Privacy Policy

Last updated: July 24, 2026 · 日本語

Simple System Inc. ("we", "us") sets out below how we handle personal information and user data in the "kittobako" service (the "Service"). This is an English translation for convenience; in the event of any discrepancy, the Japanese version prevails.

1. Information we collect

Account	Email address.
Submitted content	Images you upload, and the 3D models, kits and images we generate from them ("generated works").
Usage	Number of conversions, operation logs, error logs, access timestamps, etc.
Device / network	IP address, browser/OS information, identifiers via cookies and similar technologies.
Payment	Plan/subscription status, etc. Card numbers and other payment details are collected and processed by Stripe; we do not retain them.

2. Purposes of use

Providing the Service (3D model generation, kit creation, assembly features, collection storage, etc.).
Account authentication, billing/contract management, and enforcing usage limits.
Troubleshooting, quality improvement, and prevention of misuse.
Responding to inquiries and sending important notices.

3. AI processing of images and cross-border transfer

Only the "toy-ification" (image conversion) of uploaded images is sent to an overseas AI provider

In the Photo-to-Kit feature, your uploaded image is sent to Google LLC (Gemini API, located in the U.S.) for (i) conversion into a toy-style image and for safety/policy checks (classifying the input image, re-checking the converted image, and reviewing the posted image). (ii) The subsequent 3D model generation, block conversion and part splitting are processed on our own servers in Japan (Amazon Web Services, Tokyo region). We do not outsource 3D generation to any external provider. By using the Service, you consent to the sending and processing of images to Google in (i).

We provide only the data necessary for the purpose, and supervise our processors appropriately.
Google LLC is located in the U.S. Please refer to Google's privacy policy for the U.S. data-protection framework and Google's safeguards. Images sent to the Gemini API are handled under Google's terms.

4. Third-party provision / processors

Except as required by law, we do not provide personal information to third parties without consent. We entrust handling to the following external services to the extent necessary for the purposes.

Image toy-ification	Google LLC (Gemini API, image style conversion / U.S.)
3D generation / blockization	Processed on our own servers (AWS Tokyo region, no external outsourcing. Open-source AI models Microsoft TRELLIS.2 + Meta DINOv3 run in-house).
Payment	Stripe, Inc. (card payments)
Infrastructure / storage	Amazon Web Services (servers, storage, delivery)
Email	Resend, Inc. (login links, etc. / U.S.); Google LLC (support mail via Gmail / U.S.)
Official SNS features (only works with SNS consent)	Meta Platforms, Inc. (Instagram / Facebook, U.S.). Only for works for which you have given the separate, optional "SNS consent (sns-2)" at posting time, featured as ordinary posts on our official accounts.

4-2. Featuring on official SNS and provision to a third party in a foreign country

Only for works for which you have given "SNS consent", we publish the work on Instagram / Facebook operated by Meta Platforms, Inc. (U.S.) to feature it on our official accounts. As this constitutes provision of personal data to a third party located in a foreign country, we disclose the following.

Recipient: Meta Platforms, Inc. (country: U.S.).
Items provided: the work (AI-generated image) and the post text (caption). Your nickname and other personal information are not included in the post text.
Purpose: featuring the work as an ordinary post on our official SNS accounts.
Scope of disclosure: posts are public worldwide and may be viewed, cached or shared in any country.
License: for publication, we grant Meta the license needed to display and distribute the work under Meta's terms (processing may occur on servers outside your country, e.g. the U.S.). Please refer to Meta's privacy policy for the U.S. data-protection framework and Meta's safeguards.
Safeguards: only works with SNS consent are eligible, and a human performs a final check before sending. You may withdraw at any time; after withdrawal we make no new posts. However, complete deletion of anything already posted, distributed, cached or shared before withdrawal cannot be guaranteed.
Paid advertising / boosting is not included in this consent (a separate consent will be obtained if used).

5. Retention and deletion

Account information is retained while the account exists.
Uploaded images and generated works are retained while the account exists, to provide features such as collection display and re-download. We may delete them after a certain period as operationally necessary.
You may request deletion of your account; upon deletion we erase related data within a reasonable period (except data we are legally required to retain).

6. Cookies and analytics

We may use cookies and similar technologies and analytics tools (e.g. Google Analytics) to keep you signed in and to improve the Service. You can disable cookies in your browser settings, but some features may become unavailable.

7. Security measures

We take reasonable measures to prevent leakage, loss or damage of information and to otherwise manage it securely, including encryption in transit (HTTPS) and access controls.

8. Requests for disclosure, correction, suspension, etc.

You may request disclosure, correction, addition, deletion, or suspension of use of your personal information. Please contact the window below; we will respond in accordance with law after verifying your identity.

9. Age restriction

The Photo-to-Kit feature that generates 3D models and block kits from photos is available only to persons aged 18 or older, under the terms of the generative AI used (Google Gemini). Persons under 18 may not use that feature.

For other features, minors must obtain the consent of a legal guardian. Consent of a legal guardian is required to subscribe to paid plans.

10. Changes to this policy

We may revise this policy as necessary. We will announce material changes within the Service.

11. Contact

Simple System Inc. — Personal Information Inquiry Window
Email: support@kittobako.com
Person responsible for handling personal information: Katsuhiko Ito, Simple System Inc. (2811-28 Higashi-Agenosho, Suo-Oshima-cho, Oshima-gun, Yamaguchi 742-2805, Japan)