This is an English translation provided for reference. The Japanese version is the authoritative text and prevails in the event of any discrepancy (see Section 14).
PAAN Co., Ltd. (the “Company”) has established this Privacy Policy (this “Policy”) concerning the handling of personal information and user information in MENU-PAAN, a multilingual menu translation service for diners; RESTO-PAAN, a menu management and multilingual translation service for restaurant owners; and any other services that the Company currently provides or may provide in the future (collectively, the “Company Services”), in compliance with the Act on the Protection of Personal Information of Japan (the “APPI”) and other applicable laws and regulations.
This Policy applies to all of the Company Services in common. Matters specific to a particular service are stated as such.
| Name | PAAN Co., Ltd. |
|---|---|
| Representative | Rokusaburo Inui, Representative Director |
| Personal information protection manager | Rokusaburo Inui, Representative Director |
| Contact point | https://www.paan.co.jp/contact |
In providing the Company Services, the Company may collect the following information.
Authentication information such as email address, display name and password. Where you register through external authentication (SSO) with an Apple ID or a Google account, the identifier, email address and similar information obtained from the relevant provider. Your profile avatar (initials, an icon or an image you have set). Because accounts and avatars are used in common across the Company Services (MENU-PAAN, RESTO-PAAN and others), they are shared between those services for the same account.
Dish names, descriptions, prices, currencies, categories (sections), menu images, dish images, tags and similar content that you upload to the Company Services by entering, photographing or other means, and data derived from it that the Company Services generate automatically (by OCR, AI translation, generation of reference information and keyword extraction), such as translation results, dish names, descriptions and prices. This information is stored so that you can refer to it as your history, and you can view and delete it using the features of the Company Services.
Information on purchases and charges when you buy a paid plan or paid feature. Details of your payment method, such as your credit card number, are handled by Apple (in-app purchase) or by the payment service provider the Company uses; the Company does not hold card numbers themselves.
Date and time of access, operation and usage history, usage status such as the number of menu translations and translated dishes consumed and the plan held, device, operating system and browser information, IP address (anonymised when analysed), and identifiers stored in cookies, local storage and similar technologies.
Language settings, currency settings, display settings such as text size and theme, country of stay, country of residence and country of origin, year of birth and gender, as well as foods you dislike (would rather avoid), dining preferences and similar information.
Your approximate location at the time of a menu translation, obtained only where you have permitted it on your device. To resolve place names (country, region, municipality and district), the Company sends the location coordinates obtained to a map service provider (Google Maps Platform). This resolution is limited to the level of municipality and district, and the Company does not obtain detailed addresses such as street numbers. Location information that the Company stores and analyses is rounded to a grid of approximately one square kilometre and does not identify a precise address, your home or similar. Resolved place names are used to display translation results and for the statistical analysis described below. In addition, when a menu translation is completed, the Company may obtain the original dish names on the menu together with the rounded grid information, in a form that does not identify the user (by one-way hashing of the user identifier). Translation results, prices, descriptions, preferences, order details and images are not included in this data. This data is used for statistical analysis of dish and menu trends by area (“PAAN-DATA”).
When you use the sharing feature, a sharing URL containing a hard-to-guess string is issued for the translation result concerned. Any third party who knows the URL can view that translation result (dish names, prices, restaurant name, approximate area and so on) without logging in. The sharing URL does not contain cautionary notes, preferences, profile information or similar. Please note that deleting an item from your history does not automatically invalidate a sharing URL that has already been issued. If you wish to stop sharing, please contact the contact point in Section 1.
Operations related to ordering within the app (adding to candidates, showing to staff, settling the bill and so on) and order history (dishes selected, quantities, approximate amounts and so on); information you save, such as dishes that impressed you and short notes; and ratings and feedback on translation results (optional).
Where you scan a store code or QR code and import the published menu of a partner restaurant (a restaurant using RESTO-PAAN or similar), the identifier of that restaurant and the menu content imported (translated text and so on). The text of the menu is stored as it stood at the time of import. Dish images are displayed by referring (linking) to the images provided by the partner restaurant; the Company does not copy or store them.
Restaurant name, business type and genre, contact details, location and map information (place information, addresses and similar obtained through Google Maps Platform / Places), store code, restaurant logo, and other images and information that the restaurant registers in order to publish them to its guests.
Tax rate and tax treatment, service charge, cover charge (otoshi) and other display and billing settings.
Information that a guest voluntarily enters in the viewing and ordering-support features of RESTO-PAAN in order to tell the restaurant’s staff, such as foods they dislike (would rather avoid).
Of the information obtained, the Company uses information that constitutes personal data within the scope of the following purposes.
The Company operates and develops several services, including services relating to food and dining. The Company may use and combine information obtained or generated through one service (in particular menu and dish data such as dish names, descriptions, prices, images, tags and automatically generated keywords, and their translations) also for providing, improving and developing new features of other services that the Company operates or may provide in the future.
All such use takes place within the same business operator (PAAN Co., Ltd.) and does not constitute provision to a third party. In using information across the Company Services, the Company will also handle it appropriately in accordance with this Policy.
To provide the Company Services, the Company uses the following external services and infrastructure, and may transmit information to and store information with them to the extent necessary. The handling of information by each external service is governed by the terms of its provider.
The Company will not provide personal information to a third party without your prior consent, except in the following cases.
The Company may outsource all or part of the handling of personal data to the extent necessary to achieve the purposes of use. In such cases, the Company will exercise necessary and appropriate supervision over the contractor.
The servers of the Company’s principal database and storage infrastructure (Supabase) are located in Japan (Tokyo region).
However, among the external services in Section 5, the AI services, authentication, hosting and other infrastructure may be provided by businesses located in foreign countries such as the United States of America, and in connection with their use, personal information may be stored on or transmitted to servers and similar facilities of businesses in foreign countries. When providing personal data to a third party in a foreign country, the Company will provide the necessary information and take other measures in accordance with the APPI. For information on the personal information protection systems of each country, please refer to the website of the Personal Information Protection Commission of Japan and similar sources.
The Company Services use cookies, browser local storage and similar technologies to keep you logged in, remember display settings, cache dictionaries and screen content, understand usage and for similar purposes. You can disable these in your browser settings, but some features of the Company Services (such as staying logged in) may then become unavailable.
The web version of MENU-PAAN displays a cookie consent banner on your first visit so that you can accept or refuse each category. The Company may use Google Analytics to understand usage, and it is activated only where you have consented to analytics cookies. The Company does not send personally identifiable information such as names or email addresses to Google Analytics.
To prevent leakage, loss or damage of the information it handles and otherwise to manage it securely, the Company takes necessary and appropriate organisational, personnel, physical and technical measures (encryption of communications (HTTPS / TLS), minimising access rights to the database and restricting access at row level, storing login information in hashed form, a design under which payment information is not stored on the Company’s servers, and so on).
The Company retains information for the period necessary to achieve the purposes of use and, when it is no longer needed, erases or anonymises it by appropriate means. You may request deletion of your account and related data through the account deletion feature within the Company Services or through the Company’s contact point. When you close your account, the Company will promptly delete your personal information, except information that it is required by law to retain (transaction history and so on).
Where you delete history (translation results, order history and so on), that data can no longer be referred to in the Company Services from the time of the deletion, and is then physically deleted from the Company’s servers within 90 days at the latest.
You may request notification of the purposes of use of your personal information, its disclosure, correction, addition or deletion of its content, suspension of its use or its erasure, and suspension of its provision to third parties. Please send any request to the contact point in Section 1. The Company will respond without delay in accordance with laws and regulations after verifying your identity.
The Company Services are intended for persons aged 13 and over. Persons under the age of 13 may not use the Company Services, and the Company does not obtain personal information from persons under the age of 13. Should it be found that personal information has been obtained from a person under the age of 13, the Company will promptly delete that information.
The Company may change this Policy in response to changes in laws and regulations or in the content of its services. When making important changes, the Company will give notice within the Company Services or on this page. The changed content applies from the time it is posted on this page.
The Japanese text of this Policy is the authoritative version. Where a translation into English or any other language is prepared for reference and there is any discrepancy between the Japanese version and the translation, the Japanese version prevails.
Please send any enquiries or complaints concerning this Policy or the handling of personal information to the contact point in Section 1.