Privacy Policy

1. Scope

This Policy applies to information relating to users that we collect and process through the Service. Information collected by third-party websites, applications, or other services linked from the Service is governed by the privacy policies and other terms established by those third parties.

If we provide a separate privacy notice for a particular feature or initiative, that notice will apply together with this Policy. If there is any inconsistency between the two, the separate notice will prevail with respect to that feature or initiative.

2. Information We Collect

We may collect the following information in connection with the provision of the Service.

(1) Account and Registration Information

• Email address
• Username, display name, and other profile information
• Login ID, authentication identifiers, and other information required for account administration
• Information provided by an external service, with the user’s permission, when the user signs in through a social media account or another third-party login service

We do not collect passwords used for social media sign-in or other external login services.

(2) Information About Use of the Service

• Browsing, search, favorites, coupon viewing and use, stamp collection, and other interaction history
• History relating to visits to or check-ins at events, venues, facilities, and similar locations
• Push notification tokens, notification preferences, and information relating to notification delivery and opening
• Survey responses and other information entered or submitted by users through the Service

(3) Location Information

• Current location or other location-related information obtained through GPS, Wi-Fi, Bluetooth, cell-tower data, or similar technologies, subject to the user’s permission

(4) Device, Communications, and Access Information

• Device type, operating system, app version, language and region settings, device identifiers, advertising identifiers, mobile carrier, and similar information
• IP address, cookies and other identifiers, access date and time, referring source, pages viewed, interaction logs, error logs, and similar information

(5) Inquiry Information

• Name, company name, email address, and telephone number
• Details of the inquiry, how the user learned about us, communication history, and other information submitted by the user

3. How We Collect Information

We collect information relating to users in the following ways:

1. directly from users when they register for or use the Service, or contact us;
2. based on permissions or settings enabled by users on their devices;
3. automatically in connection with use of the Service through cookies, SDKs, logs, and other technologies; and
4. from social sign-in providers and other third parties, with the user’s consent or as otherwise permitted by law.

Users may choose not to provide information designated as optional. However, doing so may prevent them from using certain features of the Service.

4. Purposes of Use

We use the information we collect for the following purposes:

1. to provide, maintain, operate, and authenticate users of the Service;
2. to create and administer accounts, record usage, and prevent unauthorized or improper use;
3. to provide maps, current-location display, route guidance, digital stamp rallies, coupons, venue information, notifications, and other features;
4. to provide information about art fairs, art festivals, exhibitions, galleries, museums, artworks, artists, nearby facilities, and related subjects;
5. to tailor displayed content and notifications to users’ settings, usage, or interests;
6. to provide important notices, operational communications, and support relating to the Service;
7. to respond to inquiries, consultations, and data subject requests, and to manage the corresponding records;
8. to measure, research, and analyze use of the Service and use the results to improve quality and functionality, consider new features, and address errors or outages;
9. to create statistical information for improving the operation of events and facilities, analyzing visitor movement, and exploring related business activities;
10. to protect the security of the Service and investigate, prevent, or respond to violations of applicable terms, unauthorized access, impersonation, and other misconduct;
11. to comply with legal obligations and exercise or defend legal rights; and
12. for purposes incidental to those listed above.

If we use personal information beyond the scope reasonably related to the purposes described above, we will obtain the user’s prior consent as required by applicable law.

5. Location Information

We collect location information only when a user has granted permission on their device. We use this information to provide features that require location data, including current-location display, directions to venues, GPS-enabled stamp collection, and nearby information.

Users can disable access to location information through their device or operating-system settings. If access is disabled, however, current-location display, location-enabled stamp rallies, and certain other features may no longer be available.

We use location information only to the extent necessary to fulfill the purposes described in Section 4.

6. Cookies and Similar Technologies

We may use cookies, local storage, SDKs, and similar technologies to improve user convenience, maintain login sessions, understand how the Service is used, identify errors, ensure security, and improve the Service.

Information collected through these technologies may include cookie identifiers, device identifiers, IP addresses, and browsing and interaction history. If this information can readily be combined with other information to identify a specific individual, we will treat it as personal information.

Users may be able to disable cookies and similar technologies through their browser or device settings. Doing so may, however, prevent parts of the Service from functioning properly.

We may use third-party services for access analytics, authentication, map display, push notifications, security, and similar purposes. Information handled by these services is also subject to the privacy policies and other terms of the relevant service providers.

7. Disclosure to Third Parties

We will not disclose personal data to a third party without the user’s prior consent, except in the following circumstances:

1. when required or permitted by law;
2. when disclosure is necessary to protect the life, physical safety, or property of a person and it is difficult to obtain the user’s consent;
3. when disclosure is particularly necessary to improve public health or promote the sound development of children and it is difficult to obtain the user’s consent;
4. when cooperation with a national or local government authority, or a party acting on its behalf, is necessary for the performance of duties prescribed by law and obtaining the user’s consent could impede the performance of those duties;
5. when personal data is transferred in connection with a business succession resulting from a merger, company split, business transfer, or similar transaction; or
6. when otherwise permitted by applicable law.

We may provide event organizers, participating facilities, and other relevant businesses with information about visitor numbers, visitor movement, stamp collection, coupon use, and similar activity. As a general rule, this information is provided in statistical form that does not identify specific individuals.

If a particular feature or initiative involves providing information that can identify a user to an event organizer, participating facility, or other third party, we will clearly explain the recipient, the information to be provided, and the purpose of the disclosure in advance, and will follow all procedures required by law, including obtaining consent where necessary.

8. Service Providers and International Processing

To the extent necessary to fulfill the purposes described in Section 4, we may engage external service providers for server operation, data storage, authentication, access analytics, map display, notification delivery, inquiry handling, and other functions, and may provide them with information relating to users. In such cases, we select service providers appropriately, require necessary security measures through contracts or other means, and exercise appropriate oversight.

Information relating to users may be stored or processed outside Japan, including where servers used by us or our service providers are located overseas. In accordance with applicable law, we review relevant matters, including the personal data protection framework of the country concerned and the service provider’s security measures, and implement appropriate safeguards.

9. Creation and Use of Statistical Information

We may aggregate or process collected information to create statistical information from which any link to a specific individual has been removed. We may use this statistical information, or provide it to third parties, for purposes including improving the Service, supporting the operation of events and facilities, research, business development, and the preparation of sales and marketing materials.

If we create or provide anonymously processed information or pseudonymously processed information as defined under Japan’s Act on the Protection of Personal Information, we will handle it appropriately in accordance with that Act and other applicable laws and regulations.

10. Security Measures

We implement organizational, personnel, physical, and technical safeguards to prevent the leakage, loss, or damage of personal data and otherwise ensure its secure management. We also exercise necessary and appropriate oversight of employees and service providers who handle personal data.

As required by law, we will respond to inquiries from users regarding the details of our security measures to the extent that doing so does not compromise security.

11. Data Retention

We retain information relating to users only for as long as necessary to fulfill the purposes for which it was collected, for any period required by law, or for a period reasonably necessary to protect our legitimate rights or interests.

When information is no longer required, we delete or erase it, or process it so that specific individuals can no longer be identified, in accordance with applicable law and our internal standards. Information stored in backups may be deleted progressively through the ordinary backup rotation cycle.

12. Requests Concerning Personal Data

In accordance with Japan’s Act on the Protection of Personal Information, a user or their authorized representative may request notification of the purpose of use; disclosure; correction, addition, or deletion; suspension of use or erasure; suspension of disclosure to third parties; or disclosure of records concerning third-party disclosures with respect to the user’s retained personal data held by us (collectively, “Data Subject Requests”).

After verifying that the requester is the user or their lawful representative, we will respond within a reasonable period in accordance with applicable law. If we are not legally required to fulfill a request, or if we decline all or part of a request, we will notify the requester of that decision and the reason for it.

For information about how to submit a request, the identification documents required, and other procedures, please contact us using the details in Section 16. If we charge a fee for notification of the purpose of use or disclosure as permitted by law, we will explain the amount and payment method before the request is submitted.

13. Information About Minors

Minors who use the Service and provide personal information should obtain the consent of a parent, guardian, or other legal representative where necessary. If applicable law requires the consent of a legal representative, we may ask for confirmation of that consent.

14. Users in the EEA, UK, and Similar Jurisdictions

We process the personal data of users located in the European Economic Area (EEA), the United Kingdom, or other jurisdictions subject to the General Data Protection Regulation (GDPR) or comparable data protection laws in accordance with the laws applicable to those users.

(1) Legal Bases for Processing

We process personal data on legal bases recognized by applicable law, including performance of a contract, the user’s consent, compliance with legal obligations, protection of the vital interests of the user or another person, and pursuit of our or a third party’s legitimate interests in operating, improving, and securing the Service. Where processing is based on consent, users may withdraw their consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

(2) User Rights

Subject to the requirements of applicable law, users may have the right to access, correct, or erase their personal data; restrict its processing; receive it in a portable format; object to its processing; withdraw consent; and lodge a complaint with the competent supervisory authority.

(3) International Transfers

If personal data is transferred outside the EEA, the United Kingdom, or another applicable jurisdiction, we will implement necessary safeguards using mechanisms recognized under applicable law, such as an adequacy decision or standard contractual clauses.

(4) Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal effects concerning users or similarly have a significant effect on them.

15. Changes to This Policy

We may revise this Policy in response to changes in law, changes to the Service or our information-handling practices, or as otherwise necessary. We will publish the revised Policy through the Service or by another appropriate method.

If applicable law requires user consent to a change, we will obtain that consent through the prescribed method. We will communicate material changes through a notice within the Service, a notification, or another clear and appropriate method.

16. Company Information and Contact

The name, representative, and address of the business operator handling personal information are as follows:

• Company: regist ART Inc.
• Representative: Yuichi Iwano, Representative Director
• Address: Lexington Aoyama 4F, 5-11-9 Minami-Aoyama, Minato-ku, Tokyo 107-0062, Japan

For inquiries about this Policy, our handling of personal information, Data Subject Requests, complaints, or consultations, please contact us using the form below. Information collected in connection with an inquiry will be used only to the extent necessary to verify the identity of the requester and respond to the inquiry.