Privacy Policy for DinoNavi Dinosaur Encyclopedia
Android
1. Operator
DinoNavi Dinosaur Encyclopedia is an Android app provided by Sekimosoft LLC. Its package name is jp.sekimosoft.dinonavi. The official website is https://dinonavi.com/.
2. Scope
This policy covers information handling in this app and distinguishes current implementation from future services. External websites are governed by their own policies.
3. Information handled
The app handles local learning/settings data and purchase entitlements. Processing through Google Play Billing, advertising SDKs and Crossref research retrieval is distinct from local data. These data are not all sent to our servers.
4. Purposes
Information is used to provide encyclopedia, quiz, review, My Library and settings features; purchases, restoration and entitlement checks; research retrieval; sharing chosen by users; and support/diagnostics. Advertising purposes are described in section 6.
5. On-device storage
Quiz answer history, results, review data, settings, My Library, sharing records, diagnostic logs, image cache and local PREMIUM entitlements are stored/processed on the device. Storage uses Room SQLite v8, SharedPreferences, files/cache and Keystore as appropriate. Learning data are not routinely all sent to our servers.
6. Advertising / Google AdMob
The production release serves banner ads on Home, encyclopedia lists and quiz results using Google AdMob (Google Mobile Ads SDK). Optional rewarded-ad functionality after quizzes is also implemented; viewing starts through the user’s own action only when that functionality is enabled. This does not imply that rewarded ads are enabled in every production configuration. In-app ads are suppressed for users with a valid PREMIUM entitlement.
Through Google Mobile Ads SDK and related services, Google and its partners may process IP addresses, approximate location inferred from IP, app/user interactions such as app launches and taps, ad impressions/clicks/video views, diagnostic/performance information, advertising IDs, App Set IDs and other applicable device/account identifiers. Processing varies with SDK behavior, device/OS settings, region and consent. This does not describe GPS-based precise location collection.
Purposes include ad delivery, personalized/non-personalized ads, measurement, analytics, security, prevention of abuse/invalid ad traffic and policy compliance. Processing by Google and partners is distinct from direct blanket collection by our own servers.
7. UMP / consent management
Google User Messaging Platform (UMP) implements consent updates, forms when required, ad-request eligibility checks (canRequestAds), and reopening Privacy Options. Ad/privacy choices may be shown depending on region and settings, including the EEA, UK and Switzerland. Available Privacy Options let users review/change choices. Actual presentation also depends on AdMob message settings. Rejecting a choice does not necessarily stop every form of advertising.
8. Google sign-in, purchases, and image delivery
Google sign-in is an optional Android-only feature using Google's authentication interface. The app retains only sign-in expiry locally and does not independently persist Google passwords or ID tokens. It does not create or link a DinoNavi.com Web membership or Web PREMIUM entitlement. Google sign-in is not required to purchase or restore PREMIUM through Google Play. Signing out of Google does not cancel a Play purchase.
When downloading PREMIUM images, the app sends a Google Play purchase token, a device-generated public key and proof of its possession, short-lived session authentication, and requested image identifiers over HTTPS to the dedicated DinoNavi server. To confirm entitlement and prevent misuse, the server submits the token to Google Play Developer API for the fixed application and product, checking purchase, acknowledgement, consumption, cancellation/refund-related, and test-purchase status. Google receives the purchase token for this verification. We do not obtain payment-card numbers or Google account passwords. Internal-test purchases require both Google's verification and a match against a time-limited operator allowlist of purchase-evidence hashes. This permission is not proof of an ordinary purchase or a free entitlement for general users.
Raw purchase tokens are not written to custom logs or persistent databases. Server process memory holds encrypted purchase evidence and hashed purchase/order references. Authorization lasts 60 seconds, with purchase rechecks at intervals of up to 10 seconds during continued access. Expired memory entries are removed on the next authorization or process termination. This does not promise physical erasure at 60 seconds.
Dedicated SQLite stores device public keys, session nonces, hashed purchase tokens and credentials, entitlement bindings, image tickets, replay-prevention records, and request counters. Challenges and sessions expire after 60 seconds, tickets after at most 60 seconds, and replay-prevention records after 120 seconds. Expired rows are deleted during the next API request. Hashed information is not treated as anonymous, and immediate or complete physical erasure of expired records or storage remnants is not guaranteed. The internal-test allowlist stores evidence hashes and expiry rather than raw purchase tokens, with a permission window of at most seven days.
Custom diagnostics exclude purchase tokens, cookies, signed URLs, private keys, and email addresses. They record processing status, HTTP codes, byte counts, and integrity results. App diagnostic logs are capped at 128KiB; lines older than seven days are removed on the next log operation. These limits apply to app diagnostic logs and do not promise identical limits for Google or hosting-provider logs. Network destinations also receive information required for ordinary network communication, such as IP addresses. Google's processing is governed by Google's privacy policy.
Downloaded images are stored in the app's private cache for offline viewing. Cancellations and refunds are managed through Google Play and reflected after app ownership queries and server rechecks. Server authorization becomes unusable at expiry or other invalidation; stored records are removed as described above. This does not synchronize Web membership data or imply an unavailable server-member deletion feature. For data-handling or deletion inquiries, use https://sekimogames.com/ja/contact/ and never include purchase tokens or credentials. Device-local data can be removed through the OS app-storage controls, but this is distinct from canceling a Play purchase and can also remove local settings and history.
9. Google Play Billing / PREMIUM
Purchases are processed through Google Play Billing. For the one-time product dinonavi_premium_lifetime, the app queries purchases, acknowledges them when needed, restores purchases and retains local entitlements.
10. Social sharing
Images/text are passed to an app chosen by the user through Android Sharesheet after the user acts. There is no automatic posting. Sharing counts/records are managed within the app. Shared information is governed by the receiving service’s policies.
11. Diagnostic logs
Custom diagnostic logs are stored on-device without automatic upload. They are shared with external apps only through an explicit user action. Logs have a seven-day cleanup process and a 128 KiB cap; manual-sharing copies are managed separately. Files handed to a recipient follow that recipient’s handling practices.
12. Crossref API
The Research tab retrieves research information through fixed queries to the Crossref API. Communications involve app-version and connection information such as source IP. Quiz answer history/results are not sent to Crossref. Crossref handles information under its own policies.
13. Image cache
Image cache is technical data stored on the device for display. Normal web requests to retrieve images may involve source-IP processing by the delivery service. Cache management follows the app/OS; no universal retention period is specified.
14. Support inquiries
The app opens https://sekimogames.com/ja/contact/ in an external browser. There is no in-app inquiry form. Names, reply email addresses, messages and other web-form inputs are handled separately from app data under the common Sekimo Games privacy policy.
15. Third-party services
Provider policies apply to Google Play Billing, Google AdMob/Google Mobile Ads SDK/UMP and Crossref. Section 6 explains the current production advertising status. Google privacy policy: https://policies.google.com/privacy
16. Retention
Local app data, logs, cache, third-party data and externally shared data are distinct. Log conditions are in section 11 and cache in section 13. Third-party retention follows provider policies; we do not control Google’s internal retention. No unconfirmed fixed retention period is specified for other data.
17. Deletion
Uninstalling the app or using OS app-data controls affects deletion of on-device data. Cache is managed by the app/OS. Externally shared data remain with recipients and are not automatically deleted by uninstalling.
18. User choices and rights
Users can use available device settings, Privacy Options and recipient-service controls. Contact us with questions or requests about information handling. We respond according to applicable law and the information we actually handle.
19. Minors
The app is intended for users aged 13 and older. Third-party services are subject to their terms/policies. We will update relevant disclosures and handling as target ages or features change.
20. Security
We endeavor to use reasonable safeguards against unauthorized access, disclosure, loss and alteration of information we handle.
21. International processing
International providers such as Google and Crossref may process information outside your country of residence. Their policies apply to their handling.
22. Policy changes
We update this policy as features, SDKs, law or operations change. Changes are published on this page or through other appropriate means.
23. Contact
For policy inquiries, use https://sekimogames.com/ja/contact/. Operator: Sekimosoft LLC. Official website: https://dinonavi.com/
24. Last updated
October 19, 2026
DinoNavi Dinosaur Encyclopedia for iOS Privacy Policy
DinoNavi Dinosaur Encyclopedia for iOS is provided by Sekimosoft LLC (bundle ID jp.sekimosoft.dinonavi). This section covers the iOS app. Android descriptions of Google Play Billing, Google sign-in, AdMob and UMP do not describe the iOS release.
The app stores preferences, favorites, learning history, results, review/reward state, research metadata, diagnostic logs and image caches on the device. Ordinary learning history and results are not automatically uploaded to our own server. No universal retention period is specified for local app data. The initial iOS release serves no ads and includes no advertising or custom analytics/tracking SDK. No separate account or Google sign-in is required, and purchases are not shared with Web or Android memberships.
Premium is a non-consumable App Store purchase (jp.sekimosoft.dinonavi.premium). Prices come from Apple for the purchase storefront. We do not receive payment-card details or Apple Account passwords. For Premium English image downloads, verified signed Apple transaction evidence, ephemeral public-key proofs, requested image identifiers and short-lived authorization are sent over HTTPS to the dedicated DinoNavi service for purchase verification, delivery and abuse prevention. Evidence may include transaction/original-transaction references. Apple verification private keys stay on the server. Sandbox evidence is never repurposed as Production evidence. Raw purchase evidence and authorization tokens are excluded from custom app diagnostics.
Signed purchase evidence is encrypted in temporary process memory. Image authorization lasts at most 60 seconds, with purchase rechecks at intervals of at most ten seconds during continued access. Dedicated database state handles public keys, nonces, hashed authorization references, tickets, replay-prevention records and request counters. The Apple-specific session binding table does not store raw signed purchase evidence or transaction IDs. Hashes are not treated as anonymous data. Bindings for expired or deleted sessions are cleaned up, but expiry of use is distinct from physical erasure. Server and hosting access logs may handle IP addresses and response status for communication, operations and security. Contact us for retention and deletion details.
Network destinations receive ordinary connection information such as IP addresses. Research requests send query/DOI metadata and an app/OS User-Agent to Crossref; quiz results are not sent to Crossref. External article sites follow their own policies. App diagnostics remain local, are limited to the last 16,000 characters and are shared only when the user chooses a destination. The Android seven-day/128KiB policy does not describe this iOS implementation. Shared images, text and logs follow recipient-service practices.
Downloaded images are cached privately for offline display subject to verified StoreKit rights and image integrity. Apple manages refunds/cancellations; eligibility is reassessed through StoreKit and server checks. A network failure alone does not delete purchases or existing cache. Cache deletion does not cancel a purchase. Contact the Sekimo Games contact form for data-handling requests and never include signed purchase evidence, tokens or secrets. Website contact information/messages are handled separately under the website policy. Apple, Crossref and other destinations follow their own policies, potentially including international processing. This notice is updated as functionality or handling changes.
Review and test purchases are verified separately from ordinary purchases and do not become Production entitlements. The shared image service checks purchase rights in the corresponding environment.