Privacy Policy
Last updated: 2026-07-19
1. Operator information
| Item | Detail |
|---|---|
| Operator | Crealize LLC |
| Representative | CHEN Yi (Representative Member, Crealize LLC) |
| Address | #601, 1-4-51 Nishiazabu, Minato-ku, Tokyo 106-0031, Japan |
| Contact | [email protected] |
2. Information we collect
- Email address, user ID (OAuth subject or anonymous ID)
- Payment-related metadata (handled by Apple or Google — Mairi never stores card numbers)
- Vital and medication data synced from HealthKit / Google Fit (used for the patient’s own PHR display; in addition, when you use the AI health advice / symptom check, numeric values are sent over an encrypted connection to the AI sub-processors listed below. Never sold; not used for advertising)
- Device information, IP address, cookies and local storage
- Free-text answers entered during AI symptom check
3. Purposes of use
- Storing and displaying your Personal Health Record (PHR)
- Personalising AI symptom-check responses
- Aggregate, anonymised statistics to improve the service
- Important notices and incident communications
- Legal compliance
4. Third parties and processors
4-1. Sharing with third parties
We do not sell your data and do not share it with third parties for their own purposes. Exceptions, only with your explicit consent:
- Online-consultation handoffs (Phase 1.5+, e.g. online-consultation services)
- Disclosure required by law (court orders, etc.)
4-2. Processors (third-party AI services)
Some features are processed on servers operated by the providers below, under contract and on our instructions. Under Japan’s APPI this is delegated processing (委託) rather than the sharing described in 4-1, but data does leave our systems, so we disclose all of it. Data is sent only when you open that feature and act; nothing is sent in the background or at launch.
| Processor | Feature | Data sent |
|---|---|---|
| Google (Gemini API, US) | Symptom check / Daily advice | The symptom-check questions and your typed answers; your chronic-condition tags, today’s recorded vital values and step count |
| Anthropic (Claude API, US) | Fallback for the above, used only if the Google call fails | Same as above |
| Google Cloud Vision (US) | Reading the printed text on a medication label | The photo you just took of the label (we do not store it) |
No name, date of birth, email address, contact details or device identifier is included in any of these requests. The processors are not permitted to use the data for any purpose other than the one we instruct, and are not permitted to train AI models on it. It is never used for advertising. The in-app consent screen states the same thing.
5. International transfers
For operational reasons, personal data may transit servers operated by the following providers:
- Cloudflare Workers (US / global edge)
- Google AI Studio (US, AI symptom-check & health-advice processing)
- Anthropic API (US, fallback AI)
- Google Cloud Vision API (US, medication-scan OCR)
- Apple App Store / Google Play (US, payment processing)
All transfers are governed by GDPR / APPI standard contractual clauses or equivalent safeguards.
6. Safeguards
- TLS 1.3 in transit
- AES-256-GCM at rest
- Access logs and audit trails retained
- Multi-factor authentication for administrators
- Regular security audits
7. Access, correction, deletion
You may request:
- Disclosure of your data (exported as FHIR / CSV / PDF)
- Correction or deletion
- Suspension of use
Send requests to [email protected]. We respond within 30 days after identity verification.
8. HealthKit data handling (Apple alignment)
- HealthKit data is used to display your own PHR and, when you use the AI health advice / symptom check, numeric values are sent (encrypted) to the AI sub-processors listed above for advice generation.
- Never used for advertising.
- Never sold to third parties.
- HealthKit data is never stored in iCloud (aligns with Apple App Store Review Guideline 5.1.3).
- This page mirrors the Apple App Privacy data-collection disclosure exactly.
9. Inquiries and complaints
| Channel | Contact |
|---|---|
| Personal Information Protection Manager | [email protected] (subject: “Privacy”) |
| Complaints | [email protected] |
| Japan PPC | https://www.ppc.go.jp/en/ |
10. Updates
We may update this policy. We will announce updates on this page and surface material changes inside the app.
Mairi is not a medical device. For identifying, treating or prescribing for an illness, please see a doctor.