Privacy Policy
Last updated: October 29, 2026
This is a translation. If it differs from the Japanese version, the Japanese version prevails.
PeRRii (the "Operator") sets out the following policy on how it handles users' information in the messaging app "Orto" (the "App").
1. Operator and contact
- Operator: PeRRii
- Contact: support.orto@perrii.app
2. Information we collect
The App collects the following information.
2.1 Information you enter or provide
| Information | Details and purpose |
|---|---|
| Phone number | Used to sign in (SMS verification) and to link each user to a single authentication identity. It is not shown to other users. |
| Account information | In the App, one user can create multiple "accounts" (profiles). For each account, we store the account ID, display name, comment, profile image, background image, and whether the account can be found by ID search. These are shown to other users, for example when adding friends and on chat screens. |
| Messages | We store the text and images of messages you send, the time they were sent, read status, reactions (emoji), and whether a message was unsent or hidden. The text and images of unsent messages are also kept as described in "6. Retention and deletion". |
| Friends and blocks | We store the accounts you have added as friends and the accounts you have blocked. |
| Reports | When you report another user, we store the IDs of the reporting and reported accounts, the reason, details (optional), the message concerned (when reporting from a message), and the time of the report. Reports are not shown to the reported user. |
2.2 Information collected from your device
| Information | Details and purpose |
|---|---|
| Notification token (FCM token) | We store a device token for each account to send push notifications. |
| Camera | Used to scan QR codes and to take photos for profile images and for sending in chats. When scanning QR codes, the camera image is used only for reading the code on the device and is neither stored nor sent. Of the photos you take, we store only those you set on your profile or send in a chat. |
| Photos (album) | Used to choose images for your profile and for sending in chats, and to read QR codes from images. We access only the images you choose. We add images to your device's album only when you choose to save an image from a chat. |
| Notifications | Used to notify you of new messages. |
2.3 Information stored only on your device
The following information is stored on your device and is not sent to the Operator's servers.
- Passcode (if set): stored as a hash in the device's secure storage (Android Keystore / iOS Keychain).
- App settings such as display language, and information about the account you used last.
2.4 Information we do not collect
The App does not collect advertising identifiers, location information, or contacts (address book). The App does not include SDKs for advertising or behavioral analytics.
3. How we use information
We use the information we collect for the following purposes.
- Verifying your identity (SMS verification) and keeping you signed in
- Providing the App's services (creating and switching accounts, adding friends, sending and receiving messages, notifications)
- Preventing misuse and keeping the App safe (blocking, handling reports, limiting the number of accounts, etc.)
- Responding to inquiries
- Complying with laws and regulations
4. Service providers and disclosure to third parties
The App uses Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging), provided by Google LLC, to store and process information and to deliver notifications. The information we collect is stored on the servers of these services and may be processed on servers outside Japan.
SMS verification codes are sent through Firebase Authentication. To send the code, your phone number is sent to Google and to telecommunications carriers.
We do not provide the information we collect to third parties, except in the following cases.
- When you have given your consent
- When required by law
- When necessary to protect a person's life, body, or property and it is difficult to obtain your consent
Please also see Google's Privacy Policy and Firebase's privacy information for how Firebase handles data.
5. Information shown to other users
Your account ID, display name, comment, profile image, and background image are shown to other users through adding friends, ID search, and QR codes. You can choose whether your account appears in ID search in the profile edit screen. Accounts you have blocked no longer see you in ID search results.
The content of messages (text and images) is shown only to the account you are chatting with. Unsent messages disappear from both your screen and the other person's screen.
6. Retention and deletion
- When you delete an account, it disappears from your list and is shown to other users as "Deleted account".
- To prevent impersonation through reuse of account IDs and to keep data consistent, the App does not immediately erase data such as display names, profile images, and message history from its systems when you delete an account. The other person's chat history also remains. Data is fully deleted when you request it as described below.
- Unsent messages disappear from both your screen and the other person's screen, but their text and images are kept in a place that only the Operator can access, to respond to disclosure requests under the law and to investigate misuse. They are never shown to other users. They are kept for up to 3 years from the date they were unsent, and are then deleted in turn. However, if they are needed for an ongoing investigation or to respond to a request under the law, they are kept until that matter is resolved.
- Reports are kept as a record of how we handled misuse, even after the account is deleted or the user deletes their user, for up to 3 years from the date of the report, and are then deleted in turn. However, if they are needed for an ongoing investigation or to respond to a request under the law, they are kept until that matter is resolved. They are never shown to other users.
- If you would like your data, including your phone number, to be deleted, please contact us at the address above. After confirming your identity, we will respond, generally within 14 days, except for information we are required by law to keep. The steps are also described on the "Delete your account" page (https://orto.perrii.app/en/delete-account).
- Information stored on your device (passcode, settings) is deleted when you uninstall the App. (On iOS, Keychain data may remain on the device after the App is removed.)
7. Security
To prevent the leakage, loss, or damage of the information we collect, we take reasonable security measures, such as encrypting communications and controlling access (security rules).
8. Your rights
You may ask us to disclose, correct, delete, or stop using your information. Please contact us at the address above. You can change some of your account information yourself in the App's profile edit screen.
9. Use by minors
The App has no age restriction. If you are a minor, please use the App with the understanding of your parent or guardian.
10. Changes to this policy
We may change this policy as needed. We will announce important changes in the App or on the Operator's website. The revised policy takes effect when it is posted in the App or on the website.