Privacy Policy

Article 1 Period, Object, Region, and Method of Use of Personal Data

1. Period: During the operation period of the Company.
2. The Company will not share your personal information with companies, organizations, or individuals outside the Company unless one of the following conditions is met:
   • (1) With your prior consent;
   • (2) Affiliated companies of the Company;
   • (3) Cooperation with legal investigations by judicial units;
   • (4) Cooperation with relevant authorities for investigation or use as required by duty;
   • (5) For legal reasons: the Company will, when necessary, provide appropriate information to statutory authorities in accordance with Japanese laws, orders, subpoenas, judgments, and disposal requests, which may include your personal data;
   • (6) Organizational adjustments: If the Company conducts organizational adjustments, it will ensure the confidentiality of all personal data involved in these adjustments and notify you before transferring personal data and being bound by another privacy declaration;
   • (7) Internal analysis and research purposes: If the Company needs to use your data for internal teaching, statistical analysis, and research purposes, your data will be appropriately de-identified beforehand;
   • (8) To enable you to fully use the service, your personal data will be disclosed to third parties providing services, such as medical clinics or professionals including doctors and nurses. These third parties will follow the regulations of the competent authority or relevant professional ethics to properly manage the personal data you provide and inform you of relevant matters when using it; and
   • (9) Outsourcing: If the Company provides your data to outsourced vendors who have signed outsourcing contracts with the Company (including the Company's partners, medical institutions, system maintenance vendors, service providers, etc.), the Company will require the outsourced vendors to establish security measures and only use your data for performing services for the Company, and comply with the Company's personal data protection management policy and any other applicable confidentiality and security measures.
3. If the Company processes (masks, encrypts, obfuscates, etc.) and utilizes the data you provide in a de-identified manner, the de-identified data will no longer be associated with your personal identity. You understand and acknowledge that the Company has no obligation to follow personal data protection procedures for data that has already been de-identified if the use of such de-identified data does not infringe upon your or any third party's legal rights.
4. Region: The actual operating region of the Company.
5. Method of use: In compliance with legal requirements.
6. Storage method: The Company will provide technical and security maintenance measures in accordance with relevant legal regulations to properly protect your personal data.

Article 2 Collection Method

The Company will collect your personal data through the registration of members and/or users of the Service application or legally obtained through other marketing activities (including but not limited to your participation in marketing activities or obtained from cooperation partners of the Company).

Article 3 Collection Purposes

1. The Company will collect, process, and utilize your personal data for all necessary purposes within the operation of the service and to assist in the operation of the Company, including but not limited to:
   • (1) Operating businesses in accordance with business registration items or organizational articles;
   • (2) Providing and maintaining the service;
   • (3) Developing and improving service content;
   • (4) Engaging in market research, marketing, and recording customer consumption records and related payment information based on the necessity of managing customer data. Marketing, customer management, services, and other business-related matters.
   • (5) Preventing unauthorized use, such as unauthorized access.
2. The specific purposes for which the Company collects, processes, utilizes, and retains your personal data are as follows:
   • (1) Personnel management;
   • (2) Public health or infectious disease prevention and control;
   • (3) Collection, processing, and utilization of personal data by non-governmental organizations according to statutory obligations;
   • (4) Credit card, cash card, transfer card, or electronic ticketing business;
   • (5) Contracts, similar contracts, or other legal relationship matters;
   • (6) Consumer and customer management and service;
   • (7) Consumer protection;
   • (8) Business and technical information;
   • (9) Procurement and supply management;
   • (10) Education or training administration;
   • (11) Industry-academia cooperation;
   • (12) Information (communication) services;
   • (13) Information (communication) and database management;
   • (14) Information security and management;
   • (15) Employment and service management;
   • (16) Online shopping and other e-commerce services;
   • (17) Advertising or commercial activity management;
   • (18) Health administration;
   • (19) Investigation, statistics, and research analysis;
   • (20) Academic research;
   • (21) Other businesses in accordance with business registration items or organizational articles; and
   • (22) Other consulting and advisory services.

Article 4 Categories of Personal Data Collected

1. The personal data collected by the Company includes the following contents (hereinafter referred to as "personal data"):
   • (1) Personal basic information: gender, age, ID number, phone number, address, email, certificate number, and other personal information that can identify and contact you.
   • (2) Financial and payment information: credit card number, financial institution account information, electronic account information provided by third-party payment service providers, and other payment information disclosed during the process of bearing the service fees.
   • (3) Technical data: technical data generated by your use of the service, such as IP address, login time, location data, financial transaction information, and other data that can identify personal leisure activities, interests, lifestyle, etc.
   • (4) Special personal data: height, weight, blood type, heart rate, heart rhythm, blood pressure, lifestyle, health habits, past medical diagnoses and examinations, medical history, family medical history, medical information, use of specific medications, physiological information sensed by equipment, and other information related to personal physiological characteristics necessary for symptom assessment.
   • (5) Other data directly or indirectly identifiable to users related to the service.
2. The categories of personal data collected above include:
   • (1) Personal identifiers;
   • (2) Financial identifiers;
   • (3) Identifiers in government data;
   • (4) Personal descriptions;
   • (5) Physical descriptions;
   • (6) Habits;
   • (7) Personality;
   • (8) Family situations;
   • (9) Details of other family members;
   • (10) Residence and facilities;
   • (11) Travel and other migration details;
   • (12) Leisure activities and interests;
   • (13) Lifestyle;
   • (14) Occupation;
   • (15) Accidents or other incidents and related circumstances;
   • (16) Health and safety records;
   • (17) Financial transactions;
   • (18) Health records;
   • (19) Race or ethnic origin;
   • (20) Other judicial and administrative penalties;
   • (21) Criminal suspicion information; and
   • (22) Unclassified data.

Article 5 Source of Personal Data (Applicable when personal data is indirectly collected not provided by the data subject)

1. In addition to directly providing personal data to the Company, the Company may also obtain your personal data from related cooperating organizations involved in the service. The sources obtained by the Company are as follows:
   • (1) Your relatives, family members, spouses, caregivers, or persons designated by you;
   • (2) Specialized professionals matched by you using the Company's services, such as medical institutions, doctors, and nurses; and
   • (3) Information automatically generated by you using the Company's service content, such as information translating symptom names.
2. The entity that obtains your personal data in the preceding paragraph has provided the Company with the legal means to process and utilize your personal information in accordance with the relevant provisions of the applicable laws and regulations, and the Company has informed you again of the notification items set forth in this policy when providing you with this service.

Article 6 Exercise of Rights

1. Rights that you may exercise against the Company:
   • (1) Inquire, request access, or request copies from the Company;
   • (2) Request supplementation or correction from the Company; and
   • (3) Request the Company to stop collecting, processing, or using, and request deletion.
2. Method of exercising rights:
   Submit an application to the Company in writing. You may send an email to [support@imedical.jp] (the Company will respond based on the email received to avoid email system failures or other reasons) or contact the Company in writing by mail. The Company reserves the right to refuse requests made orally, by phone, or by other means not expressed in writing or on paper.
3. Before processing your request under this Article, the Company may request you to provide relevant information to prove your identity, and you should specify the information to be reviewed, corrected, or removed. The Company is entitled to charge you necessary costs.
4. If the Company has concerns about responding to your requests to exercise the rights of the data subject due to national security, diplomacy, and military secrets, overall economic interests, other major national interests, hindrance to the performance of statutory duties by public authorities, or major interests of the Company or third parties, the Company will refuse your request and provide reasons for the refusal for your reference.

Article 7 Accuracy of Personal Data

You may decide whether to provide any personal data requested by the Company. You should ensure that all personal data provided to the Company is complete, accurate, true, timely, and correct. Failure to provide personal data as requested may result in your inability to continue using the service. Please understand.

Article 8 Effects of Not Providing Personal Data on Rights

If you fail to provide relevant personal data, the Company will be unable to fully perform the service content of the Company, and depending on the specific situation, the Company may suspend part of the service, terminate the service provided to you directly, or refuse to enter into a service contract with you. Please understand.

Article 9 Applicable Law and Dispute Resolution

1. All matters related to this Policy shall be interpreted and enforced in accordance with Japanese law.
2. In the event of a dispute arising from the preceding paragraph, both parties shall promptly negotiate and resolve it amicably. If litigation is involved, both parties agree to submit to the jurisdiction of the Tokyo District Court as the court of first instance.

Article 10 Others

1. If you continue to use the service, it means that you agree to this Policy and any updates. This Policy will be appropriately amended in accordance with legal revisions and technological advances and updated on the Company's website or elsewhere for you to view the Policy. If you have any opinions, questions, or suggestions regarding this Policy, please contact the Company through the contact information provided in Article 6 above.
2. The Company may provide translated versions of this Policy. The translation is for reference only. If there is any inconsistency or conflict between the translated version and the Japanese version, the Japanese version shall prevail.