Privacy Policy

This Privacy Policy applies to our app/service "moshimo-series" (the "App"). The App may use Google OAuth/Google APIs and Apple ID OAuth (Sign in with Apple) to access certain user information ("Google user data" and "Apple user data", respectively).

IMD Inc. (the “Company”) recognizes the importance of protecting all personal information handled by the Company as a social responsibility, and complies with applicable laws and regulations related to personal information as well as other relevant rules and guidelines, in order to protect individuals’ rights.

In addition, in order to implement the policies set forth below, the Company will establish a personal information protection management system and, while continuously monitoring trends in the latest IT technologies, changes in social requirements, and changes in the business environment, the Company declares that it will work company-wide to continually improve the system.

Basic Policy on Personal Information Protection

• The Company appropriately acquires, uses, and provides personal information handled in connection with employment and personnel management of employees, and will not handle such personal information beyond the scope necessary to achieve the specified purposes of use. The Company will also implement measures to ensure this.
• The Company complies with laws and regulations concerning the handling of personal information, as well as national guidelines and other standards.
• The Company will take reasonable security measures against risks such as leakage, loss, or damage of personal information, invest management resources appropriate to the actual state of the business, and continuously improve its security framework. In the unlikely event of an incident, the Company will promptly implement corrective actions.
• The Company will respond promptly and sincerely to complaints and inquiries regarding the handling of personal information.
• The Company will review and continually improve the personal information protection management system in a timely and appropriate manner, based on changes in the environment surrounding the Company and the actual circumstances.

Policy for Handling Personal Information and App Data (moshimo-series)

1. Data We Access (Data We Handle)

In the App, we obtain the following information as identifiers for user authentication and service operation (including, when Google OAuth/Google APIs or Apple ID OAuth (Sign in with Apple) are used, information obtained from those OAuth providers ("Google user data" / "Apple user data")):

• Email address
• Anonymized identifier (e.g., in the case of OAuth authentication)
• Identifier of the device used to access the service (if available)
• Nickname (if available)

Additional Disclosure for Google User Data

When the App uses Google OAuth/Google APIs, it may access the following Google user data from Google APIs:

• Google Account email address
• Basic profile information (e.g., display name, only to the extent necessary for OAuth authentication and account linking)

Additional Disclosure for Apple User Data

When the App uses Apple ID OAuth (Sign in with Apple), it may access the following Apple user data from Apple:

• Apple Account email address (if the user chooses "Hide My Email", this may be a private relay email address)
• Anonymized identifier (a user identifier issued by Apple for the App)
• Basic profile information (e.g., name, which may be provided only on first sign-in; we use it only to the extent provided)

2. Purposes of Use

In the app and services, we use the collected data for the following purposes:

With regard to the content written in the "Keyed Note" feature, we apply both distribution and encryption using our proprietary technology (patent pending) across the cloud and the user's smartphone. The content is stored as data that is not meaningful by itself, and therefore cannot be viewed by anyone, including the Company, unless the user restores it through biometric authentication.

In addition, the contents of "My Watch" and the "Friends List" are stored in the cloud, but we do not use them for any purpose other than providing the App's features.

• User authentication (user identification and security)
• Notifications to users (we do not send advertisements via email address)
• How we address users within the service (mainly by nickname)

3. Data Sharing

We do not provide, share, sell, or transfer personal information (including Google user data and Apple user data) to any third party, whether free of charge or for a fee. Except where we have the user's consent or are required to do so by law. We do not use Google user data or Apple user data for advertising, marketing, or analytics.

Our app's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. This applies to any Google user data accessed via Google OAuth/Google APIs.

We also use Apple user data received from Apple ID OAuth (Sign in with Apple) only to the extent necessary to achieve the purposes described in this policy, and we do not provide or sell it to third parties. For Apple's privacy policy, please refer to https://www.apple.com/legal/privacy/.

4. Data Protection and Storage

We handle collected data as follows:

• Encryption at or above the industry standard level for the current era
• Processing on Linux OS (we do not use Windows OS)
• Multi-layer security for storage hosts, including VPN, access authentication, restricted personnel access, and automated monitoring
• Stored in specific databases; not handled in raw file format
• For certain particularly important information, stored using a patent-pending distributed encryption system

We apply equivalent protection measures to Google user data obtained via Google OAuth/Google APIs and Apple user data obtained via Apple ID OAuth (Sign in with Apple), and handle it only to the extent necessary to achieve the purposes described above.

5. Data Retention and Deletion

We retain data for as long as the user maintains an account associated with the relevant email address.

If the Company closes a user’s account, we retain the data as a backup for at least three (3) months, and then delete it thereafter.

If the user proactively requests deletion, complete deletion is possible by either of the following methods:

• Delete the account from within the app (immediate deletion; not recoverable)
• Contact support: https://support.imd.jp/form/