Privacy Policy

Effective date: 2026-10-08

This policy explains how Teraloo Operator (“we” or “us”) handles information in the app “Teraloo” (the “App”) and on this website.

1. Our approach

There is no login. The App does not ask for your name, email address or phone number.
The App contains no ads, analytics or tracking, and does not use advertising identifiers (such as IDFA).
Your step data is never used for advertising, marketing, analytics or crash reports, and is never sold.

2. Information the App handles

Step data (health data)

With your permission, the App reads your step counts from Apple Health (HealthKit) on iPhone or Health Connect on Android. It does not read other kinds of health data.
On your device, steps are totaled by day and turned into distance in the game.
What is sent to our server is only: the daily step totals and a record of how they were applied to your journey (the date, steps applied, steps applied in run mode, and the distance traveled in the game). Individual health records (each sample, its time or the device that recorded it) are never sent.
Health data is not stored in iCloud.

Travel progress

Your journeys, arrivals, city cards and settings. They are saved on your device and backed up to our server so they can be restored on a new phone.

Anonymous account ID, device token and transfer code

When you start the App, our server issues a random account ID and a token for your device. They are not linked to your name, email address or any other account.
The transfer code (shown in Settings) is made of your account ID and a long random secret. We store the secret and the device token only in hashed form.
To protect against guessing, we record the number of failed attempts to use a transfer code.

Communication data

When the App talks to our server, your IP address and basic request information are processed by Cloudflare, Inc. for delivery and security (for example, to limit the number of requests).

3. Why we use it

To show your journey: the distance you have traveled, where you are and the cities you have reached
To back up your progress and restore it when you move to a new phone with your transfer code
To avoid counting the same steps twice, including when you change phones
To protect the service from abuse, such as attempts to guess transfer codes

4. Where it is stored

On your device, in the App’s storage.
On our server, which runs on Cloudflare Workers, in a Cloudflare D1 database. Cloudflare, Inc. processes the data on our behalf only to provide this service.

5. Information this website handles

This website is delivered by Cloudflare, Inc. For delivery and security, Cloudflare may process access logs (IP address, browser type, time of access, etc.).
This website does not use cookies, analytics or ads.
The transfer code you enter on the data deletion page is sent to our server only to find and delete your data.

6. Information you send us

If you contact us by email, we use your email address and message only to reply and respond to you. Please do not send us your transfer code by email.

Except for Cloudflare as described above, or as required by law, we do not provide your information to third parties.

8. International transfers

Cloudflare is a US company, and information may be processed in the United States and other countries.

9. Retention and deletion

Data on our server (step totals and how they were applied, travel progress, account): kept until you delete it.
How to delete it:
- In the App: open Settings → Delete data.
- On this website: enter your transfer code on the data deletion page.
Deletion happens right away and cannot be undone. Your account, step totals and travel progress are erased from our database. Our database provider keeps automatic recovery points for up to 30 days; deleted data disappears from them when they expire, and we do not restore it.
Deleting the App does not delete the data on our server. It removes only the data on your device.
If you have lost both your phone and your transfer code, we have no way to tell which data is yours, because there is no login.
Emails you send us: We delete them once they are no longer needed after we have responded.
You can ask us to disclose, correct, delete or stop using information about you that we hold. Please contact us (see “Contact” below).

10. Children

The App does not knowingly collect information from children.

11. Changes to this policy

We may change this policy when necessary. Changes take effect when posted on this page. We will announce important changes in the App or on this website.

12. Contact

Teraloo Operator
Email: contact@no9.app

When contacting us, please include the app name or website URL, a summary and the details of your inquiry, and a screenshot of the relevant part.

If this policy differs from the Japanese version, the Japanese version prevails.