Privacy Policy

Last Updated: June 29, 2026

1. Introduction

Kyoto Kagaku Co., Ltd. ("we," "our," or "us") operates the CTG SKILL-UP Monitor and Vital Signs SKILL-UP Monitor applications (collectively, the "Apps"). The Apps are professional medical education and training tools intended for users of contracted educational institutions and healthcare organizations, such as universities, nursing schools, hospitals, and training facilities.

This Privacy Policy explains how we collect, use, retain, and protect information in connection with the Apps and related enterprise services.

2. Data Controller

Company Name: Kyoto Kagaku Co., Ltd.

Address: 15 Kitanekoya-cho, Fushimi-ku, Kyoto 612-8388, Japan

Contact: privacy@kyotokagaku.co.jp / +81-75-605-2510

3. Data We Collect

3.1 Organization Account Information

When users sign in with organization-managed credentials, we collect the minimum information necessary to authenticate access to enterprise services purchased by the contracted organization.

Data Purpose Legal Basis
Organization ID Identification of the contracted organization Performance of contract
User ID User authentication and access control Performance of contract
Password Authentication of the organization-managed account Performance of contract

Note: The Apps do not provide any in-app purchase flow, external purchase link, pricing information, or call to action for individual purchases. Organization account credentials are provided by contracted educational institutions or healthcare organizations.

3.2 Device Information

To support secure use and device registration management, we may collect the following information:

Data Purpose Legal Basis
Device fingerprint, such as a SHA-256 hash derived from platform and device identifiers Device registration management, security, and prevention of unauthorized access Legitimate interests / Performance of contract
Platform, such as iOS or Android Technical support and compatibility Legitimate interests
OS version Compatibility and troubleshooting Legitimate interests
App version Support, maintenance, and updates Legitimate interests

3.3 Authentication and Security Logs

Data Purpose Legal Basis
Authentication timestamps Audit trail and troubleshooting Legitimate interests
Authentication success or failure status Security analysis and prevention of unauthorized access Legitimate interests
Device registration and device deactivation timestamps Device management for enterprise services Performance of contract / Legitimate interests

4. Data Retention

Data Type Retention Period
Organization account information used for authentication Duration of the organization's service agreement plus up to 365 days, unless a longer period is required by law
Active device registration information Duration of the organization's service agreement
Inactive device registration information Up to 365 days after device deactivation or service termination
Authentication and security logs Up to 365 days

5. Data Processing Location

Data is processed on servers located in Japan. Japan has been recognized by the European Commission as providing an adequate level of data protection.

6. Your Rights

Depending on your location and applicable law, you may have the right to:

To exercise these rights, please contact us using the contact information below. If your account is managed by an educational institution or healthcare organization, we may need to coordinate with that organization to respond to your request.

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

8. Third-Party Sharing

We do not sell personal data. We may share data only in the following limited circumstances:

9. Children's Privacy

The Apps are professional medical education and training tools and are not intended for children under 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Apps, our website, or other appropriate means.

11. Contact Us

For privacy-related inquiries:

Email: privacy@kyotokagaku.co.jp

Address: 15 Kitanekoya-cho, Fushimi-ku, Kyoto 612-8388, Japan

12. Supervisory Authority

If you are in the European Economic Area and believe that we have not addressed your concerns, you may have the right to lodge a complaint with a competent supervisory authority.