Daiko Privacy Policy

1. This Policy applies to personal information that the Company acquires through the Service. In this Policy, "personal information" and "personal data" have the meanings given to them in the Act.
2. The Service is an independent client application for the Telegram messaging service and is not provided, endorsed or sponsored by Telegram. Messages, contacts, telephone numbers, media, calls and notifications exchanged through Telegram are transmitted between the User's device and Telegram's servers, are not acquired by the Company, and are governed by Telegram's Privacy Policy.
3. To display token information, the Service transmits to the Company's servers only blockchain addresses that appear in chats on the User's device. Message contents, senders and chat identifiers are not transmitted, and secret chats are not processed.

The Company acquires the following personal information by lawful and fair means:

• Account identifier

  Description

  The user ID of the User's Telegram account

  Method of acquisition

  Received from Telegram when the User connects to the Service

• Profile information

  Description

  Display name, username and profile photograph

  Method of acquisition

  Received from Telegram upon connection and reconnection; displayed publicly with the User's posts

• Authentication information

  Description

  Session credentials and authentication records

  Method of acquisition

  Generated when the User signs in

• Wallet information

  Description

  Solana wallet addresses and passkey public credentials

  Method of acquisition

  Provided by the User when creating or importing a wallet or registering a passkey

• Transaction information

  Description

  Holdings and the history of purchases, sales, deposits, withdrawals and transfers

  Method of acquisition

  Generated through use of the Service and obtained from the public Solana blockchain

• User content

  Description

  Chart callouts for the User's token comments (message ID, time and market cap)

  Method of acquisition

  Recorded when the User comments; the comment text stays on Telegram

• Usage information

  Description

  Features used, screens viewed, device model, operating system and application version, in a form that does not directly identify the User

  Method of acquisition

  Collected automatically through use of the Service

• Technical information

  Description

  IP addresses and server operation logs

  Method of acquisition

  Collected automatically when the Service accesses the Company's servers; IP addresses are retained only in hashed form

The Company uses personal information for the following purposes:

1. To authenticate Users and to create and manage their accounts;
2. To provide wallet functions, including the display of balances and the preparation of transactions and transfers approved by the User;
3. To provide token information, charts and related functions;
4. To publish User content;
5. To respond to inquiries and requests;
6. To analyze the use of the Service and to maintain and improve it;
7. To detect and prevent fraud, abuse and unauthorized access, and to maintain the security of the Service;
8. To respond to violations of the Terms of Use and to comply with laws and regulations; and
9. For purposes incidental to the foregoing.

1. The Company does not provide personal data to any third party without the prior consent of the User, except: (i) where required by laws and regulations; (ii) where necessary to protect the life, body or property of a person and it is difficult to obtain the User's consent; (iii) where necessary to cooperate with a national or local government body performing affairs prescribed by laws and regulations; (iv) where the Company entrusts the handling of personal data under Article 5; and (v) where personal data is provided in connection with the succession of business by merger or otherwise.
2. Profile information and User content that a User posts are made available to other Users at the User's direction.

Within the scope necessary to achieve the purposes of use, the Company entrusts the handling of personal data to service providers in the following categories:

• Database, authentication and server hosting, located in Japan;
• Wallet key management infrastructure;
• Solana blockchain access and transaction routing; and
• Usage analytics.

The Company selects service providers that protect personal data at a level equal to or higher than that described in this Policy, binds them by contract to use personal data solely to provide services to the Company, and exercises necessary and appropriate supervision over them.

Certain service providers described in Article 5 handle personal data in the United States and other countries outside Japan. When providing personal data to such providers, the Company confirms that they have established a system conforming to the standards prescribed by the rules of the Personal Information Protection Commission, and takes the measures necessary to ensure the continuous implementation of equivalent measures. Information concerning those measures will be provided upon request.

Transactions executed through the Service are recorded on the public Solana blockchain. Wallet addresses, balances and transaction histories recorded on the blockchain can be viewed by any person and cannot be altered or deleted by the Company or by any other person.

The Company retains personal information only for as long as necessary to achieve the purposes of use, as follows:

• Account, profile, wallet and transaction information: until the account is deleted.
• Authentication information: until the User signs out or the account is deleted. Pending sign-in requests expire after two minutes.
• User content: comments and replies are messages in Daiko's Telegram discussion group and are held by Telegram under the User's Telegram account. They remain until deleted in Telegram, including after account deletion, upon which the User is removed from the discussion group; the User may delete them in Telegram at any time. For chart callouts, the Company retains each top-level comment's message identifier, time and the token's market capitalization at that time, but not its text or author. A callout is no longer displayed once its comment is deleted.
• Usage information: for the period necessary to analyze and improve the Service.
• Backup copies: deleted within 30 days following account deletion.
• Upon completion of account deletion, the Company retains only a record that the deletion was completed, which does not identify the User.

The Company takes the following measures to prevent the leakage, loss or damage of personal data:

• Technical measures: wallet private keys are held in wallet key management infrastructure and can be used only with the User's passkey; the Company's servers hold no key capable of signing on the User's behalf. Communications are encrypted, session credentials are stored in the device Keychain, and IP addresses are retained only in hashed form.
• Organizational and personnel measures: access to personal data is limited to persons who require it for their duties, and procedures are maintained for responding to security incidents.
• Understanding of the external environment: the Company handles personal data in foreign countries after confirming the personal information protection systems of those countries.

A User may request the Company to notify the purposes of use of, disclose, correct, add to, delete, suspend the use of, erase, or cease the provision to third parties of, retained personal data concerning the User, as provided in the Act. Requests shall be submitted to the contact point in Article 14. The Company will verify the identity of the requester and respond without delay in accordance with the Act. No fee is charged for such requests.

A User may delete the User's account at any time within the Service by selecting Delete Daiko account in the Daiko section of Settings or in the menu that opens from the wallet address. The procedure and the scope of deletion are set out in Account Deletion. Deletion of the account constitutes withdrawal of consent to the handling of personal information under this Policy, and the Company will cease such handling except as described in Article 8. Signing out or removing the application does not delete the account.

The Service is intended solely for persons aged 18 or older. The Company does not knowingly acquire personal information of persons under 18 and, upon becoming aware of any such acquisition, will delete the account concerned.

The Company may amend this Policy as necessary. Unless otherwise specified, the amended Policy takes effect when published on this page. Where an amendment materially affects the handling of personal information, the Company will give notice on this page before it takes effect.

Inquiries, requests and complaints concerning the handling of personal information shall be directed to: Daiko Labs Corporation, support@daiko.ai. The Company's address and the name of its representative will be provided without delay upon request.