Privacy Policy

Last Updated: May 17, 2026

Nihom (hereinafter referred to as "we," "us," or "our") takes your privacy very seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information. Please read this policy carefully before using our services.

1 Information Collection

Information You Provide

  • Account registration information (name, email, phone number, etc.)
  • Identity verification documents (passport, residence card, etc.)
  • Various materials uploaded or entered during use of our services
  • Payment information

Automatically Collected Information

  • Device information (device model, operating system version, unique device identifiers)
  • Usage logs (access time, page views, feature usage)
  • IP address and approximate location information
  • Information collected through cookies and similar technologies

Information from Third Parties

When you log in through a third-party account (such as Google or Apple), we may receive basic profile information that you have authorized to share.

Special-Care-Required Personal Information

Residence status, nationality, registered domicile, criminal record and health information constitute Special-Care-Required Personal Information under the Japanese Act on the Protection of Personal Information (APPI). When you input or upload such information through our Service, we treat that act as your prior consent to our acquisition of that information. If you do not consent, please do not input such information. We will not provide Special-Care-Required Personal Information to third parties without your consent, except as required by law.

2 Information Use

We use the collected information for the following purposes:

  • Providing, maintaining, and improving our services
  • Processing your applications and related documents
  • Sending service notices, announcements, and marketing communications
  • Providing customer support
  • Preventing fraud and ensuring security
  • Complying with legal and regulatory requirements
  • Conducting data analysis, statistical research, and service optimization
  • Developing and improving product features and user experience
  • Training and optimizing AI models to enhance service quality
  • Generating anonymized and aggregated data reports and analyses

3 Information Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: Third-party services engaged to operate our platform (such as cloud storage, payment processing, data analytics)
  • Partners: We may share necessary information with partners to provide you with professional services
  • Affiliated Companies: We may share information with affiliated companies for service operations and improvement
  • Legal Requirements: Disclosure of information as required by law or government authorities
  • Business Transfers: In the event of a merger, acquisition, or business transfer, your information may be transferred as part of the business assets
  • Your Consent: Other circumstances where we have obtained your explicit consent

Anonymized and Aggregated Data: We may share data that has been anonymized or aggregated in such a way that it cannot be used to identify you personally. The sharing of such data is not subject to the restrictions above.

4 Third-Party Services

In the course of providing our services, we may use the following categories of third-party services, which may process some of your data:

  • Authentication: Google, Apple, and other third-party login services
  • Cloud Infrastructure: Cloud service providers for data storage and computing
  • AI Services: AI service providers for intelligent features, including OpenAI (United States) and Anthropic, PBC (United States; large language model used for procedure-intent classification and recommendation logic)
  • Analytics Tools: Data analytics tools for understanding service usage
  • Notification Services: Service providers for push notifications and email delivery

These third-party services are subject to their own respective privacy policies. We make reasonable efforts to choose service providers with appropriate data protection measures. The data transmitted to Anthropic is limited to non-personal information such as procedure titles, categories and descriptions; identity documents, your name and your contact details are not transmitted.

5 Cross-Border Data Transfers

To provide our services, some of your data may be transferred to servers outside Japan for processing and storage. These transfers may involve the use of cloud infrastructure and AI service providers located in other countries and regions.

When conducting cross-border data transfers, we comply with the requirements of Japan's Act on the Protection of Personal Information (APPI) and other applicable laws, and take reasonable measures to ensure that your data receives a level of protection equivalent to that provided within Japan.

Overview of the legal regime at the transfer destination: The United States does not have a comprehensive federal data protection law equivalent to Japan's APPI; data protection is primarily regulated at the state level (e.g., California's CCPA). We endeavour, through contractual safeguards (such as data processing agreements), to ensure protection substantially equivalent to that available in Japan.

By continuing to use our services, you consent to the cross-border data transfers described above.

6 Data Security

We implement various security measures to protect your personal information:

SSL Encryption

All data transmission uses SSL/TLS encryption

Data Encryption

Sensitive information stored with encrypted storage

Access Control

Strict employee access permission management

Regular Backups

Regular data backups to prevent data loss

While we have implemented the above measures, no method of Internet transmission or electronic storage is 100% secure. We will continue to improve our security measures to protect your information.

7 Data Retention

We retain your personal information for the period necessary to fulfill the purposes for which it was collected. The specific retention period depends on the type of data, the purpose of use, and legal requirements.

After you cancel your account, we will delete or anonymize your personal information within 90 days in principle, except where retention is required by applicable laws and regulations. Operational audit logs required for fraud-prevention investigations may be retained for up to one year after termination.

Data that has been anonymized so that it can no longer identify a specific individual may be permanently retained for statistical analysis and service improvement.

8 Data Breach Notification

In the event of a security incident involving the leakage, loss, or damage of personal information, we will promptly report to the Personal Information Protection Commission in accordance with Japan's Act on the Protection of Personal Information (APPI) and other applicable laws, and notify affected users within a reasonable period.

The notification will include an overview of the incident, the potential impact, the response measures we have taken or plan to take, and advice on steps you can take to protect yourself.

9 Your Rights

Under Japan's Act on the Protection of Personal Information (APPI) and other applicable data protection laws, you have the following rights:

  • Right to Access: You may request access to your personal information we hold
  • Right to Rectification: You may request correction of inaccurate personal information
  • Right to Erasure: You may request deletion of your personal information
  • Cessation of Use: You may request that we stop using your personal information
  • Right to Withdraw Consent: You may withdraw previously given consent at any time

Your profile information (your profile, target businesses, inferred tags and operational audit logs) can be reviewed, corrected and deleted at any time from Settings > Profile in the app.

To exercise these rights, please contact us at [email protected]. We will respond within the period prescribed by law.

10 Data Analytics and Derived Data

To improve our services and develop new features, we may process collected data through analytics:

  • Anonymization: We may de-identify and anonymize your data so that it cannot be linked to a specific individual
  • Aggregation: We may aggregate data from multiple users for statistical analysis
  • Derived Data: Anonymized, aggregated data and analytical outputs generated through the above processing (such as statistical reports, trend analyses, and model parameters) do not constitute personal information, and ownership thereof belongs to the platform operator
  • Identity Documents Not Used for AI Training: Personal information contained in identity documents (passport, residence card, My Number, etc.) is used only to the extent necessary to provide the Service (OCR, completion assistance, sharing with the professionals you engage, etc.) and is never used for AI model training, statistical analysis or provision to third parties
  • Future Uses: Should we plan to use your personal information for new purposes not covered by this Privacy Policy, we will notify you in advance and obtain your consent where required by law

11 Cookie Policy

We use cookies and similar technologies to:

  • Maintain your login status
  • Remember your preferences
  • Analyze service usage
  • Provide personalized experiences

You can manage cookie preferences through your browser settings. Disabling cookies may affect the normal functioning of some features.

12 Policy Updates

We may update this Privacy Policy from time to time. The updated policy will be posted on this page, and we will notify you via app or email in case of significant changes. Continued use of the service constitutes acceptance of the updated policy. We recommend that you review this policy regularly.

13 Use by Persons Under 18

If you are under 18, you must obtain the consent of a parent, guardian or other legal representative before using our Service. The Service allows registration of family members' information (e.g., residence cards of spouse and children) to assist with family-related immigration procedures; please obtain the consent of the individual (if aged 18 or over) or their legal representative before registering such information.

14 Purpose of Personalisation

We combine your activity history (procedures viewed, favourites, todos created, community interactions, etc.) with the attributes you provide during onboarding (residence status, planned arrival in Japan, areas of interest, etc.) to recommend procedures, businesses and community posts that fit your situation. Such personalisation is used solely to improve the quality of the Service; it is not provided to third parties and is not used for advertising targeting.

15 Inferred Information

As a basis for personalisation, we may infer attribute tags from your activity, including the likely timing of your arrival in Japan, regional preference (e.g., Kanto / Kansai), price sensitivity, preferred facility type, and the degree of your engagement with the Service. These inferred values are stored in association with you and can be viewed, corrected or deleted at any time from Settings > Profile in the app. Inference is performed by a combination of rules and AI models and is not guaranteed to be accurate.

16 Governing Language

The Japanese version of this Privacy Policy shall be the authoritative text. In the event of any inconsistency or ambiguity between language versions, the Japanese version shall prevail.

Have Questions?

For complaints or inquiries regarding this Policy or our handling of personal information, please contact us.

Email:[email protected]

Operator: NaviNichi K.K.

Residence Application Service Provider: SproutBridge K.K. (provides the residence application service as a private service provider, based on its notification of use filed with the Immigration Services Agency. When you use the residence application feature, you will be redirected to its service, and necessary information will be shared with it based on your consent.)

Address: VORT Akihabara IV 2F, 1-7-8 Kanda-Sudacho, Chiyoda-ku, Tokyo, Japan

Send Email