Shinnovation 21 determines the purposes and means of processing personal information for the Japan release. Complete operator identity and contact disclosures must be approved before production launch.
Shin Q may collect account identifiers, name, optional middle name, Japanese name, nickname, birthday or age group, email, phone verification state, postal address, voluntarily entered school or occupation details, learner settings, answers, scores, progress, device and security events, support communications, consent evidence, and subscription entitlement metadata. Shin Q does not receive full payment-card details.
Information is used to authenticate users, provide and personalize lessons, synchronize progress, evaluate responses, maintain subscriptions, respond to requests, prevent fraud and abuse, protect users, investigate restricted safety incidents, comply with law, and create aggregated or de-identified measurements. Email addresses are used for account creation, login authentication, important service notices, password recovery, and customer support.
Microphone audio is processed only when a user starts a speaking feature. Retained recording history and personalized voice-model training are disabled. Postal address is user-entered or derived from postal-code lookup; continuous GPS tracking is not part of the current product. Materially different collection requires a new disclosure and consent where required.
An adult parent or guardian must authorize child use where the child lacks capacity to consent. Shin Q does not sell child information or use it for behavioral advertising. Guardians may request access, correction, export, deletion, or withdrawal of consent, subject to lawful safety or legal holds.
Article 6 - Processors and cross-border processing
Core AWS application data is configured in Tokyo. Selected authentication, app-store, payment, speech, email, and AI providers may process limited data outside Japan. Shin Q must identify processors, countries, purposes, safeguards, and consent required by APPI before production use. Server location alone does not determine all applicable law.
Shin Q uses access controls, encryption, restricted administrative permissions, audit records, backups, and monitoring. No system is risk-free. Qualifying incidents will be investigated, contained, documented, reported, and notified as required by law.
Information is kept only for its documented service, security, accounting, dispute, consent, safety, or legal-hold purpose. Account deletion removes or de-identifies account-linked information unless a documented legal duty or approved hold requires restricted retention.
Authenticated settings support correction, export, and deletion. Individuals may request notice of purpose, disclosure, correction, suspension of use, deletion, or third-party provision records as available under APPI. Identity is verified and legally permitted refusals are explained.
Material changes receive a new version and renewed consent where required. Requests may be sent to support@shinnovation21.com. Production publication requires an approved operator mailing address and privacy contact.