Privacy Policy
This is an English translation of the original Japanese document, provided for convenience. If there is any discrepancy between the two, the Japanese version prevails.
Medisense Inc. (the “Company”) hereby establishes the following privacy policy (this “Policy”) concerning the handling of users’ information on the Company’s website (https://medisense-inc.co.jp/; the “Website”) and in the sleep app “Sleepa” (the “App”; the Website and the App are collectively referred to as the “Services”).
The Company does not transmit the data that the App reads from Apple’s Health app outside the user’s device, and does not use such data for advertising or marketing.
1. Information on the Business Operator
| Item | Details |
|---|---|
| Name | Medisense Inc. (株式会社Medisense) |
| Representative | 木村 紀久 |
| Address | Ikeda City, Osaka Prefecture, Japan (the street address will be provided without delay upon request) |
| Contact | Contact Form |
2. Information Handled by the App
(1) Health (HealthKit) Data
With the user’s permission, the App reads the following data from Apple’s Health app.
- Sleep records (sleep stages, time asleep, etc.)
- Blood oxygen records
- Records of sleep apnea notifications (breathing disturbances)
This data is used for sleep analysis only within the user’s device and is not transmitted to the Company’s servers or to any other external destination. The Company does not obtain or view this data. In addition, the App does not write any data to the Health app. The permission to read data can be revoked at any time from “Health” (“Data Access & Devices”) in the iPhone’s “Settings” app.
(2) Information Entered into or Stored in the App
The sleep journal (hourly sleep status and sleep satisfaction scores), the results of sleep analysis, questions to the AI, and alarm settings and audio files selected by the user are stored or processed within the user’s device and are not transmitted to the Company’s servers. Analysis and answers by the AI are performed using features that Apple provides on the device.
However, in version 1.6.0 and earlier of the App, if the user creates and uses an account, the contents of the sleep journal (hourly sleep status and scores) are stored on the Company’s servers (later versions do not store them). This data can be deleted by the method described in Section 8.
(3) Account Information (If an Account Is Created)
An account is required to purchase a paid plan. When the user creates an account, the Company obtains the following information.
- Display name and email address
- Password (encrypted and managed by Google’s Firebase Authentication; the Company cannot view it)
- An ID for identifying the user
- Phone number, address and message entered in the profile (only if entered)
(4) Purchase Information
The Company stores records of purchases and renewals of paid plans (App Store transaction information, such as the product purchased, the date and time of purchase, the expiration date and the transaction ID) linked to the account information. Payment information such as credit card details is handled by Apple, and the Company does not obtain it.
(5) Information for Managing the Free Period
To manage the free period, the date and time when the App was first launched are stored on the user’s device and in the user’s iCloud (Apple’s key-value store).
(6) App Usage and Crash Information
In version 1.6.0 and earlier of the App, for the purpose of improving the App, the Company obtains app usage information, device information (model, OS version, etc.), app identifiers and crash information through Google’s Firebase Analytics and Firebase Crashlytics. Later versions do not use them.
3. Information Handled by the Website
(1) Contact Form
The Company obtains the name, email address and content of the inquiry entered in the contact form. This information is delivered to the Company by email and is not stored in the Website’s database.
(2) Access Analysis (Google Analytics)
The Website uses Google’s “Google Analytics” to understand and improve how the Website is used. Google Analytics uses cookies to obtain information such as the pages viewed, referrers, approximate region, and the type of device and browser, in a form that does not identify individuals. The information obtained is managed in accordance with Google’s Privacy Policy. Collection by Google Analytics can be stopped through the browser’s cookie settings or with the Google Analytics Opt-out Browser Add-on.
(3) Web Fonts
The Website uses Google’s web fonts (Google Fonts) to display text. For display purposes, visitors’ IP addresses and browser information are transmitted to Google.
4. Purposes of Use
The Company uses the information it obtains for the following purposes.
- Providing the App’s functions (sleep analysis, alarms, etc.)
- Creating, authenticating and managing accounts, and verifying identity
- Providing paid plans, and confirming purchases and expiration dates
- Responding to inquiries
- Communicating important notices regarding the Services (such as changes to the Terms of Use or this Policy)
- Preventing unauthorized use and responding to acts that violate the Terms of Use
- Creating statistics in a form that does not identify individuals, for the purpose of improving the Services
The Company does not use health-related information, such as Health app data and the sleep journal, for advertising or marketing. No advertisements are delivered through the Services.
5. External Transmission (Recipients of Information)
In the Services, information is transmitted from the user’s device to the following businesses.
| Recipient | Information transmitted | Purpose |
|---|---|---|
| Google LLC (Firebase Authentication) [App] | Display name, email address, password, and information for verifying login status | Creating and authenticating accounts |
| Google LLC (Cloud Firestore) [App] | User ID, display name, email address, profile information, and purchase records (and, in version 1.6.0 and earlier, the sleep journal) | Managing accounts and paid plans |
| Google LLC (Firebase Analytics, Firebase Crashlytics) [App version 1.6.0 and earlier only] | App usage information, device information, app identifiers, crash information | Improving the App |
| Apple Inc. (App Store, iCloud) [App] | Information on purchase procedures, the date and time when the App was first launched | Purchasing and managing paid plans; managing the free period |
| Google LLC (Google Analytics) [Website] | URLs of pages viewed, referrers, cookie identifiers, IP address, device and browser information | Analyzing usage of the Website |
| Google LLC (Google Fonts) [Website] | IP address, browser information, information on the characters to be displayed | Displaying text |
For the handling of information by each business, please see Google’s Privacy Policy, Privacy and Security in Firebase and Apple’s Privacy Policy.
6. Provision to Third Parties
The Company will not provide personal information to any third party without the prior consent of the person concerned, except in the following cases.
- Cases based on laws and regulations
- Cases where it is necessary for the protection of the life, body or property of an individual and it is difficult to obtain the consent of the person concerned
- Cases where it is necessary to cooperate with a national government agency, a local government, or a person entrusted by either of them in performing affairs prescribed by laws and regulations, and obtaining the consent of the person concerned is likely to interfere with the performance of those affairs
- Cases where personal information is provided in connection with the succession of business due to a merger or other reasons
- Other cases permitted under the Act on the Protection of Personal Information (the “APPI”) or other laws and regulations
7. Outsourcing and Storage in Foreign Countries
The Company entrusts the storage and management of account information, purchase records and other such information (Section 2(3) and (4)) to Firebase, which is provided by Google LLC (United States). This information may be stored on Google’s servers located in the United States or other countries. The Company exercises necessary and appropriate supervision over the entrusted party to ensure that it handles personal information appropriately. For the personal information protection system of the United States, please see the website of the Personal Information Protection Commission.
8. Retention Period and Deletion
- Data that the App stores on the device (analysis results, the sleep journal, alarm settings, etc.) will be erased when the App is deleted.
- Account information and information stored on the Company’s servers are retained until the account is deleted. The user can delete the account and the information stored on the Company’s servers (the profile, purchase records, and the sleep journal stored by earlier versions) by using “Delete Account” on the “Profile” screen of the App. If the user cannot delete them in the App, please contact the Company through the contact form. The Company will delete them after verifying the user’s identity.
- Deleting the account does not stop charges for the paid plan (Sleepa Premium). To cancel, please use the subscription settings of the App Store.
- The contents of inquiries are retained for the necessary period after the response has been completed and are then deleted.
9. Security Control Measures
To prevent leakage, loss or damage of the personal data it handles, the Company takes the following measures.
- Basic policy: The Company has established this Policy and handles personal data properly.
- Organizational measures: The Company designates the persons who handle personal data and the scope of their handling, and checks the status of handling.
- Human measures: The Company informs the persons who handle personal data of the precautions for handling it.
- Physical measures: The Company takes measures to prevent theft or loss of the devices used to handle personal data.
- Technical measures: The Company limits, through authentication, the persons who can access personal data, and encrypts communications.
- Understanding the external environment: Because personal data may be stored in the United States or other countries, the Company takes security control measures based on an understanding of the personal information protection systems of those countries (Section 7).
10. Requests for Disclosure, Correction, Suspension of Use, etc.
When the person concerned requests notification of the purpose of use of retained personal data, disclosure thereof, correction, addition or deletion of its contents, suspension of its use or its erasure, cessation of its provision to third parties, or disclosure of records of provision to third parties, the Company will respond without delay in accordance with the APPI after verifying the identity of the person concerned. Please submit requests through the contact form. A fee of ¥1,000 per request will be charged for requests for disclosure.
11. Age
The App is intended for persons aged 16 or older. Minors should use the App after obtaining the consent of a parent or guardian.
12. Contact Point for Inquiries
Please send any opinions, questions or complaints regarding this Policy or the handling of users’ information through the contact form.
13. Changes to This Policy
The Company may change this Policy in line with amendments to laws and regulations or changes to the Services. In the event of a change, the Company will give advance notice of the content of the change and its effective date on the Website or in the App. For any change that requires the consent of the person concerned under laws and regulations, the Company will obtain such consent by a method prescribed by the Company.
Last revised: October 25, 2026