SOKI（想起）mcp.kitemir.jp

Privacy Policy

Last updated: August 2026

This English text is provided for convenience. The Japanese version is the original and the only legally binding one; if the two differ, the Japanese version prevails.

Introduction

SOKI holds the "memories" of the person using it and supplies them to the AI services that person has authorised. Given the nature of what is handled here, we treat it as important to state clearly what we do and do not collect.

1. Information we collect

· Account information (email address, password, display name, Google account identifier)

· Observations (statements of fact about you), recorded by you or by an AI during a conversation

· The utterance a record came from (the raw log)

· A record of which memories were read, and when (the recall log)

· The conversational stance you configured, dates for plans, and notification preferences

· Payment information (Stripe customer ID, invoice ID, amount, payment date)

· Access logs such as sign-in times, IP address and browser type, and cookies

2. Information we do not collect

The following is not stored at all, by design.

· Sensitive personal information (health, medical history, beliefs, social status, criminal record and the like). Statements suspected of falling into this category are detected automatically and refused.

· Judgements about a person, or assessments of character. An interpretation such as "meticulous" is not recorded; only the statement of fact behind it is.

· Credit card numbers. Payment is processed by Stripe and we never hold the card number.

The automatic detection is not perfect. If something is recorded by mistake, you can delete it yourself from the dashboard.

3. Information about people other than you

The service may handle statements about third parties such as family or friends (for example, "A's birthday is 6 August").

Third parties are recorded under pseudonyms only. The mapping between a real name and a pseudonym is not stored on our servers.

As a result, no specific individual can be identified from the information we hold.

If you type a real name instead of a pseudonym, that is what will be stored. Please use pseudonyms when entering information about other people.

4. Purposes of use

· Providing the service (holding memories, supplying them to AI services, surfacing items whose date is near)

· Verifying identity and authenticating you

· Billing and payment

· Preventing misuse and investigating faults

· Responding to enquiries

· Complying with the law

5. Disclosure to external services

To the extent needed to run the service, information is provided to the following.

· AI services you have authorised (Claude, ChatGPT and so on): memories and your conversational stance are supplied. Which services receive them is limited to what you yourself allowed on the connection screen.

· Stripe (Ireland / United States): to process payments.

· Google (United States): to authenticate you if you sign in with a Google account.

· OpenAI (United States): when the memory search feature is used, the text of an observation is sent to obtain a numeric representation (an embedding).

· Our hosting provider (in Japan): the service's data is held on servers in Japan.

· Where disclosure is required by law.

We do not provide your memories to any third party other than those above. They are not used for advertising, and they are not provided as training data.

6. Transfers of data across borders

Data is held on servers in Japan.

However, when you use an AI service you have authorised, payment (Stripe), Google sign-in, or the memory search feature, information is transferred to the country in which that provider operates (the United States and others).

By using the service you consent to these transfers outside Japan.

7. Cookies and authentication

Cookies and sessions are used to keep you signed in. You may disable them in your browser, but you will then be unable to sign in.

Connections to AI services use OAuth 2.1 and issue an access token. You can revoke a token at any time from the dashboard.

8. Security measures

· HTTPS encryption for all traffic

· Passwords stored hashed (never in plain text)

· Access tokens stored hashed, with expiry times

· A limit on sign-in attempts

· Automatic blocking of sensitive personal information and of judgements about people

9. Retention

· If you close your account, use stops immediately and the related information is deleted after six months. During those six months it can be restored on request.

· After the free period, an account with no sign-in for six months or more also becomes subject to deletion.

· Deletion covers account information, observations, raw logs, recall logs, conversational stance and access tokens.

· Transaction records we are required by law to keep (payment amount, date, transaction ID) are retained for the necessary period in a form that does not identify an individual.

10. Access, correction and deletion

From the dashboard you can, at any time:

· export all of the memories held about you

· delete an individual memory

· delete your account

For any other request to access or correct information, please contact us. We will verify your identity and respond so far as is reasonable.

11. Use by minors

A person under 16 needs the consent of a legal guardian to use the service.

12. Changes

This policy may be revised as needed. Where a change is significant, we will announce it within the service.

13. Contact

For questions about this policy, please use the contact form or the email address above.

Operator information