Privacy Policy
Last updated: June 24, 2026
Article 1 (Information We Collect)
The Service collects the following information: - Account information: Email address, password (stored encrypted) - Profile information: Occupation, interest tags - Article data: URLs saved by Users, article titles, body text, OG metadata - Usage information: Article viewing status (read, skipped, etc.), save dates - When using Google OAuth: Basic Google account profile information (email address, name) When using the Chrome extension, the body text of the page being viewed is retrieved only at the time the User performs a save action (clicking the extension icon). Page content is never automatically retrieved or transmitted without the User's save action.
Article 2 (Purpose of Use)
Collected information is used for the following purposes: - AI-based article classification and prioritization - Recommending articles based on User interests and occupation - Providing personalization features based on tag trends - Improving article judgment accuracy and user experience based on usage analysis - Detecting failures and monitoring performance for stable service operation - Responding to user support inquiries - Fulfilling obligations required by law
Article 3 (Disclosure to Third Parties)
The Operator will not provide User personal information to third parties except in the following cases: - When the User has given consent - When required by law - When providing information to subcontractors within the scope necessary for operating the Service [Commissioned Processing for AI Judgment] The AI judgment feature of this Service sends article titles, body text, and URLs to an external AI judgment service (commissioned processing under Article 27, Paragraph 5, Item 1 of the Act on the Protection of Personal Information; see Article 12 for details). As a general rule, account identification information such as email addresses and names is not transmitted. However, if URLs, article titles, body text, or other content saved by Users contains personal information or confidential information, such information may be subject to AI judgment processing. The AI judgment service used as a subcontractor processes data submitted via its API under conditions that prohibit its use for AI model training. The Operator exercises necessary and appropriate supervision over the subcontractor to ensure the secure management of personal information.
Article 4 (Information Management)
User information is stored encrypted on Supabase (PostgreSQL). The Operator takes appropriate security measures to prevent unauthorized access, leakage, loss, and alteration of information. However, complete security of communication over the Internet and electronic storage methods cannot be guaranteed.
Article 5 (Use of Cookies)
The Service uses Cookies for the purpose of maintaining authentication status and improving the Service. Users can refuse to accept Cookies through browser settings, but some features of the Service may become unavailable in that case.
Article 6 (User Rights)
Users have the following rights: - Viewing and editing their account information - Deleting saved article data - Deleting their account (account deletion will delete all associated data) These operations can be performed from the Service settings or the contact form.
Article 7 (Contact)
For inquiries regarding privacy, please contact us through the contact form on the Service.
Article 8 (Handling of Payment Information)
Payment processing for paid plans is handled by the external payment service "Stripe." Payment information such as credit card numbers is collected and managed directly by Stripe and is not stored on the Operator's servers. For information on how Stripe handles personal information, please refer to Stripe's Privacy Policy (https://stripe.com/en-us/privacy). The Operator retains only information necessary for subscription management provided by Stripe (customer ID, subscription ID, plan information, billing period, etc.).
Article 9 (Matters Concerning Retained Personal Data)
In accordance with Article 32 of the Act on the Protection of Personal Information, the following matters are disclosed: - Name of personal information handling business operator: Mediowl Inc. - Representative: Hideo Tomizu - Purpose of use for all retained personal data: As described in Article 2 - Procedures for requesting disclosure of retained personal data: Please submit a request through the contact form on the Service along with identity verification documents. Identity verification may be required during processing - Contact for complaints regarding retained personal data: Contact form on the Service - Name and contact for authorized personal information protection organization: Not applicable
Article 10 (Data Retention Period)
User data is retained for the following periods: - Account and profile information: During account existence. Deleted without delay upon account deletion - Article data: During account existence. Articles "permanently deleted" by Users are retained as logical deletions and fully deleted upon account deletion - Usage logs and analytics data: Retained for up to 12 months after collection, then anonymized or deleted - Payment-related information (Stripe customer ID, etc.): During account existence. Deleted upon account deletion. However, data may be retained for the period required by law if applicable
Article 11 (Note on International Data Transfers)
This Service is primarily intended for users in Japan. We do not currently provide services specifically targeted at EU/EEA residents, and compliance with the GDPR (General Data Protection Regulation) is limited. While AI judgment involves data transmission to an external AI judgment service, as a general rule, the transmitted data does not include User account identification information (see Articles 3 and 12).
Article 12 (External Service Information Transmission List)
The Service uses the following external services: [AI Judgment Service] - Destination: Google LLC (United States) - Information transmitted: Article titles, body text, URLs, User's occupation and interest tags - Purpose: AI-based article classification and priority judgment - Privacy Policy: https://policies.google.com/privacy [Database Service] - Destination: Supabase Inc. (United States) - Information transmitted: Account information, article data, usage information - Purpose: Data storage, management, and authentication - Privacy Policy: https://supabase.com/privacy [Payment Service] - Destination: Stripe, Inc. (United States) - Information transmitted: Information necessary for payment processing (see Article 8) - Purpose: Payment processing for paid plans - Privacy Policy: https://stripe.com/en-us/privacy [Authentication Service (when using Google OAuth)] - Destination: Google LLC (United States) - Information transmitted: Authentication tokens - Purpose: Login authentication via Google account - Privacy Policy: https://policies.google.com/privacy