Privacy Policy

Article 1 (Information We Collect)

In providing the Service, we collect the following information:

1. Registration information: email address, password (stored only in encrypted form) and name
2. Information entered by Users: URLs of saved Original Posts, notes, Cards, Menus, ratings, tags and the content of reports
3. Information sent for AI Analysis: images and videos taken by Users themselves. Videos are deleted after the analysis is complete (Article 6).
4. Information collected automatically: IP address, device and browser type, date and time of access, operation logs (including records of the display of and clicks on advertisements within the Service) and the number of times AI Analysis has been used
5. Information stored on the device: information for keeping you logged in, and screen settings (such as whether you have seen the first-time guide)
6. Inquiry information: names, contact details and other content included in inquiries to us and in requests from rights holders

Article 2 (Purposes of Use)

1. Providing the Service, verifying identity and keeping you logged in
2. Generating Cards through AI Analysis, creating Menus and providing sharing features
3. Preventing misuse, responding to reports, understanding usage and improving the Service
4. Delivering advertisements within the Service (including selecting advertisements according to the sports of the Cards a User has saved and of the page being displayed), measuring the effectiveness of advertisements, providing statistics to advertisers and displaying referral links to websites that sell products. We provide advertisers only with aggregated figures that cannot identify individuals and do not provide them with Users' personal information.
5. Responding to inquiries and to requests from rights holders
6. Contacting Users (registration confirmation, password reset and notices of important changes)
7. Responding as required by law

Article 3 (Provision to Third Parties)

We do not provide personal information to third parties without obtaining Users' prior consent, except in the following cases:

1. Where required by law
2. Where it is necessary to protect a person's life, body or property and it is difficult to obtain the User's consent
3. Where it is necessary to cooperate with a national government agency, a local government or a person entrusted by them in performing affairs prescribed by law, and obtaining the User's consent is likely to impede the performance of such affairs
4. Where personal information is provided in connection with the succession of business due to a merger or other reasons

Article 4 (Entrustment and Providers Outside Japan)

1. To provide the Service, we entrust the handling of personal information to the following providers, or process personal information through their services. All of these providers are located outside Japan (in the United States).
2. We exercise necessary and appropriate supervision over these providers so that personal information is managed securely.

• Supabase, Inc. (United States): database, authentication and temporary storage of uploaded files
• Vercel, Inc. (United States): hosting and server processing
• Google LLC (United States): AI Analysis (Gemini API). Publicly available information of Original Posts (limited to YouTube videos and TikTok captions), Users' notes, and images and videos taken by Users are sent.
• Cloudflare, Inc. (United States): detecting fraudulent sign-ups and logins by bots

Article 5 (External Transmission)

In the Service, information is sent from Users' devices to external providers in the following cases. The handling of the sent information is governed by each provider's privacy policy.

• Playing and displaying Original Posts: when the official embeds of Instagram, TikTok or YouTube are displayed, your IP address, device and browser information, the address of the Service's page and information that each service has stored on your device (cookies, etc.) are sent to each service, for the purpose of playing and displaying the Original Post.
• Displaying thumbnail images: when thumbnail images of Original Posts are displayed, your IP address and device and browser information are sent to each service's image delivery servers, for the purpose of displaying the thumbnail images.
• Bot detection: on the sign-up and login screens, your IP address, device and browser information and on-screen interaction information are sent to Cloudflare, Inc. (Turnstile), for the purpose of preventing fraudulent sign-ups and logins by bots.
• Fonts: when the introduction page of the Service (/lp) or the training articles (/labo) are displayed, your IP address and browser information are sent to Google LLC (Google Fonts), for the purpose of displaying fonts.
• Advertisements and referral links: advertisements within the Service are delivered by us, and we do not use measurement programs (tags) of advertising businesses. Only when a User selects an advertisement or a referral link to a website that sells products (such as Amazon.co.jp or Rakuten Ichiba) does that website open, and your IP address, device and browser information and information indicating which advertisement or link you came from (which does not include information that identifies you) are sent to its operator, for the purpose of displaying the website, measuring the effectiveness of advertisements and confirming purchases made through referrals.

Article 6 (Retention and Deletion)

1. Users may delete their account at any time via "Delete account" on the settings screen. When an account is deleted, registration information, Cards, Menus, ratings and tags are deleted and cannot be restored.
2. Videos uploaded for AI Analysis are deleted promptly after the analysis is complete.
3. Information for identifying Original Posts (URLs) is shared by multiple Users and therefore remains on the Service even after an account is deleted. It does not include any information that identifies the User.
4. Records of reports and records of operator actions may be retained for a certain period after an account is deleted in order to prevent misuse.
5. When an account is deleted, records of the display of and clicks on advertisements are disassociated from the User and are thereafter used only for aggregated statistics.
6. Access logs are deleted after the period set by our entrusted providers.

Article 7 (Security Measures)

To prevent leakage, loss or damage of personal information, we take the following measures:

1. Organizational measures: we appoint a person responsible for handling personal information and regularly review how it is handled.
2. Human measures: we provide the necessary training on handling personal information to persons involved in operating the Service and require them to maintain confidentiality.
3. Physical measures: we prevent the theft and loss of devices and media used for operations.
4. Technical measures: we encrypt communications, apply row-level access control in the database, use two-factor authentication for operator accounts and limit access rights.
5. Understanding the external environment: we take the above measures after understanding the personal information protection system of the United States, where our entrusted providers are located.
6. In the event of a leak of personal information or a similar incident, we will report it to the Personal Information Protection Commission and notify Users in accordance with the law.

Article 8 (Users' Rights)

1. Users may check and correct their registration information, or delete their account, from the settings screen.
2. Users may request disclosure of their personal information held by us (including disclosure of records of provision to third parties), correction, addition or deletion of its content, suspension of use or erasure, or suspension of provision to third parties.
3. Requests under the preceding paragraph are accepted at the contact point in Article 11. We will respond without delay in accordance with the law after verifying the requester's identity.

Article 9 (Personal Information of Minors)

1. The Service is intended for persons engaged in coaching sports or other physical activities and is not directed at minors.
2. When we receive a request from the legal guardian of a minor for deletion or the like of the minor's personal information, we will respond after verifying identity.

Article 10 (Changes to This Policy)

1. We may change this Policy when we deem it necessary. The changed Policy takes effect when it is displayed on the Service.
2. When we make changes that significantly affect Users, we will make them known in advance by display on the Service or by other means.

Article 11 (Inquiries and Business Operator Information)

1. Inquiries about the handling of personal information are accepted at support@plaxapp.com.
2. The business operator handling personal information that operates the Service is plax japan (Representative: Hiroaki Morikawa). Our address will be provided without delay upon request.