Piik Privacy Policy

This English version is a reference translation of the original Japanese version of this Policy and is provided for convenience only. In the event of any discrepancy or inconsistency between the Japanese version and this English version, the Japanese version shall prevail. However, the "Supplementary Provisions for Users Outside Japan" set forth at the end of this document are included in this English version only, have no counterpart in the Japanese version, and apply in addition to the provisions of this Policy.

Parallel Inc.

Parallel Inc. (the "Company") hereby establishes the following basic policy on the handling of personal information and other information (this "Policy").

This Policy applies to the Piik app provided by the Company and the web pages relating to Piik.

Section 1. Definition of Personal Information

In this Policy, "personal information" means, consistent with the definition in Article 2, paragraph (1) of the Act on the Protection of Personal Information (Act No. 57 of 2003, as amended; the "APPI"), information relating to a living individual that (i) can identify a specific individual by name, date of birth, or other description contained in such information (including information that can be readily collated with other information and thereby identify a specific individual), or (ii) contains an individual identification code as defined in paragraph (2) of the same Article.

Section 2. Compliance with Relevant Laws, Regulations, Guidelines, etc.

The Company shall comply with the APPI and other relevant laws and regulations, the guidelines, etc. established by the Personal Information Protection Commission (the "PPC"), this Policy, and the Company's internal rules, etc., and shall handle personal information lawfully and appropriately.

Section 3. Acquisition of Information

When you use the Piik app provided by the Company (the "Products") or browse the web pages relating to Piik (the "Website"), the Company may obtain the following personal information and other information (collectively, "Information"). The Company shall obtain such Information by lawful and fair means and will not obtain Information by deception or other wrongful means.

• (1) The following information that you provide directly to the Company when, among other things, you complete registration procedures or procedures to change your registered details for the Products; use the Products by uploading or otherwise providing files and other content (the "Content") or contact information (such as your address book); or contact the Company for the purpose of receiving customer support or for any other purpose:
  • (a) your user name (nickname), user ID, date of birth, information about Friends and Groups, the contents of reports, and other information;
  • (b) names, user names, and other information of third parties other than you contained in the Content that you upload/post to the Products; and
  • (c) other information that you choose to provide to the Company.
• (2) Where you send or receive direct messages (chats) or engage in other private communications with third parties who use the Products by means of the Products, the contents of such communications stored by the Company and the information contained therein, as well as the contents of inquiries and other messages that you send to the Company's official account within the Products;
• (3) Device identifiers, IP addresses, and similar information automatically collected by the Company when you use the Products on a device or mobile device, or browse the Website;
• (4) Information about your browser automatically collected by the Company using cookies and other technologies when you browse the Website;
• (5) When you use services of third parties other than the Company that are linked with the Company, your user name, photos, and other information on such services that you have permitted such third parties to disclose, which the Company obtains from such third parties;
• (6) Your history of earning, using, and exchanging points designated by the Company (e.g., PiikCoin) in the Products;
• (7) Location information of your device obtained by the Company if you permit the use of location information in the Products;
• (8) Motion information of your device obtained by the Company if you permit the use of motion information in the Products;
• (9) Information about the Wi-Fi network to which your device is connected, obtained by the Company if you permit the use of location information in the Products;
• (10) Information on the status and sensors of your device obtained by the Company when you use the Products;
• (11) Usage status of applications that you have selected in the Products, obtained by the Company if you so permit;
• (12) Information about music currently playing on your device, obtained by the Company if you so permit;
• (13) Information about the route through which you were invited to the Products; and
• (14) Diagnostic information on the operation of the Products.

Section 3.2 Information Obtained from Third-Party Services

The Information that the Company obtains from third parties with your separate consent is as follows:

Section 4. Purposes of Use of Information

The Company will use the Information obtained when you use the Products or browse the Website within the scope of the following purposes of use, or of the purposes of use evident from the circumstances of its acquisition, and will not use such Information for any other purpose except with the consent of the data subject identified by the Information or as permitted by laws and regulations:

• (1) To enable you to use the Products;
• (2) To send you notices of completion of registration procedures or procedures to change your registered details for the Products, notices of updates, and other notices or information relating to the Products;
• (3) To respond to communications that you make to the Company for the purpose of receiving customer support or for any other purpose (including automated replies and the preparation of draft replies using artificial intelligence (AI));
• (4) To analyze the usage status of the Products and other information, and to improve and enhance the functions of the Products;
• (5) For marketing research, statistics, and analysis;
• (6) To deliver advertisements and measure their performance;
• (7) For system maintenance or responding to malfunctions;
• (8) To investigate and prevent unauthorized access and other unauthorized use of the Products;
• (9) To display information about you (including information inferred by the Company) to other users (Friends), where you have separately permitted this in the Products;
• (10) To provide Information to third parties with the consent of the data subject;
• (11) To grant invitation-related benefits and to prevent fraudulent invitations;
• (12) To grant, manage, and exchange points designated by the Company (PiikCoin); and
• (13) To provide displays and other functions in the Products according to your language and country/region.

Section 5. Outsourcing of the Handling of Information

The Company may, to the extent necessary to achieve the purposes of use, outsource the handling of the Information obtained when you use the Products or browse the Website to its partner companies (each, an "Outsourcing Partner").

Section 6. Provision of Information to Third Parties

The Company will not provide the Information obtained when you use the Products or browse the Website to any third party (excluding Outsourcing Partners), except with the consent of the data subject identified by such Information or as permitted by laws and regulations.

Section 6.2 Provision to Third Parties in Foreign Countries

The Company may, to the extent necessary to achieve the purposes of use, outsource all or part of the handling of personal data to Outsourcing Partners located in foreign countries. In such case, the Company will provide personal data after establishing, by means such as entering into contracts with such Outsourcing Partners, a system that conforms to the standards prescribed by the Order of the PPC as provided in Article 28, paragraph (1) of the APPI, and will take the measures necessary to ensure the continuous implementation of equivalent measures by such Outsourcing Partners. The Company's main Outsourcing Partners, the countries in which they are located, and the services outsourced to them are as follows:

For information on the systems for the protection of personal information in foreign countries, please refer to the information published by the PPC. Upon the request of the data subject, the Company will provide information on such necessary measures without delay.

Section 7. Management of Personal Information

• (1) The Company will, to the extent necessary to achieve the purposes of use, keep personal information accurate and up to date, and will endeavor to erase such personal information when it is no longer necessary to use it.
• (2) The Company will take necessary and appropriate measures to prevent the leakage, loss, or damage of personal information and for other security control of personal information.
• (3) When having its employees handle personal information, the Company will ensure that they are thoroughly informed of the proper handling of personal information, provide them with appropriate training, and exercise necessary and appropriate supervision over them.
• (4) When outsourcing the handling of personal information, the Company will select, as Outsourcing Partners, partner companies that have taken appropriate security control measures, and will exercise necessary and appropriate supervision over such Outsourcing Partners.
• (5) The main security control measures taken by the Company are as follows:
  • (a) Formulation of a basic policy: The Company has formulated this Policy to ensure the proper handling of personal data.
  • (b) Establishment of rules on the handling of personal data: The Company has established internal rules setting out the handling methods, the persons responsible and persons in charge, and their duties, etc. for each stage of acquisition, use, storage, provision, deletion/disposal, etc.
  • (c) Organizational security control measures: The Company has appointed a person responsible for the handling of personal data and has established a reporting and communication system to be followed when any fact or indication of a violation of laws or internal rules is identified.
  • (d) Human security control measures: The Company provides its employees with regular training on matters to be noted regarding the handling of personal data.
  • (e) Physical security control measures: In areas where personal data is handled, the Company controls the entry and exit of employees and restricts the devices, etc. that may be brought in, and takes measures to prevent unauthorized persons from viewing personal data.
  • (f) Technical security control measures: The Company implements access controls to limit the persons in charge and the scope of personal information databases, etc. to be handled, and has introduced mechanisms to protect against unauthorized external access or malicious software.
  • (g) Understanding of the external environment: The Company handles personal data in the countries set forth in Section 6.2, and implements security control measures based on an understanding of the systems for the protection of personal information in those countries.

Section 8. Requests Concerning Personal Information

• (1) When the Company is requested by the data subject identified by personal information, or by their agent, to notify the purpose of use of such personal information pursuant to the provisions of the APPI, the Company will, after confirming that the request has been made by the data subject or their agent, notify the requester without delay, except where the Company is not obligated to provide such notification under the APPI or other laws and regulations (if the Company decides not to provide such notification, it will notify the requester to that effect without delay).
• (2) When the Company is requested by the data subject identified by personal information, or by their agent, to disclose such personal information or records of provision to third parties pursuant to the provisions of the APPI, the Company will, after confirming that the request has been made by the data subject or their agent, disclose the same to the requester without delay by the method designated by the requester from among provision of an electronic or magnetic record, delivery of a written document, or other methods specified by the Company, except where the Company is not obligated to make such disclosure under the APPI or other laws and regulations (if such personal information does not exist, the Company will notify the requester to that effect). Please note that a fee of JPY 800 (plus consumption tax) per request is charged for the disclosure of personal information.
• (3) When the Company is requested by the data subject identified by personal information, or by their agent, to correct, add to, or delete such personal information (collectively, "Correction, etc.") pursuant to the provisions of the APPI, the Company will, after confirming that the request has been made by the data subject or their agent, conduct the necessary investigation without delay to the extent necessary to achieve the purposes of use, make Correction, etc. of the contents of the personal information based on the results of such investigation, and notify the requester to that effect, except where the Company is not obligated to make Correction, etc. under the APPI or other laws and regulations (if the Company decides not to make Correction, etc., it will notify the requester to that effect without delay).
• (4) When the Company is requested by the data subject identified by personal information, or by their agent, to cease the use of or erase such personal information (collectively, "Suspension of Use, etc.") pursuant to the provisions of the APPI, and it is found that the request is well-founded, the Company will, after confirming that the request has been made by the data subject or their agent, carry out Suspension of Use, etc. of the personal information without delay and notify the requester to that effect, except where the Company is not obligated to carry out Suspension of Use, etc. under the APPI or other laws and regulations (if the Company decides not to carry out Suspension of Use, etc., it will notify the requester to that effect without delay).
• (5) When making a request under any of the preceding four paragraphs, please complete the request form prescribed by the Company and send it, together with the attachments specified in the request form, to the contact point set forth in Section 9(2). Personal information provided in connection with a request will be used for the purpose of responding to such request and will be stored securely. Please note that request forms and attachments will not be returned.

Section 9. Contact Points for Inquiries and Complaints

• (1) Personal Information Controller
  • Parallel Inc.
  • Keyaki House 101, 3-19-10 Nishi-Azabu, Minato-ku, Tokyo 106-0031, Japan
  • Jo Aoki, CEO
• (2) Contact Point for Inquiries
  • Parallel Inc.
  • Keyaki House 101, 3-19-10 Nishi-Azabu, Minato-ku, Tokyo 106-0031, Japan
  • E-mail: support@parallelcorp.com
• (3) Contact Point for Complaints (including responses to objections concerning disclosure, Correction, etc., and Suspension of Use, etc. of personal information)
  • Parallel Inc.
  • Keyaki House 101, 3-19-10 Nishi-Azabu, Minato-ku, Tokyo 106-0031, Japan
  • E-mail: help@parallelcorp.com

Section 10. Amendments to this Policy

The Company may review the contents of this Policy from time to time and amend it as necessary. Material changes to this Policy will be posted on the Website together with the latest version of the privacy policy, and you will be notified of such changes through in-app notices in the Products or other appropriate means. Changes to this Policy shall take effect from the time the Company posts them on the Website.

Section 11. Use of Cookies and Other Technologies

The Products may use cookies and similar technologies. These technologies help the Company understand the usage status, etc. of the Products and contribute to improving the Products. If you wish to disable cookies, you may do so by changing your web browser settings. However, if you disable cookies, you may be unable to use some of the functions of the Products.

Section 12. Use of Third-Party Services

The Products or the Website may use the following services provided by third parties. This may include behavioral tracking using cookies, etc. For details of these services and how to opt out of tracking, please refer to the terms of use, etc. listed below.

Enacted: October 29, 2026

The original Japanese version of this Policy is available at https://lp.piik.social/privacy?hl=ja.

Supplementary Provisions for Users Outside Japan

(This Part is included in the English version only and has no counterpart in the Japanese version.)

These Supplementary Provisions apply in addition to Sections 1 through 12 of this Policy. In the event of any inconsistency between these Supplementary Provisions and Sections 1 through 12 with respect to the individuals to whom these Supplementary Provisions apply, these Supplementary Provisions shall prevail to the extent of such inconsistency.

Part A. Children's Privacy (Including the U.S. Children's Online Privacy Protection Act)

• 1. The Products are not directed to children under the age of 13, and the Company does not knowingly collect personal information from children under the age of 13 without verifiable parental consent, as required by the Children's Online Privacy Protection Act of the United States ("COPPA") and other applicable laws.
• 2. Under the Piik Terms and Conditions, individuals under the age of 13 are not permitted to use the Products. If you are under the age of 13, please do not use the Products or provide any personal information to the Company.
• 3. If the Company becomes aware that a user is under the age of 13, including where a user has provided an age information or date of birth indicating that they are under the age of 13, the Company may suspend or terminate such user's access to the Products, and will take steps to delete personal information collected from such user as promptly as practicable, except where retention is required by applicable laws and regulations.
• 4. If you are a parent or guardian and believe that your child under the age of 13 has provided personal information to the Company, please contact the Company at the contact point set forth in Section 9(2).