The Japanese version of this policy is the authoritative text. This English version is a translation; where the two differ in any respect, the Japanese version prevails.
Privacy Policy
Last revised: 18 September 2026
NAMINOL LLC (NAMINOL合同会社, “we” or “the Company”) operates FilmedSurf, a marketplace for surf footage (“the Service”). We handle users’ personal information in compliance with Japan’s Act on the Protection of Personal Information (APPI) and other applicable laws.
1. Operator and contact point
- Operator: NAMINOL LLC (NAMINOL合同会社)
- Personal information manager: Masaki Hori
- Address: Miyamasuzaka Building 609, 2-19-15 Shibuya, Shibuya-ku, Tokyo 150-0002, Japan
- Complaints and enquiries: support@naminol.com (Support page)
2. Information we collect
- Video and images: clips uploaded by filmers in which identifiable people appear (including audio).
- Email address: account registration details, via our authentication provider (Clerk).
- Location and time: the GPS position and the date and time at which a clip was filmed.
- Payment information: payment data processed through Stripe (we never hold card numbers ourselves).
- Device information and push tokens: device identifiers, push notification tokens, and the like.
- Usage and analytics: access logs, interaction logs, IP addresses, and similar.
- Saving to your camera roll: when you explicitly choose to save, the file is stored on your own device (nothing additional is sent to our servers).
3. Purposes of use
- Matching people to clips using GPS position and time of filming, and presenting the results.
- Delivering clips and enabling downloads.
- AI analysis and automatic editing of uploaded footage, and putting surf conditions into words.
- Processing payments and paying out revenue to filmers.
- Moderating inappropriate content and responding to reports of rights infringement.
- Responding to enquiries and providing support.
- Improving the Service, preventing misuse, and meeting legal obligations.
4. Collection requiring your consent (device features)
Collection that involves access to device features — location, push notifications, saving to your camera roll — takes place only after you have granted permission through your operating system’s dialog. You can withdraw these permissions at any time from your device or app settings.
5. Provision to third parties and outsourcing
We entrust the handling of personal information to the following providers, to the extent necessary to operate the Service. We supervise those providers appropriately.
- Fly.io (application hosting)
- Neon (database)
- Upstash (job queue infrastructure)
- Clerk (authentication and account management)
- Amazon Web Services (AWS S3 / CloudFront: storage and delivery of video and images)
- Stripe, Inc. (payments and revenue distribution, including Stripe Connect)
- Expo, Apple (APNs) and Google (FCM) (push notification delivery)
- Shopify (operation of our online store and its checkout) and Gelato ASA (production and shipping of prints and goods): only if you order prints or goods from our store (https://shop.filmed.surf),the recipient name, address, phone number and email address you enter there, and the image you upload (people may appear in it), are provided to Gelato through Shopify. For single-frame prints ordered inside the app before then, the same kinds of information (including the image to be printed) are sent by us directly to Gelato. Production and shipping take place at partner facilities outside Japan, near the delivery address, so this information is transferred outside Japan.
Some features of the Service also send data to the AI providers below, to the extent required for that processing. What we send includes still frames extracted from footage you uploaded, in which people may appear.
- Anthropic (Claude): for content analysis, automatic editing, and describing surf conditions — we send a small number of still frames extracted from the footage, together with the clip’s accompanying details.
- Runway: when the still-image-to-short-video feature is used, we send the image concerned.
- ElevenLabs: for automatic background-music generation, we send a text prompt only (no user media and no personal information).
Provision to credit card companies. Separately from the outsourcing above, in connection with credit card processing we may provide a filmer’s name, representative’s name, gender, date of birth, address, contact details, business description, and other information to credit card companies (including JCB Co., Ltd. and JCB group card companies), to the extent necessary to enter into and perform merchant agreements and to verify that the filmer (as seller) is not a member of anti-social forces. This is provision to a third party, not outsourcing: the receiving card companies use that information for their own purposes. The basis for this provision is your consent under Article 16(3) of the Terms of Service.
Except for the outsourcing and third-party provision described above and where necessary to operate the Service, we do not provide personal data to third parties without your prior consent, other than as required by law.
6. External transmission (Telecommunications Business Act)
Our app and website transmit information recorded on your device, and information about your actions and access, to the external providers below, in order to understand usage, improve quality, and detect faults (Article 27-12 of Japan’s Telecommunications Business Act).
- Mixpanel (United States): information sent = user identifiers and usage events such as screen transitions and interactions; purpose = usage analysis and service improvement.
- Sentry (United States): information sent = device and runtime environment information at the time of an error; purpose = detecting and fixing faults.
If you would like these transmissions stopped, please contact support@naminol.com.
7. Provision to third parties abroad (cross-border transfer)
Most of the providers and recipients above host their servers primarily in the United States, or are located in the United States or other countries (Stripe, AWS, Clerk, Anthropic, Runway, ElevenLabs, Mixpanel, Sentry, and others). Under Article 28 of the APPI, we transfer data to these third parties abroad only after putting in place, and continuing to maintain, the measures necessary to protect your rights and interests — that is, arrangements such as appropriate contractual terms that meet standards equivalent to Japan’s APPI — and we verify that those measures are being implemented. We will provide, on request, the names of the countries concerned and information about their personal data protection regimes (support@naminol.com).
8. Retention periods and retention of poster information
We retain personal data for as long as necessary to achieve the purposes of use, or for the period required by law, and thereafter delete or anonymise it appropriately. We may retain a poster’s registration details, IP address, access logs, and similar for a certain period in order to respond to reports of rights infringement and to other legal requirements (such as disclosure of sender information under Japan’s Information Distribution Platform Countermeasures Act).
9. Your rights
Under Articles 33 to 35 of the APPI you may request the disclosure, correction, addition, deletion, suspension of use, or suspension of provision to third parties of your retained personal data. Requests are accepted at support@naminol.com or through the Support page. We will verify your identity and respond without delay in accordance with the law.
10. Account deletion
You may request deletion of your account from within the app or through our support channel. On deletion, the personal information linked to your account is deleted or anonymised, other than information we are legally required to retain (accounting records, payment records, logs needed to handle rights-infringement matters, and the like). We will tell you what is deleted and what is retained when you make the request.
11. If we introduce face matching (FaceMatch)
If we introduce face matching in future to improve how accurately we match people to clips, we will collect and use the biometric-related information involved — such as facial feature data — only with your voluntary, explicit consent, and you will be able to withdraw that consent at any time. On withdrawal, we will promptly delete the biometric-related information concerned. (This section is advance notice about a possible future feature; it does not apply while that feature is not offered.)
12. Cookies and similar (web)
Our website may use cookies and similar technologies to provide the Service, improve convenience, and analyse usage. You can disable cookies in your browser settings, though some features may then be unavailable.
13. Changes to this policy
We may revise this policy in response to changes in the law or to the Service. We will announce significant changes on the Service.
14. Contact
For enquiries about this policy, please contact support@naminol.com or use the Support page.