- Service name: Mimizuku
- Operator brand: Morocoshi
- Privacy contact: support@mimizuku.net
- Operator identity and contact disclosures: Specified Commercial Transactions Act disclosure
1. Basic Policy
Mimizuku (the "App") is a local-first media player. Ordinary media playback, audio extraction, transcription, transcript translation, subtitle display, and transcript management are generally processed on your device.
The App does not send usage data, media content, transcript text, translation text, or diagnostic information to the developer's server as telemetry without explicit consent or user action. The App is not designed to use third-party ad networks, behavioral advertising, or data-broker sales.
2. Scope
This Policy applies to information handled by the provider in connection with the App, Mimizuku Account, Premium, model downloads, distribution pages, support, email login, refunds, account deletion requests, and legal compliance.
When you use third-party stores, Stripe, Google, Apple, Resend, Cloudflare, R2, cloud storage providers, operating systems, external links, or model providers, their privacy policies and terms also apply.
3. Controller And Contact
For this Policy, the controller or equivalent responsible party is the individual operator identified through the seller-disclosure process linked above and operating under the brand Morocoshi. The legally required identity, address, and telephone information is disclosed without delay on request. For privacy questions, access, correction, deletion, restriction, opt-out, consent withdrawal, or account deletion requests, contact the email address above.
The provider may need to verify identity or request additional information before processing requests for impersonation prevention, payment and tax retention, security, fraud prevention, or legal compliance.
4. Information Handled On Device
The App may handle the following information on your device, in operating-system app support, cache, or log directories, or in locations you select:
- Selected media path, URI, filename, extension, file size, creation time, and modification time.
- On macOS, Photos library video asset identifiers, filenames, dates, duration, dimensions, thumbnails, and temporary cached copies of opened Photos videos.
- Media duration, resolution, audio channel count, sample rate, subtitle tracks, audio tracks, and other metadata.
- Recently opened folders, sidebar items, favorite media/folders, playback history, search terms, sort order, view mode, and column settings.
- Playback position, last played time, and recently added time.
- Transcription jobs, progress, selected model, language, processing mode, and acceleration settings.
- Generated transcripts, translations, subtitles, thumbnails, waveforms, and export data.
- Translation cache, transcript hash, translation language, and translation display mode.
- Model files, model directory, model availability state, model catalog, hashes, and license information.
- Premium entitlement state, purchase restoration state, offline grace state, and locally cached entitlement-verification information.
- App settings, display language, theme, volume, speed, subtitle, waveform, and transcript-follow settings.
- Diagnostic logs, error codes, dependency check results, processing status, and recovery hints.
- File access permissions, bookmarks, security-scoped access, and access-token metadata provided by the operating system or platform.
5. Information Handled Server-Side Or Through Third Parties
The following information may be processed server-side or through third-party services for accounts, Premium, model downloads, support, payment, email login, and legal compliance:
- Account identifiers, verified email addresses, and Google or Apple provider subject identifiers.
- App session tokens, server-side hashed session tokens, token issue times, and token expiry times.
- Hashed email one-time login codes, recipient email addresses, sent times, expiry times, and verification results.
- Billing name, billing address, country or region, tax identifier where supplied, and Stripe or store customer IDs, subscription IDs, price IDs, transaction IDs, purchase status, refunds, chargebacks, disputes, failed payments, receipts, and tax-related information. The provider does not receive full card numbers from Stripe Checkout.
- Premium entitlement, signed entitlement snapshots, entitlement verification times, trial or paid period end times, and offline grace deadlines.
- Account deletion request state, request time, target account, and processing notes.
- Support request text, reply address, attached diagnostic logs, and any information you voluntarily provide.
- General site access logs, IP address, User-Agent, request time, request URL, and security logs.
- Records necessary for legal compliance, tax, accounting, fraud prevention, payment disputes, or security.
6. Purposes
The provider uses the information above to:
- Play, pause, seek, adjust volume/speed, and control fullscreen playback.
- Browse folders and, on macOS, Photos library videos; list media; search; filter; and show thumbnails.
- Extract audio, transcribe media, translate transcripts, generate subtitles, show transcripts, and export files.
- Restore previous state, save user settings, and manage cache.
- Manage models, check dependencies, show errors, and display diagnostic logs.
- Sign in to Accounts, verify Premium entitlements, restore purchases, process refunds and chargebacks, and decide offline access.
- Send and verify email one-time codes and prevent abuse.
- Provide support, investigate issues, provide recovery guidance, and reply to inquiries.
- Process account deletion, access, correction, deletion, restriction, and other rights requests.
- Handle payment, tax, accounting, legal compliance, store requirements, fraud prevention, and security.
- Perform the Terms of Use, Privacy Policy, Refund Policy, and Specified Commercial Transactions Act disclosure.
7. Legal Bases
Where applicable law requires legal-basis disclosure, the provider uses the following bases:
- Contract performance for account login, Premium entitlement, model delivery, purchase restoration, subscription management, support needed to provide the service, and user-requested functions.
- Consent for optional user-initiated disclosures, optional diagnostics sharing, and any processing for which applicable law requires consent.
- Legitimate interests for service security, abuse prevention, fraud detection, troubleshooting, service integrity, and establishment or defense of legal claims, balanced against user rights.
- Legal obligations for payment, tax, accounting, consumer-law disclosures, lawful requests, recordkeeping, and dispute handling.
If you withdraw consent for consent-based processing, contact support. Information needed for contract performance, payments, tax, legal compliance, disputes, fraud prevention, security, or recordkeeping may still be retained or processed after consent withdrawal.
8. Storage Location And Retention
Settings, paid-feature entitlement cache, logs, cache, and generated artifacts are stored in operating-system app support, cache, or log directories, or in folders selected by the user.
App session tokens used for paid-feature account login are stored outside settings.json in operating-system secure credential storage where available, such as Keychain on Apple platforms, Credential Manager on Windows, and Android Keystore-backed encryption with app-private SharedPreferences on Android.
Diagnostic logs are split by date and are currently designed to be retained for about 30 days. Logs rotate by size. Thumbnails and waveforms are treated as regenerable cache and may be deleted by user action or app maintenance.
On macOS, videos opened from Photos may be copied or exported into the App's cache directory so the normal playback, transcription, thumbnail, and waveform pipeline can read a local file. These cached copies are treated as app cache.
Server-side account, payment, entitlement, email-code, support, deletion-request, tax, accounting, fraud-prevention, and legal-compliance records may be retained until the relevant purpose is fulfilled, the Account is deleted, the statutory retention period expires, a dispute is resolved, the payment provider's requirement ends, or fraud prevention no longer requires retention. After retention expires, information is deleted, anonymized, or access-restricted.
9. External Transmission, Processors, And Third-Party Services
The App does not send media content, transcript text, or translation text to the developer's server or external AI services for ordinary playback, local transcription, local translation, or subtitle display.
External communication, processor handling, or third-party processing may occur when:
- You download models, model catalogs, hashes, or license information.
- You verify, purchase, renew, restore, cancel, refund, dispute, or receive receipts for Premium through Stripe, app stores, account services, or entitlement services.
- You request email one-time-code login. The account service may send the recipient email address and one-time code to Resend for delivery. The Worker stores only a hashed code, but the email provider processes delivered email content under its own terms and privacy policy.
- Account deletion, refunds, support, identity verification, tax, fraud prevention, or legal retention processing is required.
- You open online-only files from cloud storage.
- The operating system, cloud provider, security software, or dependency libraries retrieve or verify files.
- You manually share diagnostic logs, exported files, screenshots, or email text.
- You open external links, distribution store pages, model sources, license pages, or payment pages.
Third-party services used may include Stripe for billing and payment records; Apple and Google for federated sign-in or store services; Resend for one-time-code email delivery; Cloudflare Workers, D1, R2, DNS, and Registrar for account, entitlement, model, artifact, and site infrastructure; distribution stores; operating-system providers; user-selected cloud-storage providers; and accounting, tax, or legal-support services. Each provider processes information under its own terms and privacy documentation.
The provider does not sell personal information to third parties. Disclosures, processing by vendors, or transfers needed for legal compliance, user consent, payment, tax, accounting, fraud prevention, security, support, rights requests, or business succession are handled separately under this Policy and applicable law.
10. International Processing
Third-party services, cloud infrastructure, payment providers, email delivery providers, store operators, and support-related services may process, store, or access information in Japan, the United States, the European Economic Area, or other countries where the provider or its subprocessors operate. Transfers are based on contract performance, consent where required, adequacy decisions, contractual safeguards, or another mechanism permitted by applicable law. Current provider privacy and subprocessor documentation should be reviewed before deciding whether to create an Account or purchase Premium.
If you use the App from outside Japan, your information may be transferred to Japan or other countries.
11. Diagnostic Logs
Diagnostic logs may record errors, processing state, dependency status, recovery hints, and operation results. The normal policy is not to log transcript text or translation text.
When local path redaction is enabled, path information in logs is redacted where practical. However, operating systems, dependencies, and external processes may return error text containing paths or filenames, so review diagnostic logs before sharing them.
12. User Controls And Rights
You can manage app data through settings, cache deletion, log deletion, model deletion, export features, sign-out, account deletion request submission, and operating-system file-management tools.
To the extent allowed by applicable law, you may request access, correction, addition, deletion, restriction, opt-out from third-party disclosure, portability, objection, or consent withdrawal for personal information the provider holds about you. Not all rights apply in every region.
To make a request, contact support. The provider may refuse, limit, or partially fulfill a request because of identity verification, security, fraud prevention, legal retention, payment or tax records, disputes, or technical constraints. You may also complain to the Personal Information Protection Commission of Japan or the competent data-protection or consumer authority in your place of residence.
On macOS, the App requests Photos library access only when you open the Photos source. You can manage or revoke Photos access in macOS System Settings.
Manage cloud storage files, operating system permissions, security-scoped access, bookmarks, backups, and sync state through the relevant operating system or cloud provider settings.
13. Security
The App is designed to reduce unnecessary exposure through local storage, secure credential storage, permission handling, path redaction, log rotation, hashing, signed entitlements, and structured error handling.
However, internet or device storage is never completely secure. Information may become visible to others through device loss, shared OS accounts, cloud sync, backups, external storage, malware, user sharing, or third-party-service incidents.
14. Children
The App is not intended to knowingly collect personal information from children. Minors should use the App with consent and supervision from a parent or legal guardian. Parents or guardians may contact support for questions or deletion requests involving a child's information.
15. Business Succession
In connection with business transfer, inheritance, organizational change, service migration, asset transfer, outsourcing, or legal requirements, the provider may transfer user information to successors, processors, advisors, or relevant authorities as necessary. The provider will apply appropriate safeguards where practical.
16. Changes
This Policy may be updated as features, distribution methods, external components, payment methods, laws, store requirements, or third-party services change. For material changes, the provider will give notice through the App, distribution page, email, or store listing before the change takes effect where required by law.
Continued use is not treated as consent where applicable law requires express consent.
17. Contact
For questions about this Policy, data handling, deletion, access, correction, restriction, consent withdrawal, account deletion, complaints, or consultations, use the contact address above. Formal support requests are accepted by email.