Last updated: 1 August 2026
TabiLog is developed and operated by Minato Studio ("we," "us," "our"). This Privacy Policy explains how we handle information in connection with the TabiLog mobile app and, where still applicable, the hosted web version. Questions? Contact us at minatostudio26@gmail.com.
This Policy applies to:
Where the two differ, this Policy says so explicitly.
Regardless of which version you use, TabiLog is a tool for you to record: names of people in your household or group, budgets/wallets, transactions (amounts, currencies, categories, descriptions, dates), receipt photos, and shopping-list items.
On the App (native/on-device): no account, sign-up, or personal identifiers are required to use it. All of the above information is stored exclusively in a local database on your device and is never transmitted to us or any third party, except if you voluntarily choose to email us feedback (see 3.3).
On the Service (hosted web version): creating a household account requires a household name, a username, and a password. We store your password only as a one-way cryptographic hash, so we cannot see or recover your actual password. All budgeting data described above is stored on our servers.
If you buy the optional Premium unlock, the purchase is processed entirely by Google Play Billing. We receive confirmation that a purchase was made and a purchase/entitlement token so the app can unlock Premium features. We do not receive, process, or store your payment card details. Google's handling of your payment information is governed by Google's own Privacy Policy.
If you choose to send us feedback (a bug report, idea, or other message), we receive whatever you include in that message. On the native app, feedback is sent using your device's own email app (a "mailto" link), and we only receive it once you actually send that email. On the hosted web version, feedback is also relayed via our email provider, Resend (see Section 6).
The free tier of the App shows a small banner ad, served by Google's AdMob advertising network. To serve and measure that ad, AdMob uses your device's advertising identifier (which you can reset or limit at any time in your device's own settings); that identifier goes directly from your device to Google's ad-serving systems, not to us. Purchasing Premium removes the ad entirely.
The built-in currency converter sends the currency codes you select (e.g. "convert AUD to JPY") to a third-party exchange rate API, Frankfurter, to look up rates. This request never includes your budgeting data, your identity, or anything else about you or your device — it's the same generic request anyone using the tool would send. Rates are cached on your device for up to 12 hours so the converter doesn't need a fresh request every time you open it.
Beyond what's described above, we do not run analytics or tracking software, or access your contacts, location, camera roll (beyond the specific photo you choose to attach to a receipt), microphone, or any other device data or sensor beyond what's needed for the specific feature you use (e.g., the camera only when you tap "Snap Receipt").
We use the information above solely to: operate and provide the App/Service to you; let you record, view, and export your own budgeting data; process your Premium purchase and unlock the corresponding features; show and measure the AdMob banner ad on the free tier (see 3.4); look up exchange rates for the currency converter (see 3.5); respond to feedback or support requests you send us; and maintain the security and reliability of the Service (hosted web version only). We do not sell your information or share it with data brokers.
We do not sell, rent, or trade your information. We share information only with the following service providers, solely as needed to operate the App/Service:
We may also disclose information if required to do so by law, or to protect the rights, property, or safety of us, our users, or others.
On the App: your data lives in a local SQLite database inside the App's private storage area on your device, protected by your device's own operating-system-level app sandboxing. It never leaves your device except via a feature you explicitly trigger (e.g., Export, Share, or emailing feedback).
On the Service: data is stored in a hosted database and transmitted only over encrypted (HTTPS) connections. Passwords are stored as salted one-way hashes, never in plain text.
No method of storage or transmission is 100% secure, and we cannot guarantee absolute security, but we take reasonable, industry-standard measures to protect your information.
On the App: your data is retained on your device for as long as you keep the App installed, or until you use the "Erase All Data" feature, which permanently deletes it. Uninstalling the App also removes its local data, subject to your device's own OS behavior.
On the Service: your data is retained until you delete your household account, which permanently and irreversibly deletes all associated data.
Regardless of jurisdiction, you can, at any time:
Depending on where you live, you may also have additional rights under local law (for example, the right to access, correct, or object to processing of your information). To exercise any such right, contact us at minatostudio26@gmail.com and we will respond as required by applicable law. Because on-device data is never transmitted to us, we have no ability to access, view, or export it on your behalf; only you can do that, from within the App.
TabiLog is designed to be used by an adult (the household owner). Children do not create their own account, do not log in, and cannot independently enter, edit, or submit any information. Any information about a child (such as a name or a spending record) is entered and fully controlled by the adult household owner, who can edit or delete it at any time. We do not knowingly collect personal information directly from children. If we become aware that a child has provided us with personal information directly (e.g., via a feedback email), we will delete it promptly. If you believe a child has provided us with information, contact us at minatostudio26@gmail.com.
The App is distributed globally via Google Play and may be used from any country. Because on-device data never leaves your device, no cross-border transfer of your budgeting data occurs regardless of where you are located. If you use the hosted web version, your information may be transferred to and processed in countries other than your own, which may have different data protection laws than your home jurisdiction. By using the Service, you consent to this transfer.
The App/Service may link to third-party sites or services we don't control (e.g., the Google Play Store, Google's own policies). We are not responsible for the privacy practices of those third parties; review their own policies separately.
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice (such as an in-app notice).
Questions or requests regarding this Policy: minatostudio26@gmail.com