What we hold, and what you can do about it.

Kurashi is a membership community for Japanese residents and their families in India, operated from India by its founder. In the language of India's Digital Personal Data Protection Act, 2023 (DPDP), Kurashi is the Data Fiduciary for your personal data and you are the Data Principal.

Two kinds, treated differently. We ask for nothing beyond these, and we do not buy data about you from anyone.

• —Contact details — your email address, and a phone number only if you volunteer one on an enquiry. If you claim a residence, the tower and unit, used once for verification and displayed nowhere.
• —Your profile inside the community — the name you choose, your interests, your language, your home prefecture, and family size as counts and age bands only.
• —What you write — posts and replies on the community board, marketplace listings, digest submissions. These are visible to other approved members by design.
• —A record of your consent — which version of this policy you agreed to, in which language, and when.

Your contact details are never shown to another member. There is no member directory, and there is no way to look someone up. Introductions happen by a message passed along, not by handing out a number.

Your profile is visible to approved members only. Someone who has signed up but not yet been approved sees nothing of it.

Kurashi's own admins can read contact details when they must — to approve a member, or to route an enquiry. Every such read is recorded in an audit log. This is enforced in the database itself, not only in the app.

Private messages between members are visible to the two people in the conversation — and to Kurashi's founder, who is able to open any conversation in order to act on a report. We would rather tell you that plainly than let you assume otherwise: with one person running moderation, there is no way to look into a complaint without reading what was said. We do not read conversations for any other reason.

You can only be written to by someone who has seen something you published — a listing, or a question on the board. There is still no way to browse members and no way to message a stranger out of nowhere, and blocking someone stops messages in both directions.

All personal data sits in a Postgres database in Mumbai (AWS ap-south-1), with backups in the same region. The parts of the site that run code on a server run in Mumbai too.

Two things leave India, and only these: emails we send you (a sign-in code, a digest) pass through an email provider that processes in the United States and receives only your address and first name; and if you talk to us on WhatsApp or LINE, that conversation lives on their servers, as any such conversation would. We store the request and its outcome, not the transcript.

• —To let you in and keep the door honest — verifying that an invitation is real and that a member vouches for you.
• —To run the community — showing you the board, the events, the digest, and letting neighbours reach each other through us.
• —To answer what you ask us — a leasing or purchase enquiry goes to Kurashi and to nobody else. It is never auto-forwarded to a sales team, and sales never contacts you first.

We do not sell personal data, we do not share it with advertisers, and we do not use it to profile you.

For as long as you are a member, and then no longer than you allow. If you leave, see the next section — the erasure is real, not a hidden flag on a row.

Two things survive an erasure, and neither points at you: one audit line recording that an account was erased, and any leasing enquiry you raised — kept as an anonymous business record with your identity removed.

Under DPDP you may see what we hold, correct it, and have it erased. All three work from inside the app, without writing to anyone:

• —Take a copy — download everything we hold as a single file, from /profile.
• —Correct it — edit your name, interests and preferences on /profile at any time.
• —Erase it — immediately, or on a 30-day timer you can cancel while it runs. Also available without signing in, at /delete-account.
• —Withdraw consent — withdrawing consent is as easy as giving it: erasing your account withdraws it entirely.

Write to a person, not a form. Grievances are answered within 30 days, as DPDP requires.

This is version 2026-08-v1. Your consent is recorded against the version you were shown, in the language you read it in. If we change anything material, the version changes with it and we ask you again — we do not carry an old agreement forward onto new terms.

See also our terms of membership.