Privacy Policy

Effective 17 October 2026

Dochuki (dochuki.com) is operated by TAROTAP LTD, a company registered in England and Wales (company number 15358864) at 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom. This policy explains what personal data we collect when you use Dochuki, why we collect it, who processes it on our behalf, and the choices you have.

Dochuki is a travel-planning service for Japan. You describe a journey in a sentence or two, and an AI agent writes a day-by-day record of the road: towns, trains, places to stay and things to see. We keep this policy short and specific because the service is simple.

What we collect

We collect only what the service needs to work:

  • Account data. Your email address when you sign in with a one-time code. If you sign in with Google, we also receive the name, profile picture and Google account identifier that Google shares with us. We never see your Google password.
  • Your journeys. The text you type to describe a trip, any follow-up requests, and the records (itineraries) the agent writes in response. These are stored so you can come back to them.
  • Technical data. Our hosting provider records the IP address, browser type and pages requested for each visit, in standard server logs used for security and reliability. We do not run advertising or analytics trackers.
  • Cookies. We set only the cookies required to keep you signed in. There are no advertising or third-party tracking cookies.

How we use it

We use your data to:

  • create and secure your account and send you sign-in codes;
  • turn your journey text into a travel record and let you change it;
  • keep your records available to you between visits;
  • detect abuse and keep the service running;
  • answer your messages to support.

Legal bases

Under the UK GDPR and the EU GDPR we rely on: performance of a contract (providing the service you asked for); our legitimate interests in keeping the service secure and improving it, balanced against your rights; and your consent where we ask for it, for example when you choose to sign in with Google. You can withdraw consent at any time by deleting your account.

Who processes your data for us

We do not sell personal data and we do not share it with advertisers. The following providers process data on our instructions so that Dochuki can run:

  • Supabase (database and sign-in), hosted in the Tokyo region. Stores your account and your journeys.
  • Vercel (website hosting and compute). Serves the site and runs the agent; server functions run in the Tokyo region.
  • Anthropic (the AI model). Receives the text of your journey and your follow-up requests so the model can write the record. It does not receive your email address or account identifiers.
  • Google Maps Platform, SerpApi, Firecrawl and public weather data (Japan Meteorological Agency via Open-Meteo). The agent sends them the place names, dates and search terms from your request to look up transit, hotels, opening hours and weather. They do not receive your identity.
  • Resend (email delivery). Sends your sign-in code emails from auth.dochuki.com.
  • Google (sign-in). If you choose "Continue with Google", Google processes your sign-in under its own privacy policy.

International transfers

Your account and journey data are stored in Japan. Some providers above process data in the United States or other countries. Where data leaves the UK or the European Economic Area, we rely on the providers' standard contractual clauses or an adequacy decision.

How long we keep it

We keep your account and journeys until you delete them or ask us to. Server logs are kept for up to 30 days. Backups are rotated within 30 days of deletion. If an account is unused for two years we may delete it after notifying the email address on file.

Your rights

You can ask us to access, correct, export or delete your personal data, to restrict or object to processing, and you have the right to complain to a supervisory authority (in the UK, the Information Commissioner's Office). Write to support@dochuki.com and we will respond within one month. Deleting your account removes your journeys and records.

Children

Dochuki is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Changes

If we change this policy in a way that matters, we will post the new version here with a new effective date and, for significant changes, tell you by email before they take effect.

Contact

TAROTAP LTD, 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom. Email: support@dochuki.com.