Jon&Coo Inc. ("we", "us", or "the Company") respects the privacy of users ("you") of the J-Times media platform ("the Service"). This Privacy Policy explains how we collect, use, share, and protect your personal information in compliance with Japan's Act on the Protection of Personal Information (APPI), the EU General Data Protection Regulation (GDPR), and other applicable laws.
1. Data Controller
Company: Jon&Coo Inc.
Address: Shinjuku Park Tower 30F, 3-7-1 Nishi-Shinjuku, Shinjuku-ku, Tokyo 160-0023, Japan
Email: office@jonandcoo.org
Phone: +81-80-5060-5588 (Weekdays 9:00–18:00 JST)
2. Scope
This Policy applies to all services provided through the J-Times platform (website j-times.org and mobile application), including article reading, podcast listening, video viewing, bookmarks, comments, premium content, and the MTC reward system.
3. Information We Collect
3.1 Information You Provide
- Account Information: Name, email address, password (stored as hash), profile image
- Content Preferences: Bookmarks, likes, comments, viewing history settings
- Payment Information: Payment method for premium plans, billing address (card numbers are not stored on our servers)
- Communications: Inquiries, feedback
3.2 Information Collected Automatically
- Technical Data: IP address, browser type/version, OS, device information
- Usage Data: Article views, podcast play time, video watch time, access timestamps
- Location Data: Approximate location based on IP address
- Cookies & Identifiers: Session cookies, authentication tokens, advertising identifiers
4. Purposes of Processing
- Content delivery, personalization, and recommendations
- Account management, authentication, and subscription management
- Podcast/video playback progress tracking, bookmarks, and likes
- MTC reward system operation (point allocation based on listening completion rate)
- Customer support and inquiry handling
- Service improvement, usage analysis, and feature development
- Ad delivery optimization (including native ads)
- Fraud detection, prevention, and security
- Legal compliance, exercise or defense of legal rights
5. Legal Basis (for EEA/UK Users)
- Performance of Contract: Content delivery, premium service provision
- Legitimate Interests: Service improvement, fraud prevention, recommendations
- Legal Obligation: Tax and accounting compliance
- Consent: Marketing notifications, non-essential cookies, ad personalization
6. Payment Processing
Premium plan payments are processed by Stripe, Inc.Sensitive payment data is never stored on our servers. We only receive transaction results.
7. Third-Party Sharing
- Payment Processing: Stripe
- Cloud Infrastructure: Railway (servers), Vercel (frontend)
- Media Delivery: Cloudinary (image/video optimization)
- Analytics: Google Analytics (anonymized)
- Email Delivery: Mailgun
- Legal Requests: Court orders, lawful government requests
8. International Data Transfers
Your data may be processed outside Japan (e.g., United States). We implement appropriate safeguards (Standard Contractual Clauses, etc.).
9. Data Retention
- Account Data: Deleted within 30 days of account deletion
- Transaction Records: Up to 7 years as required by law
- Content Usage Logs: Up to 24 months
- Access Logs: Up to 12 months
10. Security
- Encryption in transit (TLS 1.2+)
- Password hashing (bcrypt)
- HttpOnly / Secure / SameSite cookie management
- Role-based access control (minimum privilege)
- Regular vulnerability assessments
11. Cookies & Tracking
11.1 Essential Cookies
Required for authentication and service operation. Cannot be disabled.
11.2 Analytics Cookies
Used for anonymous usage analysis. Can be disabled via browser settings.
11.3 Advertising Cookies
May be used for native ad optimization. Opt-out available.
11.4 Apple App Tracking Transparency
Our iOS app complies with Apple's ATT framework and requests permission before tracking.
12. Your Rights
- Right of Access: Request disclosure of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data
- Right to Restriction: Request limitation of processing
- Right to Data Portability: Receive data in machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
Contact office@jonandcoo.org to exercise your rights. We respond within 30 days.
13. Children's Privacy
The Service is not intended for children under 16. If we learn that we have collected personal information from a child under 16, we will promptly delete it.
14. Changes to This Policy
We may update this Policy. Material changes will be communicated through the Service or email.
15. Contact Us
Jon&Coo Inc. — Privacy Office (Responsible Person: Ko Takahashi)
Shinjuku Park Tower 30F, 3-7-1 Nishi-Shinjuku, Shinjuku-ku, Tokyo 160-0023, Japan
Email: office@jonandcoo.org
Phone: +81-80-5060-5588 (Weekdays 9:00–18:00 JST)