PRIVACY POLICY
1. Personal Information Protection Policy
AI Health, K.K. ("we," "us," or "the Company") recognizes that protecting the personal information and personally referable information we handle in the course of our demand-side platform (DSP) advertising business, internet advertising agency business, advertising operations consulting, media business, and generative AI solutions business is a social responsibility. We comply with laws and regulations concerning personal information, protect the rights of individuals, and maintain a management system to implement the following policy. We continuously monitor developments in IT, social expectations, and our business environment, and the entire Company is committed to the continuous improvement of our Personal Information Protection Management System (PMS).
- Appropriate acquisition, use, and provision of personal information — We acquire personal information by lawful and fair means, taking into account the nature and scale of our business, and use it only within the scope of the purposes we have specified in advance. We take measures to prevent use beyond that scope and do not provide personal information to third parties without the individual's consent, except as permitted by law.
- Compliance with laws and standards — We comply with the Act on the Protection of Personal Information of Japan (the "APPI"), the Telecommunications Business Act, other applicable laws, government guidelines, industry self-regulatory codes, and other standards.
- Security measures — We implement organizational, personnel, physical, and technical security measures to prevent unauthorized access to, and leakage, loss, or damage of, personal information, and promptly take corrective action if a problem occurs.
- Supervision of employees — When our personnel (officers, employees, contract and temporary staff, and all others engaged in our business regardless of employment form) handle personal information, we provide necessary and appropriate supervision and conduct regular training.
- Supervision of contractors — We may outsource operations such as ad delivery system operations, data processing, and customer support. We select contractors appropriately, enter into suitable agreements, and provide necessary and appropriate supervision.
- Handling of complaints and inquiries — We respond promptly and within a reasonable scope to complaints and inquiries regarding our handling of personal information and our PMS, respecting the rights of the individual.
- Continuous improvement — We continuously review and improve our PMS to put the above into practice.
Established: June 28, 2025 Last revised: October 1, 2026
AI Health, K.K., Xin Sui, President and Representative Director
2. Handling of Personal Information and Personally Referable Information
This notice explains the information we collect and how we handle it in connection with our DSP service (the "Service") and our websites (together, the "Services"). The Service is a platform that enables advertisers to deliver advertisements on websites and mobile applications of publishers partnered with us, through advertising exchanges and supply-side platforms (SSPs).
1. Business operator
| Item | Detail |
|---|---|
| Name | AI Health, K.K. |
| Address | 6-11-20 Hinode, Urayasu-shi, Chiba 279-0013, Japan |
| Representative | Xin Sui, President and Representative Director |
2. Information we collect
In providing the Service, we collect the information below. In principle, this information does not identify a specific individual on its own and constitutes "personally referable information" under the APPI (information relating to a living individual that is not personal information, pseudonymously processed information, or anonymously processed information). Where it can be readily collated with other information we hold to identify a specific individual, we treat it as personal information.
| Category | Examples |
|---|---|
| Identifiers | Cookie IDs, mobile advertising identifiers (IDFA on iOS, AAID/GAID on Android), and unique IDs assigned by us or our partners |
| Device and environment data | IP address, operating system type and version, browser type and version, device type and model, language settings, screen size, user agent |
| Browsing and activity data | Websites and apps viewed (URL, app name), referrer, date and time of viewing, time spent, content category |
| Ad interaction data | Advertisements served, whether and when they were viewed or clicked, and whether a visit to or conversion on the advertiser's site (product view, sign-up, purchase, etc.) followed |
| Location data | Approximate location inferred from IP address (country, prefecture/state, city level). We do not collect precise location data such as GPS |
| Inferred data | Interest categories and audience segments statistically inferred from the above |
We do not collect special care-required personal information (such as race, creed, or medical history) and do not use such information for ad targeting segments.
3. How we collect information
- Cookies and similar technologies — through our tags, pixels, and scripts placed on publisher and advertiser websites.
- SDKs — through our SDKs or those of our partners integrated into publisher apps.
- Bid requests from ad exchanges and SSPs — through bid requests (e.g., OpenRTB) sent to us when bidding on ad inventory.
- Data provided by advertisers — through conversion tags and similar tools that advertisers place on their own websites.
4. Purposes of use
- Selecting and delivering advertisements tailored to user interests (interest-based advertising)
- Measuring impressions, clicks, conversions, and other metrics; analyzing and reporting on ad performance
- Controlling ad frequency (frequency capping)
- Detecting and preventing invalid traffic (ad fraud) and ensuring brand safety
- Improving the Service, developing new features, and producing statistical data
- Complying with legal obligations and protecting our rights and property
5. Disclosure to third parties
We may disclose the information we collect to third parties in the following cases:
- Advertisers and their contractors — identifiers and ad interaction data, for measuring and analyzing ad performance, to advertisers or their agencies and measurement vendors.
- Ad exchanges, SSPs, and publishers — identifiers and information necessary for bidding and delivering advertisements.
- Data partners — identifiers may be synchronized (cookie syncing) with partner data platforms to optimize ad delivery.
- Where required by law — where required by law, where necessary to protect a person's life, body, or property, or in other cases set out in Article 27(1) of the APPI.
Where we provide personally referable information to a third party and the recipient is expected to acquire it as personal data, we confirm, in accordance with Article 31 of the APPI, that the recipient has obtained the individual's consent before providing it.
6. Disclosures regarding external transmission (Telecommunications Business Act)
Pursuant to Article 27-12 of the Telecommunications Business Act of Japan, we disclose the following information that is transmitted from users' devices to external parties.
| Recipient | Information transmitted | Purpose |
|---|---|---|
| AI Health, K.K. (the Company) | Cookie ID, advertising ID, IP address, device data, URLs viewed, ad interaction data | Ad delivery, measurement, fraud detection |
| Google Ad Manager | Cookie ID, advertising ID, IP address, device data | Bidding on and delivering ads |
| Google Analytics | Cookie ID, advertising ID, ad interaction data | Ad performance measurement |
7. Security measures
| Category | Measures |
|---|---|
| Basic policy | We have established this policy setting out our commitment to legal compliance and security |
| Organizational | We have appointed a personal information protection manager, operate under internal handling rules, record and audit handling, and maintain a reporting process for incidents |
| Personnel | We conduct regular training and include confidentiality obligations in our employment rules |
| Physical | We control entry to areas where servers and devices are located and restrict removal of equipment and media, with anti-theft measures |
| Technical | We implement access controls, encryption of data in transit and at rest, monitoring against unauthorized access, and vulnerability management |
| External environment | We implement security measures with an understanding of the data protection regimes of the countries in which information is handled |
8. Data retention
We retain the information we collect only for as long as necessary to fulfil the purposes above, after which we delete or anonymize it without delay. Activity and ad interaction data linked to an advertising identifier is retained for no longer than 13 months from collection, unless a longer period is required by law.
9. How to opt out
You can opt out of interest-based advertising from us using the methods below. After opting out, you will still see advertisements, but they will not be based on your activity data.
- Our opt-out page — select "Opt out." Opt-out status is stored in a cookie for each browser, so you will need to opt out again if you delete cookies or use a different browser or device.
- Browser settings — You can refuse or delete cookies through your browser settings.
- Mobile device settings — iOS: Settings > Privacy & Security > Tracking, and disable "Allow Apps to Request to Track." Android: Settings > Google > Ads, and reset or delete your advertising ID.
- Industry opt-out pages — Japan Interactive Advertising Association (JIAA), Digital Advertising Alliance (DAA), Network Advertising Initiative (NAI), and for EU users, Your Online Choices.
You are currently: Not Opted Out
10. Personal information of business contacts
We use the personal information of representatives of advertisers, publishers, agencies, and other business partners (name, company, department and title, email address, telephone number) to respond to inquiries, conclude and perform contracts, process billing and payments, communicate about the Service, and provide information about our services. We do not disclose this information to third parties except as required by law or with the individual's consent.
11. Children
The Service is not directed to children under 13. We do not knowingly collect information from children under 13 or use it for interest-based advertising segments. If we learn that we have collected such information, we will delete it promptly.
12. Requests regarding personal data
Individuals or their authorized representatives may request, under the APPI, notification of the purpose of use, disclosure, correction, addition or deletion, suspension of use, suspension of third-party provision, and disclosure of third-party provision records regarding personal data we hold. Please contact us at the address in Section 13. We will verify your identity and respond within a reasonable period, except where permitted by law. A fee of JPY 1,000 (tax included) per request may apply to disclosure requests. Because a cookie ID or advertising ID alone cannot identify a specific individual, please use the opt-out methods in Section 9 for information linked to those identifiers.
13. Contact
For questions about this policy, our handling of personal information, or to submit a request, please contact:
AI Health, K.K., Personal Information Protection Manager
Address: 6-11-20 Hinode, Urayasu-shi, Chiba 279-0013, Japan
Email: support@aihealth.co.jp
Hours: Weekdays 10:00–18:00 JST (excluding year-end and New Year holidays)
14. Changes to this policy
We may revise this policy due to changes in law, our business, or other reasons. The revised policy takes effect when posted on our website. For material changes, we will provide notice in a prominent manner on our website.
Established: June 28, 2025 Last revised: October 1, 2026