Personal Information Policy
Last updated: 2026-05-18
1. Categories of personal information collected
See Privacy Policy §2. This page and the Privacy Policy together satisfy the disclosure requirements of Article 17 of Japan’s Act on the Protection of Personal Information (APPI).
2. Purposes of use
See Privacy Policy §3.
3. Conditions for sharing with third parties
We do not sell personal data and do not share it with third parties for their own purposes. Exceptions: only with the user’s explicit consent (e.g. online-consultation handoffs) or where disclosure is required by law.
Separately, the symptom check, daily advice and medication scan delegate AI processing to external providers (Google, Anthropic and Google Cloud Vision, all in the US). Under Japan’s APPI that is delegated processing rather than sharing, but the data does leave our systems, so the processors, features and exact data sent are listed in Privacy Policy §4-2.
4. Anonymised aggregate information
From Phase 2.5 onward, if we adopt a Ubie Ads–style B2B medical-marketing model, we may create and share anonymised aggregate information under the following rules:
- Anonymisation per APPI Article 43
- Opt-in (explicit consent) required
- Public disclosure of anonymisation methods on this page
- Safeguards for the anonymised information
Anonymised data is not created or shared during Phase 1.
5. Procedures for access, correction, deletion, suspension
See Privacy Policy §7.
6. Personal Information Protection Manager
| Item | Detail |
|---|---|
| PI Protection Manager | CHEN Yi (Representative Member, Crealize LLC) |
| Contact | [email protected] (subject: “Privacy”) |
| Department | Crealize LLC Security & Privacy team |
7. Safeguards (APPI Article 23)
- Organisational: appointment of a privacy manager, least-privilege access, training programs
- Personnel: recurring staff training, signed confidentiality agreements
- Physical: server-room access control (governed by our cloud providers)
- Technical: TLS 1.3, AES-256-GCM, audit logs, multi-factor authentication
8. Complaint handling
Send complaints to [email protected].
External regulator: Personal Information Protection Commission of Japan.
Mairi is not a medical device. For identifying, treating or prescribing for an illness, please see a doctor.