Privacy Policy
Last updated: March 8, 2026
The operator (hereinafter "the Operator") of Hirameki (hereinafter "the Service") handles personal information in the Service in accordance with the Act on the Protection of Personal Information (hereinafter "APPI") and other relevant laws and regulations. This Privacy Policy (hereinafter "this Policy") sets forth how personal information is handled in the Service.
Article 1 (Definition of Personal Information)
"Personal information" as used in this Policy refers to personal information as defined in Article 2, Paragraph 1 of the APPI, meaning information relating to a living individual that can identify a specific individual by name, date of birth, address, telephone number, email address, or other descriptions contained in such information (including information that can be easily cross-referenced with other information, thereby enabling the identification of a specific individual), as well as information that includes individual identification codes.
Article 2 (Personal Information We Collect)
The Service may collect the following personal information to the extent necessary for providing and operating the Service:
| Type of Information | Details | Collection Method |
|---|---|---|
| Account information | Email address, display name | Obtained through Clerk (authentication service) during account registration |
| Content data | Mind maps, text, and other user-created data | Collected during use of the Service |
| Operation history | Mind map editing operation logs | Automatically collected during use of the Service |
| Sharing settings | Share links, collaborator settings | Collected when Users use the sharing features |
| Access logs | IP address, access date/time, browser information | Automatically recorded by the server upon access |
| Cookies | Authentication cookies | Stored in the browser upon login |
In addition to the above, the Operator may collect other information deemed necessary for providing the Service.
Article 3 (Purpose of Use)
Collected personal information is used for the following purposes:
- Provision and operation of the Service
- Responding to inquiries from Users
- Notifications regarding maintenance, incident response, and important announcements
- Identification of Users who violate the Terms of Service or attempt to use the Service for fraudulent or improper purposes, and restriction of their use
- Announcements regarding new features, updates, campaigns, and other information about the Service (except where Users have opted out of receiving such communications)
- Statistical analysis for the improvement of the Service and the planning and development of new services
- Purposes incidental to the above purposes of use
Article 4 (Change of Purpose of Use)
- The Operator may change the purpose of use of personal information only to the extent that the changed purpose is reasonably recognized as related to the original purpose.
- If the purpose of use is changed, the Operator will notify or publicly announce the changed purpose to Users by posting on the Service or other appropriate means.
Article 5 (Provision to Third Parties)
- The Operator will not provide personal information to third parties without obtaining the prior consent of the User, except in the following cases:
- When required by law
- When it is necessary for the protection of a person's life, body, or property and it is difficult to obtain the consent of the individual
- When it is particularly necessary for improving public health or promoting the sound development of children and it is difficult to obtain the consent of the individual
- When it is necessary to cooperate with a national government organ, a local government body, or a person entrusted by either in performing affairs prescribed by laws and regulations, and obtaining the consent of the individual is likely to impede the performance of such affairs
- Notwithstanding the preceding paragraph, the recipient of information shall not be considered a third party in the following cases:
- When the Operator outsources all or part of the handling of personal information to the extent necessary to achieve the purpose of use
- When personal information is provided as a result of the succession of business due to a merger or other reasons
- When personal information is jointly used with a specific party, and the individual has been notified in advance or the information has been made readily available to the individual regarding the items of personal information to be jointly used, the scope of parties who will jointly use it, the purpose of use, and the name of the person responsible for managing such personal information
External Services Used
Pursuant to Paragraph 2, Item 1 above (outsourcing), information is provided to the following external services to the extent necessary for providing the Service:
| Service | Provider | Country | Purpose | Information Provided |
|---|---|---|---|---|
| Clerk | Clerk, Inc. | United States | User authentication and account management | Email address, display name, authentication credentials |
| Cloudflare Workers / D1 / R2 | Cloudflare, Inc. | United States | Service hosting and data storage | Content data, operation history, access logs |
The handling of personal information by external services is governed by their respective terms, and the Operator is not responsible for matters beyond the Operator's control.
Article 6 (Provision to Third Parties Located in Foreign Countries)
As described in the preceding article, the Service uses services provided by companies located in the United States. In providing personal data to these companies, the following information is disclosed pursuant to Article 28 of the APPI:
- Country of the recipient: United States of America
- Personal information protection system in that country: The United States does not have a comprehensive federal personal information protection law, but state laws such as the California Consumer Privacy Act (CCPA) and sector-specific laws exist.
- Personal information protection measures of the recipients: Each company implements security control measures based on their respective privacy policies.
Article 7 (Security of Personal Information)
The Operator takes measures it considers reasonable for the security of personal information. However, complete security is not guaranteed.
Article 8 (Disclosure of Personal Information)
- When a User requests the disclosure of personal information pursuant to the APPI, the Operator will confirm that the request is made by the User themselves and disclose such information without delay. However, the Operator may choose not to disclose all or part of the information if disclosure would fall under any of the following, and will notify the User without delay of any decision not to disclose:
- When there is a risk of harming the life, body, property, or other rights and interests of the User or a third party
- When there is a risk of significantly impeding the proper conduct of the Operator's business
- When it would violate other laws and regulations
- Pursuant to Article 38 of the APPI, a fee of 1,000 yen per request, which is within a reasonable range considering actual costs, shall be charged for disclosure requests.
Article 9 (Correction and Deletion of Personal Information)
- If a User's personal information held by the Operator contains incorrect information, the User may request the correction, addition, or deletion (hereinafter "correction, etc.") of such personal information through procedures established by the Operator.
- If the Operator receives a request under the preceding paragraph and determines that it is necessary to comply with such request, the Operator will carry out the correction, etc. of the relevant personal information without delay.
- When the Operator has carried out a correction, etc. based on the preceding paragraph, or has decided not to carry out a correction, etc., the Operator will notify the User without delay.
- Account information such as display name can be changed directly from the Service's settings page.
- Deleting an account will result in the deletion of the User's personal information within a reasonable period.
Article 10 (Suspension of Use of Personal Information)
- When a User requests the suspension of use or deletion (hereinafter "suspension of use, etc.") of their personal information pursuant to the APPI, the Operator will conduct a necessary investigation without delay.
- Based on the results of the investigation under the preceding paragraph, if it is determined that the request should be complied with, the Operator will carry out the suspension of use, etc. of the relevant personal information without delay.
- When the Operator has carried out the suspension of use, etc. based on the preceding paragraph, or has decided not to carry out the suspension of use, etc., the Operator will notify the User without delay.
- Notwithstanding the preceding two paragraphs, if the suspension of use, etc. requires substantial costs or is otherwise difficult to carry out, and alternative measures that can protect the rights and interests of the User can be taken, the Operator will take such alternative measures.
Article 11 (Use of Cookies)
The Service uses cookies to maintain user authentication. Cookies can be disabled through browser settings; however, disabling them may prevent the use of some features of the Service.
Article 12 (Disclaimer)
The Operator shall not be liable for any damages arising out of or in connection with the handling of personal information, except in cases of willful misconduct or gross negligence by the Operator.
Article 13 (Changes to This Policy)
- The Operator may change this Policy as necessary.
- If changes are made that have a significant impact on Users (including, but not limited to, removal of clauses, introduction or change of fees, or expansion of data use purposes), the Operator will notify Users by posting on the Service or other appropriate means. If any change requires the consent of the individual under applicable laws, such consent will be obtained separately.
- The revised Policy shall take effect upon being posted on the Service.
Article 14 (Contact)
For inquiries regarding the handling of personal information (including requests for disclosure, correction, or suspension of use), please contact us through the inquiry feature within the Service or our support desk. Details regarding the payment method for disclosure request fees will be provided upon inquiry.