Personal Information Policy

Last updated: 2026-05-18

⚠️ This page is a pre-launch draft. Legal review is required before publication. This document is an appendix to the Privacy Policy; both must remain consistent.

1. Categories of personal information collected

See Privacy Policy §2. This page and the Privacy Policy together satisfy the disclosure requirements of Article 17 of Japan’s Act on the Protection of Personal Information (APPI).

2. Purposes of use

See Privacy Policy §3.

We do not share personal data with third parties as a rule. Exceptions: only with the user’s explicit consent (e.g. online-consultation handoffs) or where disclosure is required by law.

4. Anonymised aggregate information

From Phase 2.5 onward, if we adopt a Ubie Ads–style B2B medical-marketing model, we may create and share anonymised aggregate information under the following rules:

Anonymisation per APPI Article 43
Opt-in (explicit consent) required
Public disclosure of anonymisation methods on this page
Safeguards for the anonymised information

Anonymised data is not created or shared during Phase 1.

5. Procedures for access, correction, deletion, suspension

See Privacy Policy §7.

6. Personal Information Protection Manager

Item	Detail
PI Protection Manager	CHEN Yi (Representative Member, Crealize LLC)
Contact	support@mairi.health (subject: “Privacy”)
Department	crealize.llc Security & Privacy team

7. Safeguards (APPI Article 23)

Organisational: appointment of a privacy manager, least-privilege access, training programs
Personnel: recurring staff training, signed confidentiality agreements
Physical: server-room access control (governed by our cloud providers)
Technical: TLS 1.3, AES-256-GCM, audit logs, multi-factor authentication

8. Complaint handling

Send complaints to support@mairi.health.

External regulator: Personal Information Protection Commission of Japan.

Mairi is not a medical device (SaMD under Japan's PMD Act). Consult a licensed clinician for diagnosis, treatment, or prescription.