The operator (the “Operator”) of the voice-training application Voish (the “App”) recognizes the importance of protecting the personal information of people registered with the App (“Users”). The Operator complies with Japan’s Act on the Protection of Personal Information (the “Personal Information Protection Act”) and strives to handle and protect that information appropriately in accordance with this Privacy Policy.
1. In this Privacy Policy, “personal information” and “retained personal data” have the meanings defined in the Personal Information Protection Act. Other terms follow the definitions in the Voish Terms of Use (the “Terms of Use”).
2. The Operator obtains the following personal information through the App and uses it for the stated purposes.
(1) Information obtained from Users
① Information obtained:
1) Information registered by the User in the App, including username, email address, password, gender (optional) and date of birth (optional).
2) Audio or video of mouth opening and closing received from the User through the App (“User Data”).
② Purposes of use:
• To verify or manage App user information.
• To provide App functions and services.
• To improve the accuracy of voice assessment.
• To process subscription payments from paid Users.
• To send direct marketing messages, advertisements, notices and guidance from the Operator.
• To carry out actions of the Operator under the Terms of Use.
• To send administrative communications concerning App operation.
• To respond to violations of the Terms of Use.
• To help improve the App and develop new services.
• To conduct marketing analysis for the App or the expansion of other services.
• For other purposes incidental to the above.
(2) Information obtained through the App’s inquiry form
① Information obtained: name, email address and inquiry message.
② Purpose of use: to respond to inquiries and similar requests.
3. The Operator automatically obtains the following information and uses it for the stated purpose.
① Information obtained: the User’s App usage, including scores, formant data and names of lessons taken.
② Purpose of use: to improve the App.
4. Credit card numbers are generally handled through the systems of the app marketplace provider that distributes the App. The Operator is therefore not directly involved in obtaining, using or providing that information and does not retain it.
5. The Operator does not store User Data on the App’s servers. However, the Operator may manage, analyze and aggregate accumulated data from the App’s voice-assessment function, which does not include information identifying individual Users, and publish it as statistical data.
6. Except as permitted by the Personal Information Protection Act or other laws, the Operator does not, without User consent, handle personal information beyond what is necessary to achieve the purposes of use or provide it to third parties. The following cases are exceptions. If the individual requests notification of the purposes of use, the Operator will notify them following a procedure equivalent to paragraph 8.
(1) When based on laws or regulations.
(2) When necessary to protect a person’s life, body or property and obtaining User consent is difficult.
(3) When especially necessary to improve public health or promote the sound development of children and obtaining User consent is difficult.
(4) When cooperation is necessary for a national or local government body, or its contractor, to perform statutory duties, and obtaining User consent could hinder their performance.
7. The Operator obtains personal information appropriately and does not use deception or other improper means. The Operator also does not use personal information in a way that could encourage or induce unlawful or unjust acts.
8. The Operator takes necessary and appropriate security measures to manage retained personal data, including preventing leakage, loss or damage, and provides necessary and appropriate supervision of those who handle it. Security measures are as follows.
(1) To ensure appropriate handling of retained personal data, this Policy sets out compliance with applicable laws and the contact point for questions and complaints.
(2) Handling methods and responsible persons are specified for each stage, including acquisition, use, storage, provision, deletion and disposal, and data is handled according to procedures established by the Operator.
(3) Organizational security measures:
① The representative personally serves as the person responsible for retained personal data. The tasks and scope involving personal data are clarified, and facts or indications of violations of the Personal Information Protection Act or the Operator’s rules are monitored as needed.
② Data handling is checked regularly and reviewed objectively, without overconfidence in the Operator’s own practices.
(4) Personnel security measures:
① Efforts are made to strengthen awareness and improve knowledge concerning the handling of retained personal data.
② Retained personal data is kept confidential.
(5) Physical security measures:
① Data-handling areas are limited, with restrictions on third-party entry, exit and removal of data.
② Measures prevent theft or loss of equipment handling retained personal data. When equipment is transported, measures also ensure that personal data cannot easily be identified.
(6) Technical security measures:
① Retained personal data is protected by passwords, access controls and similar measures.
② Mechanisms such as antivirus protection and encrypted communications prevent unauthorized access to retained personal data.
(7) The Operator does not intentionally store retained personal data abroad or have it handled abroad.
9. Except where disclosure is permitted by the Personal Information Protection Act or other laws, the Operator does not provide personal information to third parties without prior User consent. However, the following do not constitute third-party provision under this paragraph.
(1) Provision accompanying outsourcing of all or part of personal-information handling within the scope necessary to achieve the purposes of use.
(2) Provision accompanying business succession through a merger or other cause.
(3) Joint use in accordance with the Personal Information Protection Act.
10. When a User requests disclosure of retained personal data or records of third-party provision under the Personal Information Protection Act, the Operator confirms that the request is from the User personally and discloses the information without delay. If no such data or records exist, the User is notified. This does not apply where the Operator has no disclosure obligation under that Act or other laws.
11. If a User requests correction, addition or deletion of retained personal data (“Correction, etc.”) under the Personal Information Protection Act, the Operator verifies that the request is from the User personally and promptly conducts the necessary investigation within the scope required for the purposes of use. Based on the result, the Operator makes the Correction, etc. and notifies the User, or notifies them of a decision not to do so. This does not apply where the Operator has no such obligation under that Act or other laws.
12. If a User requests suspension of use or provision, or erasure, of retained personal data (“Suspension, etc.”) under the Personal Information Protection Act and the request is found to have grounds, the Operator verifies that it is from the User personally, promptly carries out the Suspension, etc. and notifies the User. This does not apply where the Operator has no such obligation under that Act or other laws.
13. For questions or inquiries about this Policy, contact the Operator through the App’s inquiry form or a similar channel.
14. The Operator reviews personal-information handling practices as appropriate and strives for continuous improvement. This Policy may be revised when necessary, using the revision procedure in the Terms of Use.
Application Privacy Policy disclosures
• Name of the application provider obtaining information: please inquire under paragraph 13.
• Items obtained, collection methods and stated purposes: see paragraphs 2 and 3.
• Notification/publication and user participation: displayed and consent obtained upon user registration.
• External transmission, third-party provision or information-collection modules: none.
• Contact point: see paragraph 13.
• Procedure for changing this Policy: see paragraph 14.