is fair that you know which:

How long data is kept

Apart from the two exceptions above, your data is kept until you delete it. Perk Patrol does not promise a retention schedule, because no schedule has been decided — and publishing a number that nothing enforces would be worse than saying so.

Your rights

You can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, ask us to stop or limit how we use it, or object to a particular use — by writing to support@tokiwaya.dev. Deleting from inside the app is the fastest route for the parts it covers.

We process your data because you asked us to: it is what the app needs in order to hold your cards and answer your questions. We also keep server logs, which we need to run the service and keep it secure. There is no advertising or profiling use.

If you are in the EEA or the UK and believe we have handled your data badly, you can complain to your national data-protection authority. In Japan, the Personal Information Protection Commission fills that role.

Where your data is. Perk Patrol runs on Google Cloud, so your data may be stored and processed outside Japan and outside the EEA, including in the United States. Google’s standard contractual clauses cover that transfer; write to the address above for a copy.

Children. Perk Patrol is for adults with credit cards and is not directed at children.

This website. These pages set no cookies, run no analytics, and load nothing from a third party. Our host records a log of requests, as any web server does.

Recommendations are not advice

Which card Perk Patrol recommends is never influenced by referral or affiliate revenue, and Perk Patrol is not financial advice. Both are explained on the home page.

Changes

If this policy changes, the date below changes with it. Material changes will be announced in the app rather than only here.

Effective 21 September 2026.