Privacy Policy
How XIUYI handles personal information on this website and in the SHŌ iPhone app.
Last updated: October 13, 2026
1. Who is responsible
XIUYI CO., LTD. (秀一株式会社) operates this website and the SHŌ app. Our contact address is Forest Gate 3F, 20-23 Daikanyamacho, Shibuya-ku, Tokyo 150-0034, Japan. For privacy questions and requests, contact info@xiuyi.co.jp or +81-80-3561-0066.
2. Information we handle
Account information includes your name, email address, language preference, account identifier, and authentication information. If you use Apple or Google sign-in, we receive the information those services share with your authorization, which may include a name, email address, profile image, and provider identifier. Password-based accounts use a password hash. We also handle contact details, appointment requests, service selections, preferred dates, and notes that you provide. Medical reports, images, uploaded files, AI messages, and conversation history may contain health information or other sensitive information. Technical records may include IP addresses, browser or device information, session identifiers, request logs, and errors.
3. Why we use information
We use information to create and authenticate accounts, provide requested concierge services, coordinate appointments, respond to inquiries, store and retrieve documents and conversations, generate AI responses, maintain language preferences, and protect and operate our services. We also use relevant records to investigate errors or abuse, handle disputes, and meet applicable legal obligations. Browsing public service information does not require an account.
4. Health information and the AI assistant
Share only information needed for your request and only documents you are entitled to share. SHŌ uses Anthropic Claude services to generate AI responses. When you use the assistant, your messages and relevant conversation context are processed by the AI provider. The assistant can retrieve your stored report information and read relevant pages from medical reports or conversation attachments to answer your question; this may send text and page images containing health information to the provider. AI processing is not limited to your device and may take place outside Japan. You can choose not to use AI or not to provide sensitive details. AI output is informational and may be inaccurate; it is not a diagnosis or a substitute for medical care.
5. Service providers and other recipients
We use hosting, database, file-storage, network, authentication, and AI providers to operate the service. The application infrastructure uses Zeabur hosting, PostgreSQL, and MinIO-compatible storage; Apple or Google is involved when you choose its sign-in option, and Anthropic is involved in AI processing. These providers may process information outside your country of residence. Appointment coordination may require relevant details to be provided to the medical institution or interpreter involved in your request. We explain and obtain consent for disclosures where required by applicable law. Information may also be disclosed when required by law or necessary to protect rights, safety, or the security of the service. Medical files and private conversations are not public community posts.
6. Cookies, local storage, and device access
The website uses authentication cookies and language preferences; the app also stores session and preference information. Service selections and draft quotes may be stored locally. You can manage cookies through your browser and app permissions through iOS settings. Blocking required cookies may prevent sign-in. The app accesses files or photos you choose through the system picker. If you choose to add an appointment to your calendar, iOS asks for the relevant calendar permission. We do not include advertising-tracking SDKs in the native app.
7. Retention and deletion
Account records, bookings, reports, and conversations are stored to provide the service until deleted or no longer needed, subject to applicable legal obligations. There is no single automatic deletion period for all records. You can delete individual reports and AI conversations using the available controls. In the SHŌ app, open Account → Delete account to permanently delete your account, uploaded reports and conversation attachments, and AI conversations. Booking records are anonymized by removing their account link, appointment time, notes, event history and follow-up messages. All device sessions are revoked; Apple authorization is revoked for Apple-linked accounts. A recent sign-in and explicit confirmation are required. This cannot be undone. Account deletion does not cancel appointments already arranged with a medical provider; contact the concierge to change them. Uninstalling the app does not delete server-side records. Contact info@xiuyi.co.jp to request deletion of other information or withdrawal of consent. Backup, security, and legally required records may be subject to separate retention.
8. Security
We use HTTPS for public service communications, authenticated access controls for private documents, password hashing, and session management to protect information. No method of transmission or storage is completely risk-free. Keep your sign-in credentials private and use account security settings to revoke sessions you no longer recognize.
9. Your choices and requests
You may contact us to ask about the purposes of processing, request access or correction, request deletion or restriction of use, object to a disclosure, or withdraw consent where applicable. We handle requests in accordance with the laws that apply to the information and may request information needed to verify identity. Withdrawing consent does not affect processing already lawfully carried out, and some requests may prevent us from providing a requested service. Please do not send medical documents in an initial privacy inquiry.
10. Children, external services, and changes
The service is not designed for children to use independently. A parent or guardian should contact us before sharing a child’s medical information. Links to external services, including communication and map services, are governed by those services’ own privacy policies. We may update this policy when our services or handling of information changes. The latest version and its update date are published on this page.