Last Revised: August 12, 2026
Enacted: February 17, 2023
1. Basic Policy
- nonat Inc. (Address: Kawaharu Building 202, 5-15 Soden-Sakaemachi, Gifu-shi, Gifu 502-0847, Japan; Representative: Keisuke Ito) (the “Company,” “we” or “us”) hereby sets forth this privacy policy (the “Policy”) regarding the handling of personal information of users (“you”) of the services “Soete” and “MIKAZUKI” and other services provided by the Company (the “Services”), and promotes the protection of personal information by complying with the Act on the Protection of Personal Information of Japan (Act No. 57 of 2003; the “APPI”) and other relevant laws, regulations, and guidelines (including the Guidelines on the Security Management of Medical Information Systems and the Ethical Guidelines for Life Sciences and Medical Research Involving Human Subjects).
- The Company establishes an appropriate security management system and implements technical, physical, and organizational safeguards to prevent leakage, loss, or damage of personal data.
- The Company continually improves the handling of personal data taking into account our business activities, social conditions, and technological trends.
2. Definitions
| <Term> | <Overview> |
| Personal Information | “Personal Information” as defined in the APPI meaning information relating to a living individual that can identify a specific person (e.g., name, address, e-mail address), including information that can easily identify a specific individual when collated with other information or that contains an individual identification code. |
| Personal Data | “Personal Data” as defined in the APPI, meaning Personal Information that constitutes a personal information database, etc. |
| Pseudonymously Processed Information | “Pseudonymously Processed Information” as defined in the APPI, meaning information obtained by processing personal information so that a specific individual cannot be identified unless collated with other information. |
3. Personal Information We Collect
The Company primarily collects personal information as set forth below. With respect to the acquisition of Special Care-Required Personal Information under the APPI, we follow the procedures prescribed by law.
| <Situation of Collection> | <Main Items Collected> |
| Entries in web forms / inquiries | Name, address, contact details, affiliation, inquiry details, and other information registered via the form |
| User registration for the Services; use of the Services and the Company’s website | Name, address, contact details date of birth, height and weight, pregnancy-related information, and other registration information, login information, profile, usage logs, device information, sensor data, fetal information, and other information related to service use. Internet usage information (information collected by the Company via cookies or provided to the Company by third parties, such as browsing history on websites, search keywords, counts of advertisement views/clicks, time spent, method of browsing (browser type), the device environment used when viewing, cookie information, IP address, and device identifiers) |
| Transactions related to the Services and other transactions conducted by the Company | Payment information for the Services, contract information |
| Participation in clinical research | Age, weeks of gestation, vital signs, fetal signals, etc. |
| Recruitment applicants | Name, address, age, sex, date of birth, contact details, and other information included in the entry sheet; information regarding communications between the Company and applicants conducted for recruitment activities |
4. Purposes of Use of Personal Information
The Company uses collected personal information within the scope of the following purposes:
- Provision, operation, and quality improvement of the Services
- User support and responses to inquiries
- Implementation of clinical research, data analysis, and academic presentations
- Research and development of medical AI models and medical devices, and safety evaluation
- Development and improvement of algorithms related to the Services (including use as training data for machine learning models)
- Marketing and public relations (only with prior consent)
- Prevention of and responses to violations of the Terms of Use and fraudulent activities
- Fulfillment of legal obligations and reporting to governmental and supervisory authorities
- Recruitment selection; administrative communications to applicants; notification of results; and management and improvement of recruitment processes
5. Security Control Measures
The Company takes necessary and appropriate measures to prevent leakage, loss, or damage of personal information and to otherwise ensure its secure management. For details of the security management measures the Company implements, please contact us at the Contact Point set out in Section 12.
6. Provision to Third Parties, Outsourcing, and Joint Use
- Except as permitted by law, the Company does not provide personal data to third parties without the individual’s consent.
- The Company may outsource the handling of personal data, to the extent necessary to achieve the purposes of use. In such cases, the Company enters into appropriate agreements and provides necessary supervision.
- When jointly using personal information, the Company publicly announces the fact of joint use, the purposes of use, the items to be jointly used, the scope of joint users, and the party responsible for managing the jointly used information.
7. Special Provisions for Clinical Research
- For personal information collected in connection with participation in clinical research, in addition to this Policy, the Company collects such information in accordance with research plans approved by the Ethics Review Committee of the Graduate School of Medicine, Gifu University.
- At the analysis stage, the Company conducts appropriate processing such as the creation of Pseudonymously Processed Information so that subjects cannot be identified.
- When publishing results, the Company takes sufficient care to prevent identification of individuals and endeavors to carry out appropriate processing.
- Research participants may exercise rights such as withdrawal of consent and deletion of data (and if a request cannot be accommodated, the reasons will be explained).
8. Use of Cookies and External Data Transmission Services
On the Company’s website, for the purposes of analyzing access status and improving convenience, the Company uses the access analytics tools set out below, and your information may be transmitted from your device to the provider of each tool through cookies and similar technologies. You may stop such transmissions by disabling cookies and similar technologies in your browser settings. In such case, some functions of the Company’s website may become unavailable.
Google Analytics (Provider: Google LLC)
The Company receives the results of the collection and analysis by Google LLC of your browsing history based on cookies set by the Company or by Google, and uses such results to understand and improve how the Company’s website is used. The information transmitted to Google includes the following:
- URL of the page accessed
- IP address
- Identifiers stored using cookies (which do not identify any specific individual)
- Information regarding your browser and device
For Google’s handling of data in Google Analytics, please refer to “How Google uses information from sites or apps that use our services” (https://policies.google.com/technologies/partner-sites).
- Matomo Analytics (Provider: InnoCraft Ltd.)
The information transmitted by Matomo Analytics includes the following:
- URL and title of the page viewed, and the date and time of viewing
- IP address
- Visitor identifiers stored using cookies (which do not identify any specific individual)
- Information regarding your device, such as browser, OS, and screen resolution
- In the applications provided by the Company, for the purposes of detecting defects such as abnormal termination (crashes) of the application and improving quality and safety, the Company uses “Firebase Crashlytics,” a defect analytics service provided by Google LLC, and the following information is transmitted from your device to Google LLC. You may stop such transmission at any time by turning off the “Send crash reports” setting on the application’s settings screen.
- Technical information at the time of abnormal termination of the application
- Information regarding the device you use (model name, OS version, etc.)
- An identifier assigned to each installation of the application
For Google LLC’s handling of the transmitted information, please refer to the following:
Google Privacy Policy: https://policies.google.com/privacy
Privacy and Security in Firebase: https://firebase.google.com/support/privacy
9. Retention Period of Personal Data
The Company retains personal data for the period necessary to achieve the purposes of use or for the period required by law, and appropriately disposes of or deletes the data after the period has elapsed.
10. Your Rights
- You have the following rights (which may be subject to legal restrictions). To exercise these rights, please contact us at the Contact Point in Section 12.
• Notification of the purposes of use of retained personal data
• Disclosure of retained personal data
• Disclosure of records of provision to third parties
• Correction, addition, or deletion of retained personal data
• Suspension of use, erasure, or suspension of provision to third parties of retained personal data
- For requests for notification of purposes of use and for disclosure, a fee of JPY 1,000 (tax included) will be charged. Please remit the fee to the Company’s designated bank account. Bank transfer fees shall be borne by the requester.
11. Revisions to This Privacy Policy
This Policy may be revised due to changes in laws or services. The revised Policy will take effect upon notification to the individual by the method prescribed by the Company or upon posting on the Company’s website. Material changes will be announced in advance on this site.
12. Contact Information
nonat Inc. — Personal Information Protection Manager
Address: Kawaharu Building 202, 5-15 Soden-Sakaemachi, Gifu-shi, Gifu 502-0847, Japan
E-mail: info@nonat.co.jp
Hours: Weekdays 10:00–17:00 (excluding national holidays and year-end/new-year holidays)