Privacy & data handling

Contact details: name, email, phone/messaging handle, nationality.

Trip details: the hotel or area you are staying in, and your preferred dates.

Health information needed to arrange dialysis: treatment details (modality, dry weight, dialyzer, anticoagulant, vascular access, sessions), and infection-marker status (e.g. HBs antigen, HCV antibody, HIV) — special-category data you provide so a facility can confirm it can treat you.

Documents you choose to upload (e.g. referral letter, blood tests, prescription).

Messages you send in the booking chat, and basic account data from your sign-in.

To check facility availability, prepare and submit your documents, arrange interpretation, and confirm your appointment.

Health and document data are processed on the basis of your explicit consent, for the sole purpose of arranging your dialysis. You can withdraw consent by asking us to stop and delete your request.

The treating facility you select — only what is needed to confirm and provide your dialysis.

Service providers that operate the platform on our behalf: our database/storage/authentication host (Supabase, Tokyo region), our application host (Vercel), our email provider (Resend), our map provider (Google Maps), and — for chat auto-translation between you and Japanese staff — an AI translation provider (Anthropic). With your consent we also use analytics providers (Google Analytics, Microsoft Clarity).

We do not sell your personal data.

Analytics cookies (Google Analytics, Microsoft Clarity) load only after you accept them in the consent banner. Declining loads no analytics. Essential cookies needed to sign in and use the service are always on.

Data is stored in our Tokyo-region database with access controls; documents are kept in private storage and shared only as described above.

Because we coordinate care in Japan and use the providers listed above, your data may be processed in Japan and other countries. We rely on appropriate safeguards for such transfers.

We keep your request and related data for as long as needed to provide the service and to meet legal/accounting obligations, then delete or anonymise it. You can ask us to delete it sooner (see below).

Subject to applicable law (including the GDPR for EU residents), you may request access to, correction of, or deletion of your data, object to or restrict processing, and request portability. You may also withdraw consent at any time.

To exercise any of these, send a request through your booking chat or contact us, and we will respond.

Operating company: Medecide LLC (合同会社Medecide). Representative: Shinya Yamada. For privacy questions or data requests, contact us through the site or your booking conversation.