Privacy Policy

MensuraMedia runs HonmeiDate; in this policy that's "we," "us," and "our." Under Japan's Act on the Protection of Personal Information (APPI) — and comparable laws elsewhere — MensuraMedia is the personal-information handling operator (the data controller) for everything processed through the Service.

Read on for the personal data we take in when you use the HonmeiDate website and its related features (the "Service"), our reasons for taking it, how long it stays, and what you can do about it. Pair this with our Terms of Service.

Got a question about this policy? Want to exercise a right — access, correction, addition, deletion, or suspension of use of your data (Section 12)? Unhappy with how we've handled your data? Reach us through the support page or the feedback form on our About page.

Operator: MensuraMedia. The full business record — legal name, operating manager, business address, and a working contact — lives on our Specified Commercial Transactions Act notice, which goes live ahead of any paid transaction with a Japanese consumer. Once we're established in Japan, we'll refresh the registered details to match.

Information you give us.

• Account data — your email address, your password (held only as a one-way hash), your birth month and year, and — if you sign up through a third-party identity provider — the basic profile signals that provider hands back.
• Profile data — display name, photos, bio, gender, preferences, location city/region, interests, plus whatever else you type into the profile builder.
• Messages and communications — anything you send through direct messages, chat rooms, Break Out Chat, support tickets, or our feedback form.
• Age and identity verification data — the documents and selfie you submit when you verify, plus the result we derive from them. Section 5 sets out the heightened rules we apply to it.
• Payment data — subscribe to a paid tier and our payment processor takes your card or equivalent details. What comes back to us is a customer reference, your subscription status, and the amount billed — never your full card number.

Information we collect automatically.

• Usage activity — the pages you open, the things you like or favorite, who you message, the chat rooms you join, and a timestamp on each of those.
• Device and network — IP address, user-agent string, operating system, browser, approximate geolocation derived from IP, and a session identifier.
• Security and moderation signals — rate-limit counters, bot-score components, and abuse-detection metadata that help keep the platform safe.
• Inferred data — signals we work out from the above to suggest matches and to catch fraud or abuse.
• Error reports — when something breaks in your browser, the Service may forward a short error message, a stack trace, and the page URL to our error-monitoring provider so we can fix it.

What we do not collect.

Precise GPS coordinates? No. Extra profile data bought from brokers? No. Your contacts, calendar, or microphone? We don't touch them. And we build no cross-site advertising profiles.

Here are the specified purposes (利用目的) your personal data serves:

• operating the matching and messaging service — creating your account, showing your profile to other members, matching you with people who fit your stated preferences, and carrying your messages;
• verifying age and identity before you can post a profile for contact or send and receive messages;
• moderating content and protecting members and children — including image moderation, spam and scam detection, enforcing our community rules, and investigating reports;
• preventing fraud and abuse, and keeping the Service secure;
• billing and support — processing subscription payments, sending receipts, handling refunds, and responding to support tickets;
• communicating with you — service notices, security alerts, and (if you opt in) product updates and activity digests;
• complying with law — meeting our legal obligations, including tax, accounting, records-retention, and child-safety reporting duties;
• improving the Service — fixing bugs and planning changes, using aggregated or pseudonymous activity data wherever practical.

Your personal data and member content never go toward training general-purpose third-party AI models. We do run automated systems on Service data as part of operating it — content filters, spam detection, image moderation — some built in-house, some from trusted third parties.

Under the APPI, our processing runs on the purposes specified above, on the consent you give when you create an account and accept this policy, and on the other bases the law allows. If a different privacy law reaches you — GDPR in the EEA, say — these are the legal bases we lean on:

• Contract — delivering the Service you signed up for.
• Legitimate interests — keeping the Service safe, heading off fraud, improving the product, and running the business, so long as your rights don't outweigh those interests.
• Consent — optional features that turn on your choice, such as identity verification, cross-border transfer, or marketing email.
• Legal obligation — moments where the law tells us to retain, disclose, or act on information.

Posting a profile to other members for contact, or sending and receiving messages, comes after our verification check (the Terms of Service cover this). Of everything we hold, this data gets the most careful handling.

What we keep, and what we don't.

• We keep the result, not the evidence. Once a verification decision is made, what stays is the outcome — the status, the method used, the date, a derived "over 18" flag, and a hashed or masked reference to the evidence. Your document or selfie isn't kept long-term.
• Raw ID images and selfies are deleted on a short timer. Once the decision is made, document and selfie images run down a short retention timer (see Section 10); they linger only where a documented need calls for it.
• My Number is never stored. We do not store your 12-digit Individual Number (My Number). Use a card that shows it and we ask you to cover the My Number — we neither collect nor retain it.
• We mask data we may not retain. On an insurance card or similar document, the health-insurance number and any other details we are not permitted to retain are masked out.

Heightened protection.

We hold verification data in a separate verification store — tougher security, tighter access controls than ordinary account data, and every access logged. No statute fixes a retention period here, so we hold it only as long as it's needed and delete it under the APPI's data-minimization principle.

Children come first, so every image uploaded to the Service runs through a trusted third-party child-safety tool. For each image the tool builds a digital fingerprint — a cryptographic and perceptual hash — and checks it against established databases of known child sexual abuse material; alongside that, automated classification flags images that may be previously unknown material of that kind.

The check exists for child protection alone, and it's built so the images aren't used to identify you as an individual. On a match or a likely match, we pull the content, may suspend or permanently close the account, and report it to the relevant authorities and child-protection organizations as the law requires. Upload an image and you understand and agree it is subject to this moderation — which tracks §8A of our Terms of Service.

Member-to-member messages move through systems we operate and can reach into. Acting on a report — or working to catch prohibited conduct and protect members — we may review relevant content, private messages included, but only for safety, moderation, and legal compliance. Any such review stays as narrow as the purpose allows.

Use the messaging features and you consent to that access and review for those purposes, in line with §8 of our Terms of Service. We don't read your messages to build advertising profiles or to train third-party AI models.

Your personal data is never sold, rented, or traded to third parties for marketing.

A limited slice of personal data does reach these categories of recipient:

• Processors who help us run the Service — the payment processor, the identity-verification vendor, the child-safety image-moderation provider, our email-delivery provider, and our error-monitoring provider among them. A contract ties each one to processing personal data on our instructions alone, for the purposes we set, under our oversight.
• Other members — the profile fields you choose to display, and the messages you send, reach the members you mean them for. How much shows, and to whom, follows your privacy controls on each field.
• Authorities and child-protection organizations — when a valid legal order compels us, when child-safety law requires reporting, or when we reasonably believe disclosure is needed to protect someone's safety or head off serious harm.
• A successor in a corporate transaction — should MensuraMedia go through a merger, acquisition, or asset sale, personal data may move with that transaction, carrying the same protections it has today.

Member content is never used to train general-purpose third-party AI models.

For some features to work, information leaves your device or browser and travels to a third party. These are the categories on the receiving end:

• Payment processor — a third-party PCI-DSS-compliant processor receives payment and checkout details when you subscribe or buy a paid item.
• Error monitoring (Sentry) — short error reports (an error message, stack trace, and the page URL) when something breaks in your browser.
• Email delivery (SMTP provider) — the email address and message content it takes to deliver transactional and (if you opt in) notification email.
• Embedded media (oEmbed / third-party embeds) — where a profile carries a media link, your browser may reach out to the third-party media host to load the embed, and that host sees the request.

A dedicated external-transmission disclosure is coming: it will list what user-terminal information is sent, to whom, and for what purpose, with opt-out or consent wherever that's required. This policy will stay consistent with it.

We also lean on a handful of cookies and similar storage to keep you signed in, hold your session, guard against cross-site request forgery, and remember basic preferences — theme, dismissed banners, that sort of thing. None of them are third-party advertising cookies. Your browser can usually block or clear cookies, though doing so may break parts of the Service.

Data sticks around only as long as the purposes in this policy require, plus whatever extra the law demands. Concretely:

• Verification result — held for the life of your account plus a short tail after it closes, then deleted.
• Raw ID and selfie images — gone roughly seven (7) days after the verification decision, barring a documented need to hold them a little longer.
• Account and profile data — present while your account is active. Delete the account and a deletion process clears most data promptly; a few fields may stay in de-identified form, or under a limited legal hold, for safety, fraud prevention, or legal purposes.
• Messages — retained while at least one participant still holds a copy; once both delete a thread, the underlying record clears on a rolling schedule.
• Consent records — retained so we can show what you agreed to and when.
• Audit and safety logs — held up to about two (2) years to back investigations of repeat offenders; IP addresses in audit logs are anonymized after about 90 days.
• Payment records — held as long as tax and accounting law requires (up to about seven years).
• Backups — encrypted backups turn over on their own schedule; data in a backup may linger a limited while after it's deleted from our active systems, and only a disaster-recovery scenario restores it.

Automatic deletion jobs enforce these timers — there's no manual cleanup behind them.

Part of your personal data is stored or processed outside Japan. The destination right now is the United States, home to parts of our infrastructure and some of our processors. Using the Service therefore means a cross-border transfer of personal data.

That transfer rests on your consent or another lawful basis under the APPI, and we flag it to you before or at the point of collection. The United States has no single national data-protection law on a par with Japan's APPI; instead, protection comes from a patchwork of federal and state laws together with the contractual and security safeguards we set up. Our US-based processors are required to apply comparable security and confidentiality. Verification data sits under the heightened protection set out in Section 5.

Sending data abroad doesn't dilute our other APPI duties. Our data-protection, security, retention, and child-safety obligations travel with your data wherever it's held — consistent with §9 of our Terms of Service.

The APPI lets you request access to, correction or addition of, deletion of, and suspension of use of your personal data. Where you live and which other privacy law applies can add more — rights to object, to restrict processing, to data portability, and to withdraw consent:

• Access — ask for a copy of the personal data we hold about you.
• Correction or addition — fix data that's inaccurate or incomplete.
• Deletion — have us delete your account and the personal data tied to it, subject to the retention carve-outs in Section 10.
• Suspension of use, objection, and restriction — tell us to halt or limit certain processing, direct marketing included.
• Portability — get your data in a machine-readable format where this right applies.
• Withdraw consent — where consent is the basis, pull it at any time; that doesn't undo processing already done before you withdrew.
• Complaint — take a complaint to the relevant data-protection authority if you think our handling of your data breaks applicable law.

You can do most of this straight from your account settings — profile edit, privacy controls, account deletion. For whatever those settings don't cover, reach us through the support page and we'll respond without undue delay.

Personal data is guarded by organizational, human, physical, and technical measures scaled to how sensitive it is — TLS in transit, encrypted backups, hashed passwords, field-level encryption on sensitive fields, access controls, access logging, rate limiting, and oversight of our processors. Verification data sits under the heightened controls described in Section 5. We keep this description general enough that it gives an attacker nothing.

No system is flawless. Should we learn of a breach likely to pose a meaningful risk to your rights, we'll tell you — and, where required, the relevant authority — as applicable law directs.

HonmeiDate is built for adults. Nobody under 18 is meant to be here, and our age and identity verification exists to keep minors out. We don't knowingly collect personal data from minors. Learn that an account belongs to someone under 18 and we close it, deleting the personal data tied to it. Think a minor is on the Service? Please contact us.

This policy will get revised now and then. A material change brings a fresh effective date and version at the top, plus reasonable advance notice to you — usually an email and a prominent in-app notice.

This policy may appear in more than one language. In the Japanese market the Japanese-language version is the binding one and prevails over any translation; this English text is here for convenience.

Privacy questions, any of the Section 12 rights, or a concern about how your data is being handled — bring them to us through the support page or the feedback form on our About page.

MensuraMedia operates HonmeiDate. Privacy matters to us because this Service runs on trust — and trust begins with how carefully we handle what you share.