1. Basic Policy and Scope
KenkoAi Inc. (the “Company”) recognizes the importance of personal information handled in its services and business activities. The Company complies with the Act on the Protection of Personal Information of Japan, other relevant laws and regulations, guidelines, and internal rules, and handles personal information appropriately.
This Policy applies to the handling of personal information of users of the Company’s products, customers who contact the Company, business partners, and participants in corporate programs provided by the Company (collectively, “Users and Other Individuals”).
Personal information concerning the Company’s personnel, job applicants, and other internal human resources, labor management, or recruitment matters is outside the scope of this Policy and is handled in accordance with separately established internal rules, personal information handling notices, notices for job applicants, and similar provisions.
2. Information Collected
The Company may collect the following information from Users and Other Individuals:
- (1) Names, email addresses, telephone numbers, addresses, dates of birth, affiliations, job titles, and other identifying information;
- (2) Information concerning registration, account management, and use of services for the Company’s products, including the Kenko App and Kenko Ring;
- (3) Information concerning product orders, delivery, returns, exchanges, payments, and other purchase-related matters;
- (4) Information necessary for identity verification, including service IDs and passwords;
- (5) Information necessary for payment, including credit card and bank account information;
- (6) Information contained in inquiries, consultations, complaints, surveys, emails, chats, inquiry forms, and other communications with the Company;
- (7) Information concerning applications for, participation in, and use of corporate programs, and other information necessary to provide those programs;
- (8) Information obtained through integration with the Kenko App, Kenko Ring, other wearable devices, SDKs, or external services;
- (9) Health conditions, vital-sign data, lifestyle information, health checkup information, and other information that may relate to health or medical matters;
- (10) Cookies, IP addresses, device information, advertising identifiers, access histories, operation histories, log information, and other information automatically collected through use of services;
- (11) Information obtained from other services through integration with our services;
- (12) Information obtained from businesses that have entered into agreements with the Company; and
- (13) Information obtained from public sources.
3. Purposes of Use
The Company uses personal information collected from Users and Other Individuals for the following purposes.
Except where permitted by law, the Company will obtain the individual’s prior consent before using personal information beyond the scope of these purposes.
- (1) To provide, operate, maintain, protect, and improve the Company’s products, including the Kenko App and Kenko Ring, and other Company services, and to verify identity, authenticate users, and manage users;
- (2) To accept orders for products or services, process payments, deliver products, handle returns and exchanges, and provide after-sales support;
- (3) To respond to inquiries, consultations, complaints, and similar communications and verify identity;
- (4) To register participants in corporate programs, verify their identities, operate programs, manage usage status, and contact participants;
- (5) To manage contracts, transactions, billing, payments, and other business dealings;
- (6) To understand, analyze, and improve service usage, enhance quality, address defects, and plan, research, and develop new services;
- (7) To provide important notices and other information from the Company concerning services, products, campaigns, programs, and similar matters;
- (8) To request participation in surveys, interviews, and similar activities concerning services, products, campaigns, programs, and related matters;
- (9) To prevent improper use, ensure information security, and provide services safely;
- (10) To take action required under laws or internal rules; and
- (11) For purposes incidental to the foregoing.
4. Handling of Special Care-Required Personal Information
When collecting health information, medical information, or other information that may constitute special care-required personal information under Japanese law, the Company handles it appropriately in accordance with law, including by obtaining the individual’s prior consent, except where permitted by law.
5. Provision to Third Parties
- Except where permitted by law, the Company does not provide personal data to third parties without the individual’s prior consent. When providing personal data to third parties, the Company follows the procedures required by law. The Company may disclose information in the circumstances described below, subject to obtaining the individual’s prior consent where required or otherwise having a basis permitted by applicable law. The circumstances listed below do not, by themselves, create an exemption from consent requirements:
- (1) Content posted by customers or other individuals, such as reviews, becomes accessible to third parties according to the public or private settings selected for that content;
- (2) Where a business agreement has been concluded, necessary personal information is provided to that business pursuant to the agreement;
- (3) Information is provided to an academic research institution for academic research purposes;
- (4) Personal information is provided in connection with business succession due to a merger, acquisition, change of business operator, or other reason;
- (5) Cooperation is necessary for a national government agency, local government, or a person entrusted by such an agency or government to perform duties prescribed by law, and obtaining the consent of the customer or other individual may impede performance of those duties;
- (6) Customers or other individuals use services of other businesses that partner with the Company, or the Company conducts marketing and advertising through other businesses that partner with the Company. The personal information provided by the Company is limited to the minimum necessary to achieve the purpose; or
- (7) Other cases permitted by the Act on the Protection of Personal Information or other laws.
- When providing personal information to a third party in a foreign country, including a service provider, the Company takes appropriate measures to protect personal information in accordance with the Act on the Protection of Personal Information and the personal information protection system of the relevant foreign country.
6. Joint Use
If the Company jointly uses personal data, it will notify the individual in advance, or make readily accessible to the individual, the categories of personal data to be jointly used, the scope of joint users, the purposes of use, the party responsible for management, and other matters required by law.
7. Outsourcing
The Company may outsource all or part of the handling of personal data to the extent necessary to provide services, including product payments and delivery, email distribution, customer support, system development and maintenance, and data storage and analysis. In such cases, the Company selects appropriate service providers and exercises necessary and appropriate supervision over them.
8. Security Control Measures
The Company takes necessary and appropriate security control measures to prevent leakage, loss, damage, unauthorized access, and similar incidents involving personal data, based on its Basic Information Security Policy, information security rules, ISMS-related rules, and other internal rules.
9. Requests for Disclosure and Other Actions
Individuals or their representatives may make requests under law concerning personal data held by the Company, including notification of purposes of use, disclosure, correction, addition, deletion, suspension of use, erasure, and suspension of provision to third parties. Upon receiving such a request, the Company will respond appropriately without delay in accordance with law.
10. Contact Us
Please direct inquiries, complaints, and requests for disclosure or other actions concerning the handling of personal information to:
Personal Information Protection Administration OfficeKenkoAi Inc.
contact@kenkohealth.ai
11. Changes to This Policy
The Company may amend this Policy as necessary. Amendments will be announced by posting them on the Company’s website or by other appropriate means.
12. Business Operator Information
- Business operator
- KenkoAi Inc.
- Address
- 9F, Shin-Marunouchi Building, 1-5-1 Marunouchi, Chiyoda-ku, Tokyo 100-0005, Japan
- Representative
- Toshiyuki Kimbara, Representative Director and President
- Date of Adoption
- September 1, 2026
see also the terms of use.