This policy describes how TRADE CENTER, K.K. ("the operator") handles personal information and usage data in the iOS, Android, and macOS application BijaVault ("the app").
Registered address: 3-12-8 Otemon, Chuo-ku, Fukuoka 810-0074, Japan
Contact: info@bija-vault.com
Notes you write in the app are saved as plain Markdown files in the app's own storage. You can open those files from the Files app, so your writing remains available to you even if you stop using the app.
The app does not store your notes on a server. Apart from the AI processing described below, note content never leaves your device.
The Android app is the exception: if you sign in there, your notes are stored on the server for sync (see "Differences in the Android app" below).
You can use the app without signing in. Signing in is required only for the AI features described below. You can sign in with an email address and password, or with Sign in with Apple.
For an account, the operator keeps your email address, a value derived from your password for verification (the password itself is not kept), an account identifier created by the operator's server, and sign-in records. To prevent misuse, sign-in records include the IP address you connected from and your device type (User-Agent). If you sign in with Apple, your email address may be an Apple relay address. Your name is not collected. Sign-in records are kept until you sign out or delete your account.
Your email address is used only for signing in and for sending address-confirmation and password-reset emails. It is not used for advertising or marketing.
The app can determine a note's type, title, description, and tags and write them into the top of the file, and it can find similar notes and propose merging them. To make those judgements,the body of the note is sent through the operator's server to an AI model. These features work only while you are signed in, and the request arrives together with your account's credentials.
The route is as follows. The app's server (Cloudflare Workers) receives the request and processes it with a model on Cloudflare Workers AI. Workers AI does not let the operator choose where processing takes place. Processing does not take place on Cloudflare's network in mainland China.
Only the body is sent. The filename and any front matter already present are stripped first. The operator's server does not store the body; it relays the request and keeps nothing afterwards. Cloudflare states that content passed to Workers AI is not stored and is not used to train models or improve its services.
If you are not signed in, note content is not sent. The AI features work only while you are signed in, so if you want note content to stay on the device, use the app without signing in, or sign out from Account in Settings.
When you sign in, we ask for your consent to the destinations and handling described above.The consent is recorded per device. A device without that record sends no note content, even while signed in. Signing out removes the record, so the next sign-in goes through the consent step again.
The operator's server does not keep the text of your notes and does not write it to its logs. The operator has no way to retrieve or view your notes.
When you send a web page to the app from the iPhone share button, the app creates a note with the page's title and a summary. To make the summary, the URL of the shared page is sent to the operator's server.The server fetches the publicly available page at that URL and passes the page text to a model on Cloudflare Workers AI along the same route described above. This feature also works only while you are signed in.
For a ChatGPT share link, and only for that, the app itself opens the page to read its title.It reads only the title near the top of the page, never the text of the conversation. The title it reads is sent to the operator's server so that it can be used as the note's title. The app does not disguise itself while doing so; it identifies itself by its own name.
For a set of services we handle by name (ChatGPT, Gemini, TikTok, YouTube, SoundCloud, and Voicy), the app does not make a summary. It adds the title only, and the text of the page is never passed to an AI model.
The operator's server stores neither the URL, nor the page text, nor the title. Any note you type on the share screen is not sent.
The Android app differs from the iPhone app described above in the following ways.
Most of what this policy describes for the iPhone and Android apps does not apply to the Mac app. The differences are:
The app collects no name or phone number, and it does not ask for access to your contacts or photos.
The app shows rewarded ads from Google AdMob, which unlock editing for a limited period. An ad plays only when you choose to watch one; ads do not appear anywhere else in the app.
In the European Economic Area and other regions where it is required, the app presents a consent form covering the use of data for advertising. It also requests App Tracking Transparency permission. Declining does not prevent you from using the app; the ads you see are simply not tailored to your interests.
You can change your choice later. The Settings screen has an entry point that reopens the advertising privacy form.
This website (bija-vault.com) uses Google Analytics to understand how pages are viewed. Google Analytics uses cookies to collect information such as the pages you view, the page you came from, the links you click, your browser and device type, and your approximate region. This information does not identify you by name.
Google Analytics is used only on this website, not inside the app. You can stop it by blocking cookies in your browser or by installing the Google Analytics Opt-out Browser Add-on. For how Google handles this data, see How Google uses information from sites or apps that use its services.
The operator uses the following processors.
These processors provide a level of data protection equal to or greater than this policy.
Your data is not sold or supplied to any other third party.
Your notes live on your device, so deleting the app deletes them. If you want to keep anything, take it out through the Files app before you delete.
You can delete your account in the app. On iPhone, open Settings, choose Account, and then choose Delete Account. On Android, too, open Settings, choose Account, and then choose Delete Account. If you can't use the app, you can ask us by email (see Delete Your Account for the steps). Deleting the app alone does not delete your account. Deletion removes your account information (email address, verification value, identifier, and sign-in records) and the data the operator's server holds for that account, including notes and images synced from the Android app. When you delete from the iPhone app and you signed in with Apple, we also ask Apple to revoke the permission you granted. Deleting from the Android app or by email does not do this; you can revoke it yourself in your Apple ID settings.
Deleting your account does not remove the entitlement record tied to your device identifier (subscription expiry, free period, and AI runs), so that deleting and recreating an account cannot reset the free period or the AI allowance. The link to your account is removed from that record, so it is not connected to your email address. Purchase records also exist on Apple's or Google's side.
Deleting your account does not cancel your subscription. Cancel it in the subscription settings of the App Store or Google Play.
The operator may revise this policy. A revised policy takes effect when it is published on this page.
Effective date: 2026-07-26
Last revised: 2026-10-24