ODAYA
Privacy
ODAYA handles only the information needed for family coordination.
Information we handle
Member and care-recipient names or nicknames; account identifiers; plans, ownership, completion records, handoffs, and help requests; family-entered medication and appointment information; contacts; private family messages; documents and images; expenses and reimbursement state; and purchase state. ODAYA does not make diagnostic or medication decisions.
Authentication
We use Apple, LINE, or email identity and session information to sign people in and control access. An email received from Apple is used only for account display on the device and is not stored on ODAYA's server. Email sign-in uses an HMAC of the normalized address as its identity; the raw address is encrypted only during the short-lived verification challenge.
Assignment and due notifications
Notifications start off. Only if you choose them, ODAYA sends notices about a new responsibility or an approaching timed item through iPhone notifications, LINE, or a verified notification email. Device push tokens, LINE identifiers, and notification email addresses are linked to your account and retained as encrypted values with hashes used for matching. Notification text never includes family names, care content, medication information, or exact times. ODAYA shares only the minimum delivery information with Apple, LINE, and Cloudflare Email Service. You can remove notification endpoints in Settings, and they are also deleted with your account.
Storage and sharing
Care data is encrypted per circle and uses Cloudflare placement in the Asia-Pacific region plus an on-device cache. This is not end-to-end encryption, and service operations or subprocessors may process data outside Japan. Only approved circle members can access care data, and invitation URLs contain no family or care-recipient information.
Product analytics and necessary cookies
Native usage analytics are off by default. Only if you choose to share them in Settings does PostHog's EU region receive allowlisted coarse action and performance events plus language. We never send names, free text, attachments, care content, database IDs, or exact care times, and you can withdraw sharing at any time. The public site uses no advertising or analytics cookies. Cloudflare and the hosting platform may set cookies needed for bot protection, load balancing, and access security, such as __cf_bm, cf_clearance, and __Host-appgarden-visitor. Cloudflare Web Analytics measures public-page views, referrers, country and device categories, and performance without cookies or browser storage; it discards the source IP address received with the request rather than storing it. For PostHog's cookieless public-site measurement, the connection IP address, fixed public hostname, and browser user agent are used temporarily to create a rotating anonymous hash; the IP address and raw user agent are removed before storage. Neither public-site analytics service loads when Do Not Track is enabled, and protected /app/ routes are excluded.
Choices and deletion
Settings lets you remove notification endpoints, stop usage sharing, leave a circle, revoke sharing, or delete your account. Ordinary private family messages expire after 90 days. The Data deletion page explains the deletion scope and the Apple-managed relationships that must be managed separately.
Contact
For privacy questions, contact support@odaya.app. APPI and worldwide legal review remain required before public release.