YAMI Inc. ("we", "us") has established this Privacy Policy ("this Policy") to describe how we handle user information in Wayviy (wayviy.com; the "Service"), a service where you can view, play, and create small playable works called "Quests".
Summary
- We do not collect your name, address, phone number, or precise location. We do not collect an email address to let you sign in.
- There is no feature for users to send private messages to each other (no DMs).
- The Service may show ads delivered by Google, which may include ads based on your behavior. We do not show behavior-based ads to members under 18.
- We use third-party AI providers to create Quests, review posts, recommend Quests, and similar purposes. We do not send profile information that identifies you.
1Information We Collect
1-1. Information collected whether or not you have an account
- Device identifier: To tell apart use from the same device (play records, reports, etc.), a random identifier is created on your device.
- Connection information: IP address, browser and OS type, date and time of access, etc. We handle IP addresses to the extent necessary to process connections, determine your country or region, and prevent fraud and excessive access.
- Usage information: Quests you viewed or played, actions and searches in the Service, display speed, error details, referring sites, browser language, etc.
- Play results: Scores, whether you cleared a Quest, progress records, etc.
1-2. Information collected when you sign in
You sign in with a Google, X, or Apple account, and authentication is handled by a third-party authentication service. We receive information that identifies your account on that service. If you sign in with X, we also receive your X display name, username, etc., and may use them as the initial values of your display name and similar fields on the account creation screen (you can change them before creating your account). We do not ask for your email address to let you sign in.
1-3. Information collected when you create an account
- Age-related answers: Your answer to "Are you 18 or older?" and, only if you answer "No", your year and month of birth (Section 7).
- Consent records: Your consent status for the Terms of Service and similar documents, with its date and time.
- Profile: @ID, display name, avatar, and display language; and, if you enter them, your bio and X username.
1-4. Information collected as you use the Service
- Results, levels, titles, etc.
- Settings such as follows, likes, favorites, mutes, blocks, and "Don't recommend"
- Comments and replies
- Quests you create (request text, content generated by AI, publishing settings, etc.)
- Records of coins granted and used
- In-app notifications
1-5. Information collected when you report or contact us
- Reports: The reason, any notes, the reporting member or device, and the target. So that we can judge a report even if the content is changed later, we keep a copy of the target as it was when reported (for example, the text of a comment or a profile). We do not disclose who made a report to the user who was reported.
- Inquiries and rights-infringement notices: The message, the email address you enter as the reply-to address, your account information if you are a member, and information about the screen, device, and app you were using. We use the email address you enter to reply and to keep a record of our reply. We may tell the user who is the subject of a rights-infringement notice what the notice says. We do not share the contact details of the person who sent the notice without their consent.
1-6. Information we do not collect
Your name, address, phone number, school, precise location, or your device's address book.
1-7. Information handled in the pixel art fix campaign
The campaign does not ask you to register your name or contact details. To run it, we handle a hashed identifier that tells participants apart, your statement that you are 18 or over, the versions of the campaign terms and the asset license you agreed to and when, the images you send and their hash values, and records of judging, adoption, and rewards given. We use connection information (1-1) to prevent fraud and excessive access. If you create an account on the Service with an invite code received as a reward, that account will be linked with your campaign records. This link is deleted together with the regular records.
2How We Use Information
We use the information we collect for the following purposes:
- Providing the Service (showing, playing, recording, creating, and publishing Quests; keeping you signed in; etc.)
- Recommending Quests that suit you, based on an analysis of your viewing and play activity and your settings
- Analyzing usage, display speed, and errors, and improving the Service (including comparison tests of different displays)
- Delivering ads and measuring their effectiveness ("Advertising" in Section 3)
- Keeping the Service safe (complying with our age rules, detecting and handling posts and works that violate our rules, handling reports, and preventing fraud and excessive access)
- Responding to inquiries, rights-infringement notices, and appeals, and keeping records of them
- Managing the costs of running the Service and tracking operating metrics
- Running the pixel art fix campaign (checking, judging, and adopting fixes, adding them to the assets, giving rewards, preventing fraud, and keeping records of the license granted)
- Responding to requests based on laws or regulations
If we use information beyond the scope of the purposes above, we will notify you in advance and obtain your consent where necessary. However, this does not apply where the use is based on laws or regulations; where it is necessary to protect a person's life, body, or property and it is difficult to obtain your consent; where it is especially necessary to promote the healthy development of children and it is difficult to obtain your consent; or where it is necessary to cooperate with a national government agency, a local government, or a party entrusted by them in carrying out duties prescribed by law.
We do not use Created Quests, Public Posts, or Submissions (as defined in our Terms of Service) to train AI models. If we do so, we will notify you in advance and obtain your consent where required by law.
3Cookies, Advertising, and Information Sent to Outside Parties
The Service stores your sign-in status, settings, and records on your device (play records, search history, etc.) in your browser (cookies, local storage, etc.). You can clear these through your browser settings. If you do, you will be signed out, and your settings and the records on your device will also be cleared.
Advertising
The Service uses Google AdSense, an advertising service of Google LLC, a third-party vendor, and may show ads to visitors from Japan.
- Third-party vendors, including Google, may use cookies and similar technologies to serve ads based on your past visits to the Service and other websites (behavior-based ads).
- We ask Google not to show behavior-based ads to members under 18. For people without an account, Google applies age-appropriate protections based on its own standards.
- We do not provide Google with your account identifier, display name, email address, age, date of birth, or other profile information.
- You can turn off behavior-based ads in Google Ads Settings. You can also opt out of third-party vendors' cookies at www.aboutads.info.
- For how Google uses data, see How Google uses information from sites or apps that use our services.
- We have set the Service not to show some categories of ads that are not suitable for the Service.
Information Sent from Your Device to Outside Parties
Information may be sent from your device to the following outside parties (published under Japan's Telecommunications Business Act).
| Recipient | Information sent | Purpose at the recipient | How to stop it |
|---|---|---|---|
| Google LLC (Google AdSense) | URLs of pages viewed, IP address, browser and device type, identifiers stored in cookies and similar technologies, records of ad views and clicks, date and time of access, and (for members under 18) an instruction on age-appropriate ad treatment | Delivering ads, managing how often ads are shown, measuring effectiveness, preventing fraud, and delivering behavior-based ads (except to members under 18) | Google Ads Settings, www.aboutads.info |
| Apple Inc. | IP address, browser and device type, etc. | Providing Sign in with Apple | Nothing is sent unless the sign-in screen is displayed |
If you sign in with Google or X, you are taken to that company's page and then returned to the Service. On those pages, cookies and similar technologies are used in accordance with each company's own policies.
4Information Sent to AI Providers
We use services provided by third-party AI providers for the following purposes:
- Purposes: Creating, remaking (Remake), and revising Quests; checking whether request text and posts comply with our rules; creating demo commentary (text and audio); and recommending Quests that suit you.
- Information sent: Request text, plans, Quest programs, and summaries of these. For recommendations, we send your recent viewing and play activity, likes, and similar information, together with the features of candidate Quests.
- Information not sent: Profile information that identifies you, such as your name, email address, date of birth, or @ID.
To check whether comments and other posts comply with our Terms of Service or community rules, we may send the text of the post and the minimum context needed for the review to third-party AI providers. When we do so, we do not send your account identifier, display name, email address, IP address, age, country, or other profile information to the AI providers.
In the pixel art fix campaign, we send the images before and after a fix to a third-party AI provider to judge the fix. We do not send participant identifiers.
Please do not enter your own or anyone else's personal information in request text. We may change the AI providers we use. How each provider handles the information we send is governed by that provider's terms.
5Third-Party Providers and Transfers Outside Japan
We use the following third-party providers to provide the Service. Except in cases based on laws or regulations or other similar cases, we do not provide personal information to third parties without your consent.
| Provider | What it is used for | Country |
|---|---|---|
| Cloudflare, Inc. | Site delivery, servers, data storage, and sending email | United States |
| Supabase, Inc. | Sign-in (authentication) | United States |
| Google LLC | Sign in with Google, receiving inquiries, and delivering ads (Section 3) | United States |
| X Corp. | Sign in with X | United States |
| Apple Inc. | Sign in with Apple | United States |
| AI service providers | The purposes in Section 4 | United States |
These providers are located outside Japan. Personal information protection systems in other countries and regions differ from Japan's. We use each provider after reviewing its rules on data handling. For details of foreign systems, please see the materials published by Japan's Personal Information Protection Commission.
6Information That Is Public
Anyone can view the following: your @ID, display name, avatar, bio, X username, results such as levels and titles, Quests you have published, and comments. Your following and follower lists may not be shown to other users because of the Service's safety settings.
Your age, date of birth, country, and sign-in method are not shown to other users.
7How We Handle Age
- Only people aged 16 or older can create an account. People under 16 can use the Service without creating an account.
- Before you create an account, we ask "Are you 18 or older?" Only if you answer "No" do we ask for your year and month of birth. If you are under 16, we do not keep the year and month you entered.
- We use your age-related answers to follow the Service's age rules and manage them as information that requires careful handling. They are not shown to other users.
- For the safety of people under 18, we limit some features (Terms of Service, Section 3). We also do not show behavior-based ads to members under 18 (Section 3).
- If we find that a person under 16 has an account, we may suspend that account. Parents or guardians can contact us through the inquiry form (no account needed).
8Retention and Account Deletion
8-1. Retention
We keep information for as long as necessary for its type and purpose, and then delete it or convert it into a form that does not identify individuals. After a certain period, usage records are kept only as aggregated figures. However, reports and their copies, and records of inquiries, are kept for three years in principle, for safety and legal purposes.
Regular records of the pixel art fix campaign are deleted about one year after the campaign ends. Connection information used for rate limits is kept only for the short period needed for that purpose. Images of fixes we adopt or use, and records needed to confirm the license for them, are kept for as long as needed to use and distribute the assets and to confirm rights. Records needed to comply with laws or to handle specific disputes may be kept as long as necessary.
8-2. If you delete your account
You can delete your account from the settings screen at any time. When you do, we delete your profile (@ID, display name, avatar, bio, X username, etc.), your age-related answers, and your sign-in information.
We may keep the following information in a hidden state: your comments and Quests you created (to investigate rule violations and for legal purposes), records of reports and inquiries, consent records, and results and usage records converted into a form that does not identify individuals.
To prevent sign-up benefits from being received more than once, we keep, for a certain period after deletion, only a value converted from the account you used to sign in into a form that cannot be reversed. This value does not reveal your name, contact details, or how you used the Service.
We cannot delete information stored in your browser (Section 3). Please clear it through your browser settings.
9Security Measures
We take necessary and appropriate measures to prevent leakage and other incidents involving the information we handle, such as encrypting communications, restricting access to information that requires careful handling, limiting the staff who operate the Service and what they can do, and selecting and reviewing service providers.
10Requests for Disclosure, Correction, Deletion, and More
- You can change your profile from the app's settings screen at any time. You can delete your account from the app's settings screen at any time.
- You can request disclosure, correction, suspension of use, or deletion of the information we hold about you, and disclosure of records of provision to third parties. Please send your request through the inquiry form. We will respond after confirming your identity. There is no fee.
- We may not be able to respond if we cannot confirm your identity, if responding may significantly interfere with a third party or our business, or if we are not required by law to respond.
11Changes to this Policy
We may change this Policy in response to changes in laws or changes to the Service. For important changes, we will notify you in the app before they take effect where necessary, and will ask for your consent again where required by law. Other changes take effect when they are posted on this page.
12Contact
Please send any questions, requests, or complaints about the handling of personal information through "Settings › Support › Contact us" in the app (the contact form). You can submit it without an account.
| Company name | YAMI Inc. |
| Address | Akasaka DT Building 2F, 6-6-20 Akasaka, Minato-ku, Tokyo 107-0052, Japan |
| Representative | Kenichi Uchiyama |