Privacy Policy

Ato keeps your Records on your Mac and does not send them to us (if you turn on iCloud sync, they are also kept in your iCloud). This policy explains separately the information we collect and the information Ato handles inside your Mac.

Effective October 4, 2026 (beta). The Japanese version of this policy is the governing version; this English version is a translation for your convenience.

1. Scope and definitions

yamirai (a trade name; "we") provides the Ato app, the Chrome extension, and the website. This policy describes how information is handled in them. This policy forms part of the Terms of Service.

"App", "Extension", "Website", "Service", and "Records": as defined in Article 1 of the Terms of Service.
"Personal information", "personal data", and "retained personal data": as defined in the Act on the Protection of Personal Information of Japan (the "APPI")

Information is handled in two separate ways.

Information we collect: the contents of your inquiries, the Website's access logs, and App usage and crash information (Section 2). It does not include the contents of your Records. We handle it in accordance with the APPI.
Information the App handles inside your Mac: your Records (Sections 3 to 5). We do not receive, collect, or hold them. If you choose to send some of them to iCloud, an AI agent, or similar, that relationship is between you and the provider. We do not receive or provide it.

Section 6 lists every case in which the Service communicates over the network.

2. Information we collect and why

We collect the following. We do not obtain information by deception or other improper means.

Information and when we collect it	Purpose of use
The content of your inquiry, your email address, and the name you give. Collected when you email support@atolog.day.	Replying to your inquiry and keeping a record of our response, investigating problems, improving the Service, verifying your identity for requests under Section 10, and contacting you about important matters concerning the Service (such as changes to features or terms)
Files you attach, such as an exported diagnostics file. Collected when you choose to send them.	Investigating problems and improving the Service
Website access logs. Collected through Cloudflare Workers Observability (request logs) when you open the Website, download the DMG, or the App checks for updates. They include your IP address, the approximate region estimated from it, the type and version of your browser or the App, the page opened, the referrer, and the time.	Providing and operating the Service, investigating failures, detecting and preventing unauthorized access and attacks, understanding usage and producing statistics (such as download and update counts and the versions in use), improving the Service and the Website, and considering new features and paid versions
App usage and crash information. The App may send this information to us. When it does, we will tell you in the first-run guide and let you turn it off in Settings at any time (it will be on by default). It includes the app and OS versions, Mac model, language, how often features are used, the state of settings such as which features are on or off, error and crash information, a randomly generated identifier that distinguishes where reports come from, and the IP address that comes with the connection. It does not include the contents of your Records (such as window names, URLs, page titles, file names, event titles, summaries, or reflections).	Investigating and fixing problems, improving the Service, understanding usage and producing statistics, and considering new features and paid versions

We also use any of this information to respond to violations of the Terms of Service, to comply with laws and exercise or defend our rights, and for purposes incidental to the above. We may produce and publish statistics in a form that does not identify individuals. We do not sell the information we collect to third parties or use it to deliver advertising. If we change a purpose, we will do so only within a scope reasonably related to the previous purpose, and we will announce it as described in Section 13.

Some information, such as an IP address or an identifier, cannot identify a specific person on its own. Anything that can identify a specific person when combined with other information is treated as personal information. We keep inquiry information and usage and crash information for as long as needed for the purposes above, and delete it without delay when it is no longer needed. Access logs are stored at Cloudflare for the period set by Cloudflare; anything we extract for statistics or similar purposes is kept for as long as needed for that purpose (Section 7).

3. Information the App handles inside your Mac

The information in this section is recorded and stored inside your Mac. We do not receive it, except for the state of settings, such as which features are on or off, included in the usage information in Section 2.

3.1 What is recorded

Within the permissions you grant, the App records metadata about your work on your Mac and when it happened. For example: the apps and windows you use, the pages you visit (if you install the Extension), calendar events, the files you work on, the state of your Mac, and the work of connected tools you turn on. The reflections you write, and your settings and rules, are also part of the Records. The App explains what it records, and you choose through permissions and settings.

3.2 What is not recorded

The App does not record screenshots, screen recordings, what you type, or page content. Apps and sites you exclude, and Chrome private windows, are discarded the moment they are seen and never stored.

3.3 Storage and protection

Records are stored encrypted on your Mac. You can choose how long Records are kept, and you can delete them at any time.

This encryption protects against cases such as the data files alone being taken. It does not guarantee protection against someone logged in to your Mac or against malicious software. You are responsible for your Mac's login password, disk encryption, and macOS updates.

3.4 Information about other people

Window names, page titles, file names, and event titles may include other people's names or confidential work information. The App handles them only for your own use on your own Mac. If you use a Mac provided by your employer, follow your employer's rules.

4. Summaries and AI

AI processing such as summaries is, in principle, done inside this Mac using the AI built into your Mac. Summaries and answers written by AI may contain errors.

The following features run only when you turn them on. All are off by default.

Working with AI agents: only when you decide to send, part of your Records is sent to the AI service you chose, using your own account. You can review what will be sent first.
Working with other apps: other apps on this Mac that you allow (such as MCP clients) can read part of your Records.

How the information is handled where it is sent, or by the apps that read it, is governed by those providers' terms and privacy policies. We do not receive it.

5. iCloud sync (optional)

When turned on, your Records are stored in iCloud under your Apple Account and synced across your Macs. It is off by default.

The contents of your Records are encrypted on this Mac before they are sent to iCloud, and we cannot read them. Whether Apple holds the encryption keys depends on your iCloud Advanced Data Protection setting. iCloud is governed by Apple's privacy policy. Synced Records use your iCloud storage, and deleting on one Mac may also apply to your other Macs and iCloud.

6. Network communication

The App and the Extension communicate over the network only in the following cases.

Communication	What happens	Do we receive it?
Update check	The App reads update information from the Website. The app version and information that comes with the connection, such as your IP address, reach the Website.	Kept as the Website's access logs (Section 2)
Usage and crash reports	The App sends the usage and crash information in Section 2 (you can turn it off in Settings). The contents of your Records are never sent.	Yes (Section 2)
iCloud sync (optional)	Only when turned on, Records are exchanged with Apple's iCloud (Section 5).	No
AI agents (optional)	Only when you decide to send, part of your Records is sent to the AI service you chose (Section 4).	No
OS features	When you turn on some features, macOS may download the data they need (such as a language model) from Apple.	No

The Extension only passes information to the App on the same Mac and sends nothing over the network (Section 11). The Extension contains no mechanisms for analytics, advertising, or tracking. The App sends the usage and crash information in Section 2, and contains no mechanisms for advertising or for tracking you across other services. The Website uses no cookies or third-party tags, and collects access logs through Cloudflare as described in Section 2.

7. Disclosure to third parties, outsourcing, and transfers abroad

7.1 Disclosure to third parties

We do not provide the personal information we collect to third parties, except with your consent or as required by law. If personal information is passed on in a business succession, we will announce it on the Website in advance, and the successor will also handle it within the purposes of use in this policy. We do not sell personal information, and we do not share it for behavioral advertising.

7.2 Outsourcing

To the extent necessary to achieve the purposes of use, we may outsource the handling of personal information to the following providers. When we do, we supervise them as necessary and appropriate so that they handle the information safely.

Cloudflare, Inc. (United States): delivery of the Website and downloads, and collection and storage of access logs (Workers Observability)
Cloudflare, Inc. (United States): receiving, storing, and aggregating usage and crash information (Cloudflare Workers)
Cloudflare, Inc. (United States): receiving and forwarding email sent to support@atolog.day (Cloudflare Email Routing)
Google LLC (United States): storing and replying to forwarded email (Gmail)

7.3 Transfers to third parties in other countries

Cloudflare, Inc. and Google LLC are companies in the United States and may handle the Website's access logs, usage and crash information, and inquiry emails outside Japan, including in the United States. If you want to know about the personal information protection system of the United States or the measures these providers take, we will answer without delay on request, as far as we know.

If we newly use a provider outside Japan that is not listed in 7.2, we will state in this policy its name, the country where it is located, that country's personal information protection system, and the measures the provider takes.

Sending to iCloud (Apple) and to AI agents (Anthropic, OpenAI, and others) is done by you, through your own actions and your own accounts. We do not provide it to third parties in other countries.

8. Security measures

To prevent leakage, loss, or damage of the personal information we collect, we take the following measures.

Organizational: only we handle personal information.
Personnel: we do not take out, copy, or send it for any purpose other than our work.
Physical: we protect devices containing personal information from theft and loss, and erase the information when we dispose of them.
Technical: we control access to the accounts and devices that handle personal information, and guard against unauthorized access.
Understanding the external environment: when we use a service located in another country, we understand that country's systems and take measures accordingly.

We will answer without delay on request about the specifics. If personal data is leaked or similar and is likely to seriously harm your rights and interests, we will report it to the Personal Information Protection Commission and notify you, as the APPI requires. No transmission or storage of information is completely secure.

9. Your controls

You can pause recording and exclude apps or sites at any time.
You can turn off usage and crash reports in Settings at any time.
You can delete Records for a range you choose, or all at once. With iCloud sync, deletions may also apply to your other Macs and iCloud.
You can export your Records. Exports for troubleshooting are shared only if you choose to; the App never sends them on its own.
To uninstall, delete your Records by following the guidance in the App, then delete the App.

10. Requests concerning retained personal data

You can make the following requests about the personal data we hold (the information in Section 2). Your Records in the App are not held by us and so are not subject to these requests. You can export and delete them with the operations in Section 9.

Notification of purposes of use, disclosure (including provision as electronic data), and disclosure of records of provision to third parties
Correction, addition, or deletion of content
Suspension of use, erasure, or suspension of provision to third parties

10.1 Procedure

Email support@atolog.day with the subject "Request concerning personal data". Tell us what you are requesting, your name, and your contact details.
We verify your identity. We generally expect the request to come from the email address you used to contact us, and we may ask for additional information for verification. If you act through an agent, please send a document confirming the authorization.
We do not charge a fee.
We respond to your request without delay. If we cannot comply because of the law, we will tell you why.

10.2 If you live outside Japan

We also accept requests under the laws of the place where you live at the same contact point, and we will respond in accordance with those laws.

11. The Chrome extension and user data

The Extension handles only the URL and title of the front tab (web browsing activity). Its only purpose is to pass them to the App on the same Mac so they become part of your Records. The Extension sends nothing over the network, does not read page content, and does not run in private windows. We do not receive the data the Extension handles, and we do not let people read it, transfer it to third parties, sell it, or use it for advertising or creditworthiness.

The use of user data by the Extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

12. Children

If you are under 18, use the Service with the consent of a parent or other legal guardian (Terms of Service, Article 3). The same applies when you send us personal information, such as an inquiry. If we learn that we have collected personal information from someone under 18 without such consent, we will delete it without delay.

13. Changes to this policy

We may change this policy to reflect changes in the law or the Service. We will announce important changes (including changes of purpose) on the Website a reasonable period before they take effect.

October 4, 2026: Effective (beta)

14. Provider and contact

Trade name: yamirai
Contact point for inquiries, complaints, and requests concerning personal data: support@atolog.day

We will answer without delay on request with the provider's name and address (for a corporation, its name, address, and the name of its representative), and we will publish them on the Website when we start a paid service.