Privacy Policy

Last Revised: May 25, 2026
Enacted: February 17, 2023

1. Basic Policy 

1. nonat Inc. (Address: Kawaharu Building 202, 5-15 Soden-Sakaemachi, Gifu-shi, Gifu 502-0847, Japan; Representative: Keisuke Ito) (the “Company,” “we” or “us”)) hereby sets forth this privacy policy (the “Policy”) regarding the handling of personal information of users (“you”) of the Company’s services (the “Services”), and promotes the protection of personal information by complying with the Act on the Protection of Personal Information of Japan (Act No. 57 of 2003; the “APPI”) and other relevant laws, regulations, and guidelines (including the Guidelines on the Security Management of Medical Information Systems and the Ethical Guidelines for Life Sciences and Medical Research Involving Human Subjects).
2. The Company establishes an appropriate security management system and implements technical, physical, and organizational safeguards to prevent leakage, loss, or damage of personal data.
3. The Company continually improves the handling of personal data taking into account our business activities, social conditions, and technological trends.

2. Definitions 

<Term>	<Overview>
Personal Information	“Personal Information” as defined in the APPI meaning information relating to a living individual that can identify a specific person (e.g., name, address, e-mail address), including information that can easily identify a specific individual when collated with other information or that contains an individual identification code.
Personal Data	“Personal Data” as defined in the APPI, meaning Personal Information that constitutes a personal information database, etc.
Pseudonymously Processed Information	“Pseudonymously Processed Information” as defined in the APPI, meaning information obtained by processing personal information so that a specific individual cannot be identified unless collated with other information.

3. Personal Information We Collect 

The Company primarily collects personal information as set forth below. With respect to the acquisition of Special Care-Required Personal Information under the APPI, we follow the procedures prescribed by law.

<Situation of Collection>	<Main Items Collected>
Entries in web forms / inquiries	Name, address, contact details, affiliation, inquiry details, and other information registered via the form
User registration for  the Services; use of the Services and the Company’s website	Name, address, contact details date of birth, height and weight, pregnancy-related information, and other registration information, login information, profile, usage logs, device information, sensor data, fetal information, and other information related to service use. Internet usage information (information collected by the Company via cookies or provided to the Company by third parties, such as browsing history on websites, search keywords, counts of advertisement views/clicks, time spent, method of browsing (browser type), the device environment used when viewing, cookie information, IP address, and device identifiers)
Transactions related to the Services and other transactions conducted by the Company	Payment information for the Services, contract information
Participation in clinical research	Age, weeks of gestation, vital signs, fetal signals, etc.
Recruitment applicants	Name, address, age, sex, date of birth, contact details, and other information included in the entry sheet; information regarding communications between the Company and applicants conducted for recruitment activities

4. Purposes of Use of Personal Information 

The Company uses collected personal information within the scope of the following purposes:

1. Provision, operation, and quality improvement of the Services
2. User support and responses to inquiries
3. Implementation of clinical research, data analysis, and academic presentations
4. Research and development of medical AI models and medical devices, and safety evaluation
5. Development and improvement of algorithms related to the Services (including use as training data for machine learning models)
6. Marketing and public relations (only with prior consent)
7. Prevention of and responses to violations of the Terms of Use and fraudulent activities
8. Fulfillment of legal obligations and reporting to governmental and supervisory authorities
9. Recruitment selection; administrative communications to applicants; notification of results; and management and improvement of recruitment processes

5. Security Control Measures 

The Company takes necessary and appropriate measures to prevent leakage, loss, or damage of personal information and to otherwise ensure its secure management. For details of the security management measures the Company implements, please contact us at the Contact Point set out in Section 12.

6. Provision to Third Parties, Outsourcing, and Joint Use 

1. Except as permitted by law, the Company does not provide personal data to third parties without the individual’s consent.
2. The Company may outsource the handling of personal data, to the extent necessary to achieve the purposes of use. In such cases, the Company enters into appropriate agreements and provides necessary supervision.
3. When jointly using personal information, the Company publicly announces the fact of joint use, the purposes of use, the items to be jointly used, the scope of joint users, and the party responsible for managing the jointly used information.

7. Special Provisions for Clinical Research 

1. For personal information collected in connection with participation in clinical research, in addition to this Policy, the Company collects such information in accordance with research plans approved by the Ethics Review Committee of the Graduate School of Medicine, Gifu University.
2. At the analysis stage, the Company conducts appropriate processing such as the creation of Pseudonymously Processed Information so that subjects cannot be identified.
3. When publishing results, the Company takes sufficient care to prevent identification of individuals and endeavors to carry out appropriate processing.
4. Research participants may exercise rights such as withdrawal of consent and deletion of data (and if a request cannot be accommodated, the reasons will be explained).

8. Use of Cookies and External Data Transmission Services 

The Company uses cookies, web beacons, and similar technologies on its website for the purposes of access analytics and improving convenience. As a result, information from the individual’s devices may be transmitted to external service providers.
Main analytics tools: Google Analytics, Matomo Analytics, etc.
You can disable cookies and similar technologies in your browser settings; however, some features may become unavailable.

9. Retention Period of Personal Data 

The Company retains personal data for the period necessary to achieve the purposes of use or for the period required by law, and appropriately disposes of or deletes the data after the period has elapsed.

10. Your Rights 

1. You have the following rights (which may be subject to legal restrictions). To exercise these rights, please contact us at the Contact Point in Section 12.

• Notification of the purposes of use of retained personal data
• Disclosure of retained personal data
• Disclosure of records of provision to third parties
• Correction, addition, or deletion of retained personal data
• Suspension of use, erasure, or suspension of provision to third parties of retained personal data

2. For requests for notification of purposes of use and for disclosure, a fee of JPY 1,000 (tax included) will be charged. Please remit the fee to the Company’s designated bank account. Bank transfer fees shall be borne by the requester.

11. Revisions to This Privacy Policy 

This Policy may be revised due to changes in laws or services. The revised Policy will take effect upon notification to the individual by the method prescribed by the Company or upon posting on the Company’s website. Material changes will be announced in advance on this site.

12. Contact Information 

nonat Inc. — Personal Information Protection Manager
Address: Kawaharu Building 202, 5-15 Soden-Sakaemachi, Gifu-shi, Gifu 502-0847, Japan
E-mail: info@nonat.co.jp
Hours: Weekdays 10:00–17:00 (excluding national holidays and year-end/new-year holidays)