Privacy Policy

1. Information We Collect

We do not collect: national ID numbers, phone numbers, postal addresses, dates of birth, gender, microphone recordings, or location data.

2. Purposes of Processing

1. Account identification and service delivery — sign-in and account management
2. Saving practice records — so you can continue on any device
3. Storing score data — keeping your scores in your account
4. Responding to enquiries
5. Service improvement and security — troubleshooting and prevention of misuse
6. Paid services (planned) — payment, refunds and billing

We do not use personal information for any other purpose. If the purpose changes we will obtain separate consent.

3. Retention Periods

We destroy personal information without delay when an account is closed, except where Korean law requires retention:

Accounts inactive for more than a year may be separated into archival storage or deleted, with prior notice by email.

4. Disclosure to Third Parties

We do not provide personal information to third parties, except where the user has given prior consent, or where disclosure is required by law or by a lawful request from an investigative authority following statutory procedure.

5. Processors

Processing agreements require compliance with our instructions, restrict sub-processing and mandate security measures. We supervise compliance and update this policy whenever the arrangements change.

6. International Transfers

We do not transfer personal information outside the Republic of Korea. If that changes, we will disclose the recipient, country, items and purpose in advance and obtain consent.

7. Destruction of Personal Information

1. Procedure — information whose retention period has expired or whose purpose has been fulfilled is destroyed without delay. Information retained under a legal obligation is moved to a separate database and destroyed once that period ends.
2. Method — electronic files are deleted by means that make recovery impossible; paper records are shredded or incinerated.

8. Your Rights

1. You may request access, correction, deletion or suspension of processing at any time.
2. You can view, edit and delete your account within the Service, or contact 【email address】.
3. We respond within 10 days of receiving a request.
4. Requests may be made through a legal representative or authorised agent.
5. Deletion may be restricted where law requires the information to be retained.

9. Children

We do not accept registrations from children under 14. Children under 14 may use only those features that require no account, in which case no personal information is collected. If we learn that an account belongs to a child under 14, we delete it and its data without delay.

10. Cookies

1. We use a session cookie to keep you signed in. It is set as HttpOnly so scripts cannot read it.
2. We use no advertising trackers and no third-party analytics.
3. You may refuse cookies in your browser settings, but features that require sign-in (saved practice records, stored scores) will then be unavailable.

11. Security Measures

1. Password hashing — passwords are stored using bcrypt, a one-way function, so even we cannot read them.
2. Encryption in transit — all traffic is served over HTTPS.
3. Least-privilege access — access to personal information is limited to the minimum number of people.
4. Access logging — access to systems handling personal information is logged and protected against tampering.
5. Backups — data is backed up regularly and backups receive the same protection.

12. Privacy Officer

13. How to Seek Redress

Users in Korea may contact the following bodies about privacy infringement:

14. Changes to This Policy

We announce additions, deletions or amendments at least 7 days before they take effect, and at least 30 days in advance where the change materially affects your rights.