Privacy Policy
Last updated: January 2025
Introduction and Scope
At Kinari Flow, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our platform, including our micro studio network, live stream classes, corporate wellness programs, and related services. By accessing or using Kinari Flow, you acknowledge that you have read and understood this policy.
Information We Collect
We collect various types of information to provide and improve our services. This includes personal identification information such as your name, email address, phone number, and physical address when you register for an account or book a class. We also collect payment information through secure third-party processors, booking and attendance records, progress tracking data including your skill assessments and achievement milestones, and technical information such as IP addresses, browser types, device information, and usage patterns. For corporate clients, we may collect company information, employee participation data, and wellness program metrics.
How We Use Your Information
Your information enables us to deliver exceptional service. We use your data to process bookings and manage class registrations, facilitate payment transactions, match you with appropriate instructors based on your skill level and preferences, track your progress and provide personalized recommendations, communicate with you about classes, schedule changes, and platform updates, improve our services through analytics and user feedback, and fulfill our legal and regulatory obligations. For corporate clients, we generate aggregate wellness metrics and participation reports while maintaining individual privacy.
Data Sharing and Disclosure
We do not sell your personal information to third parties. We share your data only in specific circumstances: with instructors when you book their classes (limited to information necessary for session delivery), with payment processors to complete transactions securely, with technology service providers who assist in operating our platform under strict confidentiality agreements, with corporate clients in aggregate form for wellness program reporting (individual identities are anonymized), and with law enforcement or regulatory authorities when required by law or to protect our rights and safety. All third parties are contractually obligated to maintain the confidentiality and security of your information.
Data Security Measures
We implement comprehensive security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest using industry-standard protocols, secure authentication systems with password protection, regular security audits and vulnerability assessments, restricted access to personal information on a need-to-know basis, secure data centers with physical and environmental controls, and regular backups with disaster recovery procedures. While we strive to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your Rights and Choices
You have significant control over your personal information. You may access and review your account information at any time through your user dashboard, request corrections to inaccurate or incomplete data, download a copy of your personal information in a portable format, request deletion of your account and associated data (subject to legal retention requirements), opt out of marketing communications while still receiving essential service notifications, object to certain processing activities, and withdraw consent for data processing where consent is the legal basis. To exercise these rights, contact us using the information provided at the end of this policy.
Retention of Information
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy. Account information is maintained while your account remains active and for a reasonable period thereafter to comply with legal obligations. Booking and attendance records are retained for seven years for accounting and tax purposes. Payment transaction records are kept in accordance with financial regulations. Progress tracking data is retained to provide continuous service improvement. Marketing communications preferences are stored until you opt out or request deletion. After retention periods expire, we securely delete or anonymize your information.
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience on our platform. Essential cookies enable core functionality such as user authentication and booking systems. Performance cookies help us understand how you use our platform to identify areas for improvement. Functionality cookies remember your preferences and settings. Marketing cookies may be used to deliver relevant content based on your interests. You can control cookie preferences through your browser settings or our cookie management tool. Disabling certain cookies may limit some platform features. For detailed information, please review our Cookie Policy.
International Data Transfers
Kinari Flow primarily operates in Japan, and your information is stored and processed on servers located within Japan. However, some of our service providers may process data in other countries. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities, adequacy decisions recognizing equivalent data protection standards, and binding corporate rules for intra-organizational transfers. We maintain the same level of protection regardless of where your data is processed.
Children's Privacy
Our services are designed for individuals aged 18 and older. We do not knowingly collect personal information from children under 18 without parental consent. If you are under 18, please have a parent or legal guardian create and manage your account. Parents may book classes on behalf of their children and control their minors' information. If we discover that we have inadvertently collected information from a child without proper consent, we will promptly delete such information. Parents who believe we may have collected information about their child should contact us immediately.
Third-Party Services and Links
Our platform may contain links to third-party websites, services, or integrations that we do not control. This Privacy Policy applies only to Kinari Flow. When you access third-party services, their own privacy policies govern the collection and use of your information. We encourage you to review the privacy policies of any third-party services before providing your information. We are not responsible for the privacy practices of third parties, even when accessed through our platform. Use caution when sharing personal information with any external service.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by email, through a prominent notice on our platform, or by other appropriate means at least 30 days before the changes take effect. We will also update the "Last Updated" date at the top of this policy. Your continued use of Kinari Flow after changes become effective constitutes acceptance of the revised policy. We encourage you to review this policy regularly to stay informed about how we protect your information.
Contact Information and Data Protection Officer
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at privacy@quorinvale.com or call +81 70 4928 3617. You may also write to us at: Kinari Flow Privacy Office, 4 Chome-10-2 Hanazono, Hanamigawa Ward, Chiba, 262-0025, Japan. We aim to respond to all inquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.