Privacy Policy
NAMINOL合同会社 (NAMINOL LLC, "we") explains below how we handle information in the AI Hunt mobile app and the website aihunt.live (together, the "Service"), in accordance with Japan's Act on the Protection of Personal Information ("APPI") and other laws. If the Japanese version and this translation differ, the Japanese version prevails.
1. Operator
NAMINOL合同会社 (NAMINOL LLC)
Address: Miyamasuzaka Building 609, 2-19-15 Shibuya, Shibuya-ku, Tokyo 150-0002, Japan
Name of representative: provided without delay upon request (Act on the Protection of Personal Information, Art. 32(1)(i))
Contact (personal information inquiries): [email protected]
2. Information we collect
2-1. Account and sign-in
- User ID: on first launch the app creates an anonymous account with Firebase Authentication (Google), and your records are kept under that user ID.
- Sign in with Apple / Google: if you sign in, Firebase Authentication receives that account's identifier (for Google this may include your email address and display name). Our servers do not store your email address or name. Sign in with Apple does not request your name or email.
- Phone number: we do not currently collect it. If we start SMS phone verification to prevent one person from playing with multiple accounts, we will update this Policy and notify you in advance.
2-2. Usage records
- Clips shown and played, your AI / REAL answers and whether they were correct, skips, completions, and your best streak
- LIVE reservations, answers, the question you were eliminated on, and results
- Your declared country of residence, your declaration that you meet the host country's minimum age, and your agreement to the Official Rules
- Notification settings and your push notification token
2-3. Access country
To check LIVE eligibility (you must play from inside the host country) we use the country estimated from your IP address. The IP address is processed by our server infrastructure (Cloudflare); we use only the resulting country code.
2-4. Prize claims
- Prize amounts, claim status and deadline, and your eligibility declaration (minimum age, residence in the host country)
- Prizes in Japan are Amazon gift card numbers. We store the numbers encrypted and show them only to the winner.
- When your cumulative claims reach a threshold (currently JPY 10,000) we ask you to verify your identity with Stripe Identity. Stripe processes the ID images, ID number, name and date of birth. We store only the result (passed or not, and when), Stripe's verification reference, and a non-reversible matching value derived from name and date of birth (to prevent duplicate claims).
- In host countries other than Japan that use a payout service (such as PayPal), we pass your email address to that service so you can receive the prize. We never ask for bank account details to pay prizes.
- Only when the law requires us to file a payment record with the tax office (Official Rules, section 7), we collect your name, address and Individual Number (My Number).
2-5. Advertising
The Service shows ads through Google AdMob (Google Mobile Ads SDK). We show non-personalized ads only; on iOS we do not ask for tracking permission (App Tracking Transparency) and do not use the IDFA. Even for non-personalized ads, AdMob collects directly from your device the IP address, device and app information (which may include the Android Advertising ID), and ad impressions and clicks to serve ads, cap frequency, measure performance and prevent fraud.
2-6. Troubleshooting
Only in test builds (TestFlight and internal testing), the app sends video playback state (loading times, stalls, etc.) with your user ID to our servers. Public store builds do not send this.
2-7. Creators and inquiries
We collect the name, display name, social media account, email address and video URLs you send through the submission forms (Google Forms) or email, and records of creator revenue shares and payments together with the information needed for payment (bank or payout-service account and, where needed for a tax payment record, address and Individual Number). For inquiries we collect your email address and the content of your message.
3. How we use it
- To provide the Service (serving clips, showing results and stats, running LIVE games)
- To prevent fraud (multiple accounts, bots, duplicate prize claims)
- To determine, deliver and verify eligibility for prizes, and to calculate and pay creator shares
- To notify you about LIVE games and new clips (push notifications; you can turn them off anytime)
- To show ads, whose revenue funds the prize pool
- To troubleshoot, improve the Service and produce statistics that do not identify you
- To answer inquiries and comply with accounting, tax and other laws
Individual Numbers (My Number) are used only to prepare and file the tax payment records required by Japan's My Number Act.
4. External transmission and third parties (disclosure under Japan's Telecommunications Business Act)
The Service sends information to the providers below (Telecommunications Business Act art. 27-12). Most of them process data on our behalf as service providers (APPI art. 27(5)(i)); for Stripe Identity, however, we provide data only with your consent, obtained before verification starts (see section 5); some, such as AdMob, receive information directly from your device. Except where required by law, we do not provide personal data to any other third party.
| Recipient | Service | Data | Purpose | Policy |
|---|---|---|---|---|
| Google LLC | Firebase Authentication | User ID, Apple / Google account identifier, device info | Sign-in | Link |
| Google LLC | Google AdMob (Google Mobile Ads SDK) | IP address, device/app info (may include the Android Advertising ID), ad interactions (non-personalized ads only; no IDFA) | Ad serving, frequency capping, measurement, fraud prevention | Link |
| Google LLC | Google Sign-In | Google account identifier, email, display name | Sign-in | Link |
| Google LLC | Google Forms, Google Workspace | Information sent through forms or email (2-7) | Receiving creator submissions, answering inquiries | Link |
| Apple Inc. | Sign in with Apple, Apple Push Notification service | Apple account identifier, push token, notification content | Sign-in, push notifications | Link |
| Cloudflare, Inc. | Workers, D1, R2 (servers, database, video delivery) | IP address, request logs, all data stored by the Service | Hosting (processor) | Link |
| 650 Industries, Inc. (Expo) | Expo Push, EAS Update | Push token, notification content, app version and device info | Sending push notifications, delivering app updates | Link |
| Stripe, Inc. | Stripe Identity | ID images, selfie, name, date of birth, address (only for claims that need identity verification) | Prize eligibility verification (provided with your consent) | Link |
| PayPal Pte. Ltd. and affiliates | PayPal Payouts (host countries other than Japan, creator payments) | Email address, amount | Sending prizes and creator shares | Link |
5. Transfers to third parties outside Japan
The providers in section 4 are outside Japan, and personal data is stored and processed in:
- United States: Google LLC, Apple Inc., Cloudflare, Inc., 650 Industries, Inc., Stripe, Inc. (Cloudflare and others may also use data centers in other countries)
- Singapore: PayPal Pte. Ltd. (only when PayPal is used)
We provide personal data to these providers as service providers after confirming, through their terms and data processing agreements, that they have a system in place to continuously take measures equivalent to those required by the APPI (APPI art. 28(1); Enforcement Rules art. 16), and we periodically check that these measures continue. You may ask us, through the contact in section 9, for information about these measures and about the personal information protection system of the recipient country (APPI art. 28(3); Enforcement Rules art. 18). Overviews of each country's system are published by Japan's Personal Information Protection Commission (United States, Singapore; Japanese).
Because Stripe also uses verification data for its own purposes (such as fraud prevention), we do not treat identity verification with Stripe Identity as outsourcing. Instead, we provide the data with your consent, obtained before verification starts. Before you consent, the app shows the recipient country (United States), information about its personal information protection system (the Commission materials above), and the measures Stripe takes (APPI art. 27(1), art. 28(1)-(2)). Verification compares the photo on your ID with a selfie taken at the time. We record when you consented.
6. Retention
- Account, usage records, notification settings: until you delete your account
- Prize, claim and identity-verification results and matching values: 7 years as accounting and tax records, de-linked from your user ID (the matching value is kept to prevent duplicate claims). We continue to treat these as personal data and keep the safeguards in section 10.
- Individual Numbers and other information collected for tax payment records: the period required by law, then promptly deleted
- Troubleshooting logs: deleted when the investigation ends
7. Deleting your account
You can delete your account anytime in the app under Settings → Delete account. If you no longer have the app, request deletion on the How to Delete Your Account page. Deletion removes your profile, usage records, push token and similar data. Records we must keep by law, such as prize records, are kept for the period in section 6 after being de-linked from your user ID.
8. Age
The Service is not directed at children. LIVE games and prizes are limited to people who meet the host country's minimum age (18 in Japan).
9. Your requests and complaints
To request notice of the purpose of use, access (including records of provision to third parties), correction, addition or deletion, suspension of use or erasure, or suspension of provision to third parties of the personal data we hold about you (APPI arts. 32–35), email [email protected].
- Identity check: we verify that the request is yours using, for example, the user ID shown in the app's Settings, or the account you signed in with. Agents must provide proof of authority.
- Format: we normally provide data electronically by email; tell us if you prefer another method.
- Fee: free of charge.
- Response: we respond without delay as required by law. If we cannot comply for a reason permitted by law, we will tell you why.
The same contact handles complaints and questions about our handling of personal information. You can turn off push notifications in the app or device settings, and reset or delete the Android Advertising ID in your device settings.
10. Security measures
We take the following measures to prevent leakage, loss or damage of personal data (APPI arts. 23 and 32(1)(iv); Enforcement Order art. 10(i)).
- Policy and rules: we have adopted this Policy and set handling methods and responsible persons for each stage: collection, use, storage, provision and deletion.
- Organizational: we limit who handles personal data, check how it is handled, and have a reporting and response process for incidents such as leaks.
- Personnel: people who handle personal data are bound by confidentiality and trained in proper handling.
- Physical: we prevent loss or theft of devices that handle personal data and keep data on them from being easily read.
- Technical: traffic is encrypted (HTTPS) and gift card numbers are encrypted. Admin tools and operator actions are protected by authentication and logged, and access is restricted.
- Understanding the external environment: personal data is stored and processed in the United States and Singapore (section 5). We take security measures based on an understanding of those countries' personal information protection systems.
11. Changes
We will publish changes on this page and announce important changes in the app. Where the law requires your consent for a change, we will ask for it.