Privacy Policy
Enacted: August 8, 2026 ／ Last updated: August 21, 2026 ／ 日本語
UD Inc. (the "Company") sets out below its privacy policy (the "Policy") concerning the handling of Users' personal information in the service "emonoa" (the "Service").
1. Information we collect
In providing the Service, the Company collects the following information.
| Account information | Email address, display name, and the type of provider used for authentication. Where a User logs in with a Google account, the identifier, email address and display name supplied by Google. Passwords are held by the authentication platform (Firebase Authentication); the Company never receives them in plain text. |
|---|---|
| App settings | Expression recordings (calibration values and trigger settings), part selections, skin color, display scale and other values set within the Service. These are stored in the cloud only while the User is logged in. |
| Purchase and contract information | Which parts and plans a User holds, the state of their contract, and payment-related identifiers. Credit card numbers, expiry dates and security codes are collected directly by the payment processor; the Company neither collects nor retains them. |
| Enquiries | The email address, name and other content a User provides when making an enquiry. |
| Technical information | IP address, browser type, request timestamps, error occurrences and similar information recorded automatically in the logs of the cloud providers used to deliver the Service. |
| Usage information | Information about how the Service is used and how it behaves (the occurrence and timing of actions and events), together with the language setting sent by the browser, an approximate region, the device and browser type, and an identifier stored in a cookie that does not identify the User. It does not include names, email addresses or any other information that directly identifies a User, nor any webcam video, nor anything the User has typed. |
2. Handling of webcam video
The Service uses a webcam in order to reflect facial movement on the avatar. The camera video and the face-detection results are processed only inside the User's browser; they are never transmitted to, or stored by, the Company's servers. Whether to use the camera is the User's choice within the Service, and permission can be revoked at any time through the browser's settings.
3. Purposes of use
- To provide and maintain the Service and to verify identity.
- To synchronise and restore settings across multiple devices.
- To provide Paid Features, process payment and manage purchases.
- To respond to enquiries and to make necessary contact with Users.
- To prevent and respond to misuse, breaches of the Terms and other improper conduct.
- To handle incidents, maintain quality and improve the Service.
- To notify Users of important announcements about the Service (changes to the Terms, maintenance and the like).
4. Provision to third parties
The Company does not provide personal data to third parties without the User's prior consent, except where:
- required by laws or regulations;
- necessary to protect a person's life, body or property, and it is difficult to obtain the individual's consent;
- especially necessary to improve public health or promote the sound growth of children, and it is difficult to obtain the individual's consent;
- cooperating with a state organ carrying out duties prescribed by law, where obtaining consent would impede those duties; or
- the data is provided in connection with a business succession arising from a merger or other cause.
5. Outsourcing
To the extent necessary to achieve the purposes of use, the Company entrusts the handling of personal data to the following providers, and exercises necessary and appropriate supervision over them.
- Google LLC / Google Cloud Japan G.K. (Firebase Authentication, Cloud Firestore, Firebase Hosting, Cloud Functions) — authentication, storage of settings and purchase information, delivery of the Service.
- Google LLC / Google Cloud Japan G.K. (Google Analytics (GA4) / Firebase Analytics) — understanding and improving how the Service is used.
- Stripe, Inc. / Stripe Japan Inc. — payment processing and billing management.
6. Security measures
To prevent leakage, loss or damage of personal data and otherwise manage it safely, the Company applies measures including encryption in transit (HTTPS), management of access privileges, access controls under which only the authenticated owner can read and write their own data, and the selection and supervision of subcontractors.
7. Retention and deletion
- Accounts and the settings and purchase information linked to them are retained while the User uses the Service.
- Running "Delete account" within the Service deletes the account and the settings and purchase information held in the cloud. Settings saved on the User's own device are not deleted.
- Notwithstanding the preceding paragraph, records the Company is required by law to keep (such as payment records) are retained for the period those laws prescribe.
8. Cookies and browser storage
The Service uses the browser's local storage and IndexedDB to save settings and to keep the User logged in. These can be cleared through the browser's settings; doing so loses the saved settings and the logged-in state.
The Service also uses Google Analytics (GA4) — the analytics service provided by Google LLC, via Firebase Analytics — to understand and improve how the Service is used. Google Analytics stores an identifier that does not identify the User in a cookie and collects the "Usage information" described in section 1 (Information collected). The information collected is handled under Google's privacy policy. The Company does not combine it with the other information described in that section in order to identify a User.
Users may stop this measurement by any of the following means. All features of the Service remain available when it is stopped.
- Delete or block cookies through the browser's settings.
- Enable "Do Not Track" or Global Privacy Control in the browser. The Service does not measure usage when it detects either setting.
- Install the "Google Analytics Opt-out Browser Add-on" provided by Google.
No measurement takes place at all in the Service's streaming mode.
The Service does not use cookies for advertising delivery, and does not collect information for behavioural targeted advertising.
9. Disclosure, correction and suspension of use
Users may request the Company to notify them of the purpose of use of their personal information, and to disclose, correct, add to, delete, suspend the use of, erase, or stop providing it to third parties. Requests should be sent to the contact point at the end of this Policy. The Company will confirm the requester's identity and respond without delay in accordance with the law.
Users can change their display name and delete their account themselves through the Service.
10. Minors' personal information
A minor using the Service should obtain the prior consent of their legal representative before providing personal information.
11. Contact point
| Business name | UD Inc. |
|---|---|
| Contact | contact@ud-inc.co.jp |
12. Changes to this Policy
The Company may change this Policy in response to changes in law or in the content of the Service. A changed Policy takes effect when it is posted on this page. Where a change is significant, the Company will announce it within the Service.