Privacy Policy

1. Who is responsible for your data

The Service is provided by two companies, each handling personal data within the scope below:

• Wawa Technology K.K. (ワワ科技株式会社) (Japan; the "Operator"): runs the Service's website and systems and handles accounts, learning data, AI processing, and purchases in Japanese yen or US dollars.
• 哇哇科技股份有限公司 (Taiwan; business ID 24969612; the "Taiwan Seller"): sells the Service in New Taiwan dollars and handles orders, payment collection, e-invoices, refunds and complaints for those purchases.

When one company handles data for the other company's purposes, it does so as an entrusted processor (Article 27(5)(i) of Japan's Act on the Protection of Personal Information; Article 4 of Taiwan's Personal Data Protection Act) and only within that scope. The two companies do not share data as affiliates or use it for any other purpose. For example, the Taiwan Seller's order and e-invoice data is stored in the Operator's systems and handled by the Operator on the Taiwan Seller's behalf.

2. Data we collect

3. How we use your data

• To provide the Service: accounts, page scans, AI Sensei, review, points and sync across devices.
• To collect payments, issue invoices and receipts, give refunds and handle payment disputes.
• To decide the seller and price based on where you say you live, and to prevent misuse such as account sharing, false residence and abuse of free benefits.
• To send transaction notices, expiry and renewal reminders and notices of changes to terms, and other messages if you agree.
• To answer questions and complaints and correct errors in learning materials.
• To keep the Service secure, investigate problems and manage usage and costs.
• To analyze usage statistically, without identifying individuals, to improve the Service.
• To meet legal obligations such as accounting, tax and e-invoicing.

4. AI processing

To provide scanning, explanations, translations, quizzes, lessons, writing checks and read-aloud, we send the necessary data to these companies for processing:

• OpenAI (United States): photos, text read from them, your questions and writing, lesson audio and transcripts, and your name, level and "what Sensei remembers" when needed for answers.
• Google (United States): the Japanese text to be read aloud.

Under OpenAI's published data policy for its business services, data sent through its API is not used to train its models by default and may be kept for up to 30 days to monitor abuse. We do not use your data to train AI models.
Questions and answers in "Ask by text" and "Highlight explanation" are stored as shared explanations in a form that does not identify you (see Article 5 of the Terms of Service).
Before taking a photo, cover any names, addresses or other personal details you do not need.

5. Photo storage

• Uploaded photos are compressed on our servers and, by default, kept for 90 days and then deleted automatically.
• You can set a whole chapter or individual photos to "Keep forever". Keeping is subject to your plan's storage and photo limits (see the Plans page); when storage is full, new photos are still scanned but not stored.
• If your plan ends or is downgraded and you exceed your storage, the excess returns to 90-day storage.
• Text read from photos and page content are kept until you delete the page or your account.
• You can delete photos at any time.

6. Service providers

Apart from these service providers, we do not provide your personal data to third parties, except as required by law, in response to lawful requests from courts, investigators or authorities, where necessary to protect life, body or property and it is difficult to obtain your consent, or with your consent.

7. International transfers

Your personal data is transferred and stored between Japan, Taiwan and the United States.

• When the Operator entrusts data to providers outside Japan, it ensures by contract or other means that they continuously take measures consistent with Japan's Act on the Protection of Personal Information. On request, we will tell you about those measures, the provider's country and that country's data protection system. The United States has no federal comprehensive data protection law equivalent to Japan's, but has rules such as the Federal Trade Commission Act and state laws including the California Consumer Privacy Act. Taiwan has its Personal Data Protection Act.
• International transfers by the Taiwan Seller are not restricted by Taiwan's competent authorities.

8. Cookies and browser storage

• Sign-in status (authentication cookies) and your interface language (a cookie kept for 1 year).
• Browser storage: local settings, temporary copies of learning data, a random identifier for step analytics, and your own OpenAI key (kept only in your browser).
• We do not use third-party advertising cookies or cross-site tracking. If you play an embedded YouTube video, YouTube may use cookies under its own policy.
• You can delete cookies and site data in your browser; you may then need to sign in again and some local settings may be lost.

9. How long we keep data

• Account and learning data: until you delete the data or your account.
• Photos: as described in section 5.
• Usage records and points history: while your account exists; after deletion, records not related to transactions are deleted.
• Step analytics: when you delete your account, the link to your account and browser is removed and the records are used only for statistics.
• Transaction records required by law are not deleted with your account: orders, payments, refunds, e-invoices, receipts and invoices, and consent records are kept as required by law (Japan: 7 years, 10 in some cases; Taiwan: at least 5 years for vouchers and 10 years for books). We keep them for 10 years, and after account deletion we keep them under a code that does not directly identify you.

10. Your rights

• Under Japanese law, you can ask us to notify you of the purposes of use, disclose your data (including records of provision to third parties), correct, add to or delete it, stop using or erase it, and stop providing it to third parties. Under Article 3 of Taiwan's Personal Data Protection Act, you can ask to inquire about or review your data, receive copies, supplement or correct it, stop its collection, processing or use, and delete it.
• How to ask: email max@wowwow.tw from your registered address. We may ask for information to confirm it is you. We respond without delay (in Taiwan, within 15 days for inquiries, reviews and copies, and within 30 days for corrections, stopping and deletion, extendable with notice) and do not charge a fee.
• You may choose not to provide some data, but some features may then be unavailable (for example, you cannot sign up without an email address or buy in TWD without e-invoice details).

11. Deleting your account

• Email max@wowwow.tw. After confirming your identity, we delete your account, photos and learning data within 30 days. Data in backups is deleted when the backup retention period ends.
• Transaction records required by law are kept as described in section 9.
• Shared explanations do not identify you and remain after your account is deleted.

12. Children and minors

The Service is not directed to children under 13, and children under 13 should not sign up. Users under 18 should use the Service with a parent's or legal guardian's consent; at purchase we confirm the guardian's consent under the purchase terms.

13. Security measures

• Organizational: we appoint a person responsible for personal data and regularly check how it is handled.
• Personnel: people who handle personal data are bound by confidentiality and receive the necessary training.
• Technical: all communication is encrypted; the database controls access per user (you can read and write only your own data); administrative access is limited to specific people and logged; photos and other files are served through time-limited links.
• Foreign environments: we take necessary measures after understanding the data protection systems of the countries where our providers are located.

14. Changes to this policy

If we change this policy, we announce it on this page and update the version and effective date. For important changes, such as expanding the purposes of use, we notify you by email and obtain your consent again where the law requires it.

15. Contact

Questions, requests and complaints about personal data: max@wowwow.tw

• Wawa Technology K.K.: パララボ天草C, 2638-19 Kitahama-machi, Amakusa-shi, Kumamoto, Japan. Representative: Provided without delay upon request
• 哇哇科技股份有限公司: business ID 24969612. Address: 高雄市新興區中正三路25號14樓. Phone: 07-222-3000

16. Language

This policy is published in Japanese and Traditional Chinese. The Japanese version governs handling by the Operator (Wawa Technology K.K.), and the Traditional Chinese version governs handling by the Taiwan Seller (哇哇科技股份有限公司). This English version is a reference translation.