Kirure Inc. (hereinafter "the Company") regards the protection of privacy of artists ("Creators") and users ("Users") as a priority, and complies with the Act on the Protection of Personal Information and other applicable laws.

Established: January 20, 2026

The Company collects the following information:

• Account registration information (name, email address, profile image, bio, etc.)
• Authentication information (external IDs such as Firebase, OAuth information)
• Payment-related information (tokens issued by Stripe, payment status. The Company does not retain card numbers)
• Viewing logs, viewing duration, subscription usage history, viewing data for revenue sharing
• Device information, IP address, cookies, browser information
• Inquiry content, support history
• Stripe Connect account ID, identity verification status, transfer information

• Provision, operation, and identity verification of the Service
• Granting viewing rights, payment processing, revenue sharing calculation and payment
• Integration with Stripe and other external payment services
• Monitoring for unauthorized use, security measures, and troubleshooting
• Service improvement, statistical analysis, feature development
• Responding to inquiries, important notifications
• Legal compliance and dispute resolution

The Company will not provide personal information to third parties without consent, except as outlined below. When outsourcing to Stripe Payment Japan K.K. (payment processing), Stripe, Inc. (USA), Amazon Web Services, Inc. (cloud infrastructure), Google LLC (analytics/Firebase), Zendesk, Inc. (support), appropriate contracts and security measures are in place.

Information may be provided to the extent necessary in response to legal disclosure requests.

The Company currently does not conduct joint use of personal information. If joint use is implemented in the future, the names of joint users, purposes, responsible parties, and disclosure methods will be published on this page, with consent obtained as necessary.

Services from Stripe, Inc., Amazon Web Services, Inc., Google LLC, etc. are operated primarily from the United States, so personal information may be transferred to the US or outside the EEA. The Company verifies certifications (EU-US Data Privacy Framework, etc.) and standard contractual clauses to ensure adequate protection. For details on protection measures, please contact us through the contact information at the end of this policy.

The Company uses cookies and similar technologies for understanding usage patterns, analytics, and maintaining login status. You can disable cookies in your browser settings, but some features may become unavailable.

The Company implements access control, encryption, audit logs, subcontractor management, and other measures to prevent leakage, loss, or damage of personal information. In the event of a significant incident, the scope of impact will be promptly investigated and users and relevant authorities will be notified as necessary.

Users and Creators may request disclosure, correction, addition, deletion, or suspension of use of their personal information held by the Company. Please contact our inquiry desk with identity verification documents. We will respond promptly unless there is a legitimate reason not to.

If minors use this Service, please provide information with parental consent.

The Company may revise this policy in response to legal changes or service modifications. Significant changes will be notified through announcements on the Service or by email.

For inquiries regarding this policy and personal information:

• Kirure Inc. — Privacy Department
• Address: Shibuya Dogenzaka Tokyu Bldg. 2F-C, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan
• Phone: 070-8345-9186 (Weekdays 10:00–18:00 JST)
• Email: privacy@exhiport.com