Privacy Policy (Beta)
Effective date: July 21, 2026 (v2.0)
This English text is a translation for convenience; the Korean version prevails.
Speak Korean ("we," "us") protects your personal data in accordance with the Republic of Korea's Personal Information Protection Act (PIPA).
1. Information we collect
We collect the following, without separate consent, as necessary to provide the service under our contract with you (PIPA Art. 15(1)(iv)):
- Account: email, password (stored encrypted), nickname; for Google sign-in, your Google email and basic profile.
- Profile: nickname, optional profile image, locale, learning level, and the lesson time zone you confirm.
- Learning activity: practice progress, flashcard reviews, assignment submissions, study sessions.
- Audio: homework recordings, per-participant audio from 1:1 video lessons, lesson transcripts.
- Pronunciation assessment: accuracy/fluency/completeness scores, word- and phoneme-level results.
- Payment: payment and subscription records, lesson credits (card numbers are never stored by us; PayPal processes payments).
- Calendar (optional, teachers): Google Calendar tokens and sync logs.
We do not currently collect any information for marketing purposes. If we introduce marketing communications, we will obtain separate consent.
Automatically collected: an essential session cookie (to keep you logged in) and service usage records.
2. Why we use it
To register and manage accounts; provide learning features (speaking practice, flashcards, pronunciation scoring, 1:1 lessons and lesson notes); process payments and subscriptions; and send transactional notices (booking confirmations, reminders) and support responses.
3. Retention
| Data | Retention |
|---|---|
| Account information | Until you delete your account |
| Homework audio | 180 days after teacher feedback has been reviewed (scores and written feedback are kept) — see Section 4 |
| 1:1 lesson audio | Retained during the beta period (subject to change with prior notice) |
| Learning records & scores | Until you delete your account |
| Payment & subscription records | Anonymized on account deletion, then retained for settlement/dispute purposes |
4. How we delete data
- Account deletion: Students can delete their own account in Settings. On deletion, we erase audio, assessment, transcript, and profile data, and anonymize lesson/payment/subscription records by removing your identifier. Teacher and admin account deletion is handled manually via support.
- 180-day homework audio deletion: automated deletion is planned; it is currently performed manually. We will update this policy when automation is in place.
- Lesson audio: retained during the beta; an automatic deletion policy will be applied, with notice, when we exit beta.
5. International transfer of personal data
To provide the service, we transfer personal data outside Korea (for processing and storage), relying on PIPA Art. 28-8(1)(iii) — transfer for processing/storage necessary to perform our contract with you, disclosed through this Privacy Policy. You may refuse international transfer by contacting us (Section 10); however, refusal will limit or prevent your use of the service.
| Recipient (contact) | Data transferred | Country / timing / method | Purpose | Retention |
|---|---|---|---|---|
| Supabase, Inc. (support@supabase.com) | All service data, incl. audio files | USA / ongoing during use / network transfer & storage | Database, storage, authentication hosting | Same as our retention periods |
| Vercel, Inc. (privacy@vercel.com) | Personal data contained in requests/responses | USA / ongoing during use / network transfer | Application hosting and delivery | Transient (not permanently stored) |
| Microsoft Corporation (Azure Speech) (privacy.microsoft.com) | Homework/lesson audio, reference text | USA / on assessment/transcription / API transfer | Pronunciation scoring, transcription | Deleted promptly per provider policy |
| Google LLC (policies.google.com) | Teacher calendar events with student nickname/email; lesson transcripts for AI | USA / on calendar sync & AI processing / API transfer | Calendar sync, AI content/summaries (Gemini), text-to-speech | Until processing purpose is met |
| LiveKit, Inc. (privacy@livekit.io) | Real-time audio/video streams, participant identifiers | USA / during video lessons / real-time media transfer | 1:1 video lessons and recording | End of session (recordings stored in our storage) |
| PayPal, Inc. (privacy@paypal.com) | Payment processing data (no card numbers held by us) | USA / on payment/refund / API transfer | Payment, subscription, refund processing | Per PayPal policy and applicable law |
| Resend, Inc. (privacy@resend.com) | Recipient email, nickname, booking time, payment amount | USA / on transactional email / API transfer | Sending transactional emails | Transient (at time of sending) |
ElevenLabs (transcription) is planned; we will add it here before use.
6. Security
Access controls with least privilege (Row Level Security), encryption of credentials at rest and traffic in transit (HTTPS), and access logging.
7. Cookies
We use an essential session cookie (Supabase authentication) to keep you logged in. You can block cookies in your browser, but you will not be able to use features that require login. We do not use advertising or analytics cookies.
8. Automated decisions
We automatically score your pronunciation recordings (accuracy, fluency). These scores are learning feedback only and are not used for decisions that significantly affect your rights or obligations.
9. Your rights
You may request access, correction, deletion, or suspension of processing at any time. Students can delete their account in Settings; for other requests, contact us at aawharg@gmail.com.
10. Data protection officer
As a sole proprietorship, the owner serves as Data Protection Officer: Hyunseok Cho (owner and representative). Contact: aawharg@gmail.com.
11. Children under 14
Our service is intended for users 14 years of age or older. We do not permit registration by children under 14. You confirm you are 14 or older when you register.
12. Changes
This policy applies from its effective date; we will announce material changes and their effective date in advance.