Privacy Policy

1. Information we collect

Usage and diagnostic data. The app and the website send usage data to our analytics provider so we can understand how Tayu is used and fix problems. This includes the features and pages you use, errors and crash reports, and technical details such as the app version, operating system, language, and approximate location derived from your IP address. This data is linked to a random identifier, not to your name or email address.

Session replay. To find where Tayu is confusing, we record how the Tayu window and our website are used. Text you type and content you add yourself are masked on your device before anything is sent, and nothing outside the Tayu window or our website is captured. Replays may be reviewed with automated tools, including AI-assisted analysis by our analytics provider, and are not used to train third-party models.

YouTube videos. When you add or play a YouTube video, the app sends its public video ID to our server and analytics provider, for example to balance its volume and to understand which kinds of videos are used.

Location. If you allow location access, Tayu uses your location on your Mac to calculate sunrise and sunset times, and sends your coordinates to our server to look up local weather through a weather data provider. We do not store these coordinates with your identifier. Without location access, Tayu estimates your region from your time zone.

Purchases. Purchases are processed by Paddle.com Market Limited, our Merchant of Record, which collects the details needed to complete payment and acts as the controller of that data (Paddle Privacy Policy). Paddle then sends us your email address and a customer ID so we can activate your licence.

Licence and trial checks. The app sends a per-install identifier and a device credential to our server to confirm whether a trial or licence is active.

Support and feedback. If you email us or send feedback from the app, we receive what you choose to include. Feedback sent from the app also includes your app version, operating system, and plan. Adding an email address to in-app feedback is optional.

System audio check. If you turn on the option that pauses wallpaper sound while other apps are playing audio, macOS asks for System Audio Recording permission. Tayu uses it only to detect, on your Mac, whether sound is playing. Audio is not recorded, stored, or sent.

2. Information that stays on your device

Your wallpaper library, playlists, schedules, settings, and downloaded media are stored on your Mac. We do not keep a copy of them. If you sign in to YouTube inside Tayu, you sign in directly with Google and the session is stored on your Mac; we do not receive your Google credentials.

3. How we use information

We use the information above to provide and improve Tayu, activate licences, prevent abuse, respond to you, and meet legal obligations. We do not sell your personal information, and we do not use it for advertising.

4. Service providers

• Paddle: payments, tax, receipts, and refunds (privacy policy)
• PostHog: analytics and session replay, hosted in the United States (privacy policy)
• Cloudflare: website, API, media, and app update hosting (privacy policy)
• A weather data provider, for local weather
• Support tools we use to receive and respond to feedback

These providers may process your IP address and standard request logs as part of their service.

5. Cookies and similar storage

tayutau.app uses first-party storage for analytics and to see which page or link led to a download. Paddle’s checkout also uses storage needed to complete a purchase. When you open the website from the app, the visit may be linked to the app’s random identifier. We do not use advertising or cross-site tracking cookies. If your browser sends a Do Not Track or Global Privacy Control signal, the website does not run analytics.

6. Data retention

• Analytics data: up to 12 months.
• Session replays: up to 30 days.
• Licence check logs: up to 90 days.
• Licence records: for as long as the licence is active, plus 2 years for tax records.
• Support emails and feedback: up to 2 years.
• Payment records held by Paddle: according to Paddle’s policy.

7. International transfers

Our service providers process data outside Japan, including in the United States. Where required, we rely on the safeguards they provide, such as Standard Contractual Clauses.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to its use, and to complain to your data protection authority. To make a request, including opting out of analytics, email support@tayutau.app. We respond within 30 days. We may forward payment-related requests to Paddle.

If the GDPR or UK GDPR applies to you, we rely on contract (purchases, licences, and support), legitimate interests (analytics, diagnostics, abuse prevention, and security), and legal obligation (tax records). California residents: we do not sell or share personal information, and we treat Global Privacy Control as a valid opt-out signal.

9. Children

Tayu is not directed at children under 13, or under 16 where local law requires. If you believe a child has given us personal data, contact us and we will delete it.

10. Security

Data sent between Tayu and our servers is encrypted with HTTPS. Card details are handled by Paddle and do not reach our servers.

11. Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, notify customers by email.

12. Contact

For any privacy question, email Nono (Makoto Nonoyama) at support@tayutau.app.