JUNROS Privacy Policy

Last updated: 2026-09-08

This Privacy Policy explains how Coyote and Powell LLC (“Company,” “we,” “us,” or “our”) handles personal information through the JUNROS mobile application, related server functions, support channels, and JUNROS pages on coyoteandpowell.com.

This English policy applies to JUNROS as offered outside Japan. It is not a reference translation of the Japanese policy.

1. Controller

The controller or organization responsible for the processing described in this Policy is:

Coyote and Powell LLC
8F-B Hirokoji Building
1-17-6 Ueno, Taito-ku
Tokyo 110-0005, Japan

Privacy contact and New Zealand privacy officer:
Coyote and Powell LLC Privacy Desk
info@coyoteandpowell.com

2. Information We Handle

We handle the following categories of information.

We do not receive your complete payment-card or bank-account information. Apple processes payment information.

JUNROS does not use advertising identifiers or cross-app advertising tracking.

3. Information Kept Only on Your Device

JUNROS may store the following locally on your device:

• authentication tokens;
• cached journey information and temporary images;
• app settings;
• locally scheduled notification content;
• your selected passport-issuing country; and
• a booking reference or member ID placed on the clipboard at your request.

Clipboard entries created through JUNROS are configured to expire after approximately 10 minutes where supported by the operating system.

Local information is normally removed when you sign out, delete your account, or when JUNROS performs its startup cleanup. Copies you exported, pasted, shared, or backed up through another service are outside our control.

JUNROS does not currently use remote push notifications. Its travel reminders are scheduled locally on the device.

4. Purposes

We use personal information only as reasonably necessary to:

1. register and authenticate accounts;
2. store, display and synchronize journeys;
3. perform AI reading requested by you;
4. apply Free Plan and Pro usage limits;
5. confirm and administer subscription entitlements;
6. send authentication, account and service messages;
7. provide support and investigate reported problems;
8. secure JUNROS, prevent misuse and preserve audit records;
9. comply with law and respond to valid legal process; and
10. establish, exercise or defend legal claims.

We do not use travel documents or itineraries for advertising.

We do not sell personal information or share it for cross-context behavioral advertising.

JUNROS does not use AI output to make decisions that produce legal or similarly significant effects concerning you.

5. AI Reading and Explicit Permission

AI reading is optional.

When you request AI reading, the selected image or PDF and a processing instruction are sent through Vercel-operated server infrastructure to Anthropic in the United States. The purpose is to extract and structure the travel information requested by you.

Before the first transmission, JUNROS will show a separate disclosure and request your explicit permission. The disclosure will identify:

• the information sent;
• Anthropic as the AI recipient;
• the United States as a processing location;
• the purpose of the transmission;
• the currently verified provider-retention period; and
• how to avoid the transmission.

We do not authorize Anthropic to use submitted content to train general-purpose models.

Anthropic may retain API inputs and outputs for a limited period under the Company’s account settings and Anthropic’s applicable terms for security, abuse prevention and legal compliance. We do not authorize the use of submitted content to train general-purpose AI models. Current retention information may be requested through the privacy contact below.

Do not submit medical records, health records, national identification numbers, tax identifiers, bank-account information, payment-card details, or documents unrelated to travel.

6. Service Providers

We use the following providers to operate JUNROS.

We require service providers to process information only for authorized purposes and to apply appropriate protections through contractual or other legally recognized measures.

Operational backups are used only for disaster recovery and are not used for ordinary operation.

7. User-Initiated External Searches

If you tap an external flight-status, weather, map, carrier, or facility link, JUNROS may construct a URL containing a flight number or place name.

Your device then sends that URL directly to the selected external service, such as Google. We do not separately store the fact that the destination service received the query.

The external service’s privacy policy applies after you open it.

8. Legal Bases for United Kingdom Users

For users in the United Kingdom, we rely on the following legal bases where applicable:

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal. If AI transmission permission is withdrawn, AI reading will no longer be available unless permission is given again.

Information about our legitimate-interest assessment is available on request.

9. Retention

10. Account Deletion

You may initiate account deletion through JUNROS’s account settings.

Deletion removes account-linked information from active Company systems, including journeys, steps and stored scans, subject to completion of the deletion process.

Some information may remain temporarily:

• in rolling backups until expiration;
• in security or audit records;
• in records necessary for legal, accounting, fraud-prevention or dispute purposes; and
• in systems independently maintained by Apple, RevenueCat or another provider under its own legal obligations.

Deleting a JUNROS account does not cancel an Apple subscription.

Where applicable law gives you a right to request deletion from a processor, contact us and we will make the request or provide the appropriate route.

11. International Processing

JUNROS is operated by a Japanese company. Primary application data is stored in Japan, while specified providers process information in the United States and in the other countries identified in Section 6.

For transfers subject to Japan’s Act on the Protection of Personal Information, we use consent or a legally recognized recipient framework and take the measures required by Article 28 and the applicable Personal Information Protection Commission rules.

For transfers subject to the UK GDPR, we use an applicable adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful mechanism, as appropriate.

For Canada, Australia and New Zealand, we use contractual or other measures intended to maintain protections applicable to overseas processing.

Copies or descriptions of applicable transfer safeguards may be requested through the contact in Section 1, subject to lawful redactions.

12. Security

We use administrative, technical and organizational safeguards appropriate to the nature of the information and the risks involved.

These include access restrictions, encrypted communications, authentication controls, service-provider review, backup controls and recording of sensitive administrative access.

No Internet transmission or storage system can be guaranteed to be completely secure.

13. Your Rights

Depending on where you live and the law that applies, you may have rights to:

• obtain information about our processing;
• request access to your personal information;
• request correction of inaccurate information;
• request deletion;
• restrict or object to certain processing;
• withdraw consent;
• receive eligible information in a portable form; and
• complain to a privacy regulator.

Send requests to info@coyoteandpowell.com. We may request information reasonably necessary to verify identity and authority.

We will respond within the period required by applicable law. We will not discriminate against you for exercising a legally protected privacy right.

United Kingdom

UK users may complain to the Information Commissioner’s Office: https://ico.org.uk/make-a-complaint/

Canada

Canadian users may challenge our compliance through the Privacy Desk. Depending on applicable law, complaints may also be submitted to the Office of the Privacy Commissioner of Canada or the relevant provincial authority.

Québec users must be provided with the applicable French policy and French contract documents before the Service is offered to them.

Australia

Where the Australian Privacy Act applies, you may request access or correction and submit a privacy complaint to us. If the complaint is not resolved, you may contact the Office of the Australian Information Commissioner.

New Zealand

New Zealand users may request access or correction and may complain to the Office of the Privacy Commissioner of New Zealand.

California

We do not sell personal information or share it for cross-context behavioral advertising.

We do not track users over time across unaffiliated websites or apps. Because JUNROS and its website do not engage in that tracking, browser Do Not Track and Global Privacy Control signals do not alter our current practices.

If a California privacy law applies to us and grants you additional rights, you may exercise them through the contact in Section 1.

14. Children

JUNROS is intended for persons aged 13 or older.

We do not knowingly collect personal information from a child under 13. If we learn that an under-13 child created an account or submitted personal information, we will suspend the account and delete the information unless law requires another action.

A parent or guardian may contact us if they believe a child’s information has been submitted.

15. Medical and Health Information

JUNROS is not designed to collect or infer medical or health information and must not be used to upload medical records, prescriptions, diagnoses, test results, health-insurance documents or information concerning attempts to obtain health services.

If we determine that unsupported health information has been submitted, we may reject or delete it.

16. Changes to This Policy

We may update this Policy to reflect changes in law, providers, security requirements or JUNROS’s actual processing.

We will update the date above and provide notice appropriate to the significance of the change. Where law requires consent to a new purpose, recipient or category of processing, we will obtain it before the new processing begins.

17. Contact

Coyote and Powell LLC Privacy Desk
info@coyoteandpowell.com

Postal address:

8F-B Hirokoji Building
1-17-6 Ueno, Taito-ku
Tokyo 110-0005, Japan