Skip to content
Dina (beta)
日本語

Privacy & data use

Dina serves adults managing school, family and staff information. This notice describes current data handling and contact options.

Published / last updated: 12 October 2026

Who operates Dina

BrandStack 株式会社 · 3 Chome-40-1 Takinogawa, Kita City, Tokyo 114-0023, Japan

Information used to provide Dina

School and account details; child and guardian profiles and connections; attendance and correction records; attendance, transport and Moment photos; class bookings; active journey positions; staff profiles, shifts, worked hours and, where used by a school, private documents, address, bank and compensation details. School-entered child support, health, emergency and pickup information may also be handled. Dina does not support My Number collection. Do not upload My Number information or documents.

Purposes and who can access records

Information supports school operations, linked family access, notifications, bookings, staff work, corrections and service security. Schools manage their records and determine the authority for child information and photography. Guardians see the children and school records their accounts are authorized to access. Staff private records are restricted to the staff member and people explicitly granted the relevant permission.

Photos and location are different records

Attendance evidence, Moments, profile portraits and private staff documents have distinct purposes and audiences. Active transport positions come from the authorized adult transport device. Access is limited to authorized journeys and ends at the child’s arrival or access expiry. Dina does not use staff clock photos for facial recognition and does not provide continuous employee GPS tracking.

Providers and processing

Hosting/database/media: OpenAI Sites and Cloudflare. Authentication: Supabase. Configured email: Resend. Optional LINE messaging: LY Corporation. Transport maps: Mapbox. These providers receive information needed for their function. Processing may occur outside Japan. Copies already delivered through email or LINE are held under the recipient’s and provider’s own controls.

Optional native notifications

When push is configured and you enable it, Dina registers this installation’s push token, account, platform, language, timezone and app version. Native Dina follows the device language: Japanese or English. Apple APNs or Google Firebase Cloud Messaging delivers the notification. Lock-screen photos are off by default and require a separate device choice. Private photos use single-use, five-minute access that rechecks current family and school authorization; they are never made public. Delivered notifications may remain on the device under its own settings. Delivery records become eligible for cleanup after 30 days; dormant registrations are disabled after 90 days, and revoked registrations become eligible for removal after a further 90 days. Sign-out disables this installation’s push; account deletion removes registrations through cleanup.

Device storage and measurement

Sign-in and shared devices use essential secure session cookies. Language and appearance preferences use local storage. Moment recovery may keep unsent photo files, captions and tags in account/school-scoped device storage. Public marketing measurement stores daily counts of fixed pages and actions, without visitor identifiers, form values, private paths, queries or referrers, and respects Do Not Track and Global Privacy Control. Existing authenticated operational diagnostics include account/school/device identifiers; raw diagnostics become eligible for aggregation and removal after 90 days through background cleanup. Hosting logs may include technical request and IP information.

Retention, deletion and requests

Record types have different retention and cleanup rules; not all school or staff records expire automatically. Access to attendance and staff clock photos expires after 30 days; physical removal uses asynchronous cleanup. Published Moments follow separate retention rules and do not automatically expire after 30 days. School deletion suspends access immediately and has a seven-day restore period before permanent cleanup starts. Account deletion removes account access but does not automatically delete every school-managed or family record. Contact your school about school records and photography permissions; contact Dina about your account or privacy request. Identity and authority may need verification.

Talk with Dina

hello@dinacheck.com · BrandStack 株式会社