Privacy Policy

1. About Us

• Name: Toa Kagawa (trading as YSM)
• Address: Lehua Minamitokiwadai 101, 1-11-6 Minamitokiwadai, Itabashi-ku, Tokyo 174-0072, Japan
• Contact: the in-app contact form, or [email protected]

2. Information We Collect

3. How We Use Information

The Operator uses the information it collects for the following purposes:

1. Providing the Service (managing accounts, storing and sharing photos and videos, editing itineraries together, displaying maps, diaries and other content)
2. Creating Trip Books, and producing, delivering and charging for Books and Calendars
3. Providing and charging for Paid Plans
4. Storing and displaying booking records
5. Responding to enquiries and verifying identity
6. Preventing and responding to violations of the Terms and misuse, and ensuring security
7. Sending important notices about orders, changes to the Terms, outages and the like
8. Telling you about new features and campaigns (only if you have consented)
9. Improving the Service by analysing how it is used
10. Creating statistical data from which no individual can be identified, and using it to improve the Service, make travel suggestions and analyse travel and tourism trends (only if you have consented; see section 4)

Before we start any travel agency services, we will tell you what information those services use and for what purposes before we collect it.

4. Statistical Use of Trip Data

• We use only the Trip data of people who consented through a separate checkbox at registration.
• We use the content of Trips (destination, number of days, time of year and who you travel with).
• We aggregate this data without names or contact details to create statistical data from which no individual can be identified. The statistical data is used to improve the Service, make travel suggestions and analyse travel and tourism trends (Terms of Service, Article 6).
• We do not use aggregated results covering fewer than 3 Trips.
• You can withdraw your consent at any time from the Settings screen. After you withdraw, your data will not be used in new statistics. Statistical data already created cannot be excluded, because it is in a form from which no individual can be identified.

5. Photos and Videos

• We do not use facial recognition or tag people in photos.
• When photos are shared or printed, we remove the location information they contain.
• We do not use photos or videos for advertising or for training AI. Our contracts also prohibit our service providers from using them for training.

6. Provision to Third Parties

• We do not provide personal data to third parties without your consent, except in the following cases:
  • Where any item of Article 27, paragraph 1 of the APPI applies, such as where required by law
  • Where we outsource work to the extent necessary to achieve the purposes of use (see section 7)
  • Where the data is provided as part of a business succession
• Information you share with Trip Members (itineraries, shared albums, etc.) is shown to the Trip Members. Anyone who knows an Invite Link can also view the itinerary (Terms of Service, Article 5).

7. Service Providers and Where Data Is Stored

We outsource work to, or use the services of, the following businesses. Our contracts prohibit them from using data for other purposes or for training, and require them to take security measures, and we supervise them as necessary.

8. Handling Outside Japan

• As shown in the table above, personal data may be handled using the services of businesses outside Japan.
• Where we outsource the handling of personal data to a business located outside Japan, we require it by contract to take measures equivalent to those required by the APPI (prohibiting use for other purposes and for training, security management, restrictions on subcontracting, etc.) (APPI, Article 28, paragraph 1). We also check periodically how these measures are being implemented (Article 28, paragraph 3). On request, we will tell you what these measures are.
• Information on personal information protection systems in other countries is available on the website of the Personal Information Protection Commission of Japan.

9. Security Measures

• Basic policy: We have established this Policy, which covers compliance with relevant laws and guidelines and our point of contact for questions and complaints, to ensure personal data is handled properly.
• Organisational measures: Personal data is handled only by the Operator, a single person. We check how it is handled periodically.
• Personnel measures: The Operator understands and complies with the laws and guidelines on handling personal data.
• Physical measures: We take measures to prevent the theft and loss of devices used to handle personal data, and prevent anyone other than the Operator from viewing personal data.
• Technical measures: Access to systems that handle personal data is limited to the Operator and managed through authentication and access logs. Communications and stored data are encrypted.
• Supervision of service providers: We select our service providers carefully, require security measures by contract and supervise them as necessary.
• Understanding the external environment: Personal data is handled in Japan, Singapore, the United States, Ireland, Germany, the Netherlands and the countries where print facilities are located (including the countries of the businesses and the storage locations). We take security measures after understanding the personal information protection systems in these countries.

10. External Transmission of Information

In the Service, information is sent from your device to the following businesses (Telecommunications Business Act of Japan, Article 27-12).

11. Requests for Disclosure and Other Requests

• You (or your representative) can make the following requests regarding personal data held by the Operator:
  • Notification of the purposes of use
  • Disclosure (including disclosure of records of provision to third parties)
  • Correction, addition or deletion of content
  • Suspension of use or erasure
  • Suspension of provision to third parties
• Procedure: Please contact us through the in-app contact form or at [email protected]. After confirming your identity using your registered email address or similar means, we will respond in the way you prefer (electronic data or in writing). Representatives should prepare documents that confirm their authority.
• Fee: Free of charge.
• You can check, correct and delete much of your information yourself within the Service.

12. Personal Information of Minors

If you are under 16, please obtain the consent of your legal guardian before agreeing to items that require consent (statistical use of Trip data, notification emails, etc.).

13. Notification Emails

We send emails about new features and campaigns only to people who have consented. You can unsubscribe at any time from the Settings screen or through the link in the email.

14. Contact

For questions or complaints about how we handle personal information, please contact:

• The in-app contact form
• Email: [email protected]
• Address: Lehua Minamitokiwadai 101, 1-11-6 Minamitokiwadai, Itabashi-ku, Tokyo 174-0072, Japan
• Person in charge: Toa Kagawa (trading as YSM)

15. Changes to This Policy

• If we change this Policy, we will announce the changed content and the date from which it applies within the Service and on our website.
• Any change to the purposes of use will be made within the scope permitted by law, and we will ask for your consent again where necessary.