Back to Home

Privacy Policy

Version: v1.1 | Effective: May 18, 2026

1. Overview

Din Academy ("we", "us", or "our") is an AI-powered personalized learning platform available through www.dincat.jp and www.dincat.ai, and our mobile PWA application. Our service is designed for users in Japan, English-speaking regions worldwide, and overseas Chinese-speaking communities.

We are committed to protecting your personal information and handle it in accordance with Japan's Act on the Protection of Personal Information (APPI) and other applicable data protection laws. Please read this policy carefully before using our service.

2. Information We Collect

2.1 Account Information

Collected at registration: email address (Magic Link login) or Google account information (OAuth login), your chosen nickname, and age group.

2.2 Learning Data

Your conversation history with Din Cat (including your input messages and AI-generated responses), capability assessment records, learning memories (summaries of your learning preferences and progress), and learning project data.

2.3 Payment Information

Payment processing is handled by a third-party service (Stripe). We do not store your credit card numbers, CVV, or bank account information. We only retain transaction records (order numbers, amounts, and subscription status).

2.4 Sensitive Personal Information

Minor's personal information: Learning data, conversation content, and capability assessment results for Seedling (ages 6–12) and Planner (ages 12–18) users.

Family background information: If you voluntarily share information about your family's financial situation during conversations, Din Cat may record it as a structured summary to provide more personalized learning guidance. Such information is stored in encrypted form.

3. How We Use Your Information

We use your personal information to: provide, maintain, and improve Din Academy's services; deliver personalized AI learning experiences (including cross-session memory, capability assessment, and learning path recommendations); process payments and manage subscriptions; ensure platform security (including content moderation and anomaly detection); and fulfill legal obligations.

  • We will never use your personal information for advertising or sell it to third parties.

4. AI Model Providers and Data Processing

Din Academy uses multiple AI large language model providers to power Din Cat's intelligent conversation capabilities. When you interact with Din Cat, your message content, related learning memories, and system prompts are sent to the corresponding AI provider for processing.

ProviderProcessing LocationData SentRestrictions
DeepSeekChinaConversation content, system prompts, learning memory summaries, RAG resultsUsed only for generating responses. Not for model training
Google GeminiUSA / GlobalSame as aboveSame as above

5. Cross-Border Data Transfers

Your personal information may be transferred to and processed in the following countries/regions:

Service TypeLocationProviderPurpose
Database StorageAWS (overseas)SupabaseUser data, conversation history, capability records
AI ConversationChina / USADeepSeek / GoogleIntelligent conversation generation
PaymentUSA / GlobalStripeSubscriptions and payments
Web HostingGlobal edgeVercelWeb hosting and server-side processing

5.1 For Users in Japan

In accordance with APPI Article 28, before providing your personal data to third parties in foreign countries, we will provide you with information about the personal information protection systems of those countries and obtain your explicit consent.

United States (Supabase/AWS, Google Gemini, Stripe, Vercel): The US does not have a comprehensive federal personal information protection law, but each provider has committed to appropriate data protection measures through their terms of service or DPAs.

China (DeepSeek): China has enacted the Personal Information Protection Law (PIPL), establishing a comprehensive personal information protection framework. DeepSeek, as a Chinese domestic company, is subject to this law. We further constrain their data processing behavior through our DPA.

5.2 For Users in Other Regions

For users outside Japan, we will comply with the applicable laws of your region. Regardless of your location, we will clearly inform you of data transfer destinations during registration and obtain your consent.

6. Data Security

  • Transmission encryption: all data transmitted via HTTPS/TLS
  • Row-level security policies (RLS) ensuring each user can only access their own data
  • Encryption of sensitive fields (such as minors' family background information)
  • Authentication cookies configured with HttpOnly + Secure + SameSite
  • HSTS enforced HTTPS access
  • No third-party tracking or error monitoring services integrated; conversation content is not transmitted to any third party beyond AI providers and our database

7. Special Provisions for Minors

Din Academy's Seedling (ages 6–12) and Planner (ages 12–18) services are designed for minors. We implement the following special protections:

7.1 Parental Consent

Users under 16 must have a parent or guardian create their account and explicitly consent to this privacy policy. Parental verification is conducted via Magic Link authentication sent to the parent's email address. Users aged 16–18 may register on their own, but we recommend and provide a parental linking feature.

7.2 Data Minimization

For minor users, we collect only the minimum information necessary to provide learning services. We do not proactively collect sensitive information such as family financial status or health conditions. If voluntarily shared during conversations, related memories are stored in encrypted form.

7.3 Parental Rights

  • View summaries of their child's learning progress (complete conversation history is not included, to protect the child's privacy)
  • Request deletion of their child's account and all associated data
  • Withdraw consent and discontinue the service

7.4 Content Safety

Din Cat performs real-time content moderation for conversations with minor users. When potential psychological crisis signals are detected, the system layer automatically displays a professional mental health resource card. This mechanism completely bypasses AI judgment to ensure timeliness and accuracy.

8. Your Rights

  • Right to Know: Understand how we collect and process your personal information
  • Right to Disclosure (APPI Art. 33): View the contents of your retained personal data held by us
  • Right to Correction (APPI Art. 34): Correct inaccurate personal information
  • Right to Cessation of Use / Deletion (APPI Art. 35): Request cessation of use or deletion of your personal information and account
  • Right to Cessation of Third-Party Provision (APPI Art. 35): Request cessation of provision of your personal data to third parties
  • Right to Withdraw Consent: Withdraw previously given consent without affecting the lawfulness of processing prior to withdrawal

To exercise any of these rights, please contact us at [email protected]. We will respond within 14 business days of receipt.

9. Data Retention

  • Account data: retained while your account is active and deleted within 30 days of account cancellation
  • Conversation history: retained while your account is active; you may delete individual conversations or entire sessions at any time
  • Payment records: retained for at least 3 years per financial compliance requirements
  • Moderation logs: only classification labels and hash values are stored (not original text), with a retention period of 90 days

10. Cookies

We use essential technical cookies to maintain your login status and language preference. We do not use advertising cookies or third-party tracking cookies. Specifically: Supabase authentication cookies (HttpOnly + Secure + SameSite=Lax) and NEXT_LOCALE language preference cookie.

11. Updates to This Policy

We may update this privacy policy from time to time. When significant changes occur, we will notify you via in-app notification or email. Updates to the AI provider list (Appendix A) will also be communicated in the same manner. Your continued use of our service constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this privacy policy or wish to exercise your personal information rights, please contact us:

Email: [email protected]

Website: https://www.dincat.jp