Privacy Policy
Overview
OpenLanguage ("we", "us") provides the mobile apps listed below (the "Services"). This policy explains how we handle your personal information across all of them, in line with the Personal Information Protection Act of Korea and other applicable laws.
- OpenVocab
- OpenListening
When we add a new app, we will list it here and notify you as described in "Changes to this policy." We do not currently collect location data or sensitive personal information.
1. Why we use your information
- Account management: creating and verifying your account, preventing misuse, handling account deletion
- Providing the Services: vocabulary and listening features, saving and syncing your learning progress, generating learning content with AI
- Paid features: verifying purchases and subscriptions, granting access, handling refunds
- Improving the Services: usage analytics and crash diagnosis
- Advertising: showing in-app ads and measuring their performance
- Support: answering your inquiries and sending service notices
- Marketing (only with your separate consent): news about events and offers
2. Information we collect
| Category | Information | When |
|---|---|---|
| Email sign-up | Required: email address, password (stored encrypted) | At sign-up |
| Sign in with Google | Required: Google account ID, email / Optional: name, profile photo | At sign-in |
| Sign in with Apple | Required: Apple account ID, email (or Apple private relay email, if you choose) / Optional: name | At sign-in |
| Kakao Login | Required: Kakao user ID / Optional: nickname, profile photo | At sign-in |
| Learning activity | Word lists, progress and results, listening history, text you enter into AI features | While using the Services |
| Purchases | Purchase and subscription history, subscription status, app user ID | At purchase |
| Collected automatically | Device model, OS version, IP address, advertising ID (AAID/IDFA), app usage, access times, crash logs | While using the Services |
| Support | Email address, message content | When you contact us |
Payment details such as card numbers are processed by the Apple App Store and Google Play. We never receive them.
3. How we collect it
- Directly from you when you sign up or use the Services
- From Google, Apple, or Kakao when you choose to sign in with them, limited to what you agree to share
- Automatically through analytics and advertising tools (Firebase, AdMob)
4. How long we keep it
We delete your personal information without delay when you delete your account. Some records must be kept longer by law:
| Record | Legal basis (Korea) | Kept for |
|---|---|---|
| Contracts and order cancellations | E-Commerce Act | 5 years |
| Payments and delivery of purchases | E-Commerce Act | 5 years |
| Consumer complaints and disputes | E-Commerce Act | 3 years |
| Access logs, IP addresses | Protection of Communications Secrets Act | 3 months |
5. How we delete it
We delete information within 5 days after its retention period ends or its purpose is fulfilled. Records kept for legal reasons are stored separately and used only for that purpose. Electronic files are permanently erased so they cannot be recovered; paper records are shredded or incinerated.
6. Sharing with third parties
We do not sell or share your personal information with third parties. The only exceptions are when you separately consent or when the law requires it, such as a lawful request from law enforcement.
7. Service providers and international transfers
We use the service providers below to run the Services. Their servers are located outside Korea, so your information is transferred abroad. These transfers are necessary to provide the Services under our contract with you.
| Recipient (contact) | Purpose | Country | Information transferred |
|---|---|---|---|
| Google LLC (googlekrsupport@google.com) | Firebase: authentication, data storage, analytics, crash reporting | United States | Account ID, email, learning data, device info, usage data, crash logs |
| Google LLC (googlekrsupport@google.com) | AdMob: in-app ads and measurement | United States | Advertising ID, device info, IP address |
| Google LLC (googlekrsupport@google.com) | Gemini API: AI-generated learning content | United States | Text entered into AI features, related learning data |
| OpenAI, L.L.C. (privacy@openai.com) | OpenAI API: AI-generated learning content | United States | Text entered into AI features, related learning data |
| Anthropic, PBC (privacy@anthropic.com) | Claude API: AI-generated learning content | United States | Text entered into AI features, related learning data |
| RevenueCat, Inc. (compliance@revenuecat.com) | In-app purchase and subscription management | United States | App user ID, purchase and subscription history, device info |
- When and how: sent over the network as you use the Services
- Retention: until you delete your account or our contract with the provider ends, unless the law requires longer
- How to refuse: you can stop these transfers by deleting your account. Because they are needed to run the Services, you will not be able to use the Services without them. You can block advertising ID collection as described in section 8.
When you sign in with Google, Apple, or Kakao, you authenticate directly with that provider. This is not a transfer of your information by us.
8. Advertising IDs and analytics
We use Firebase Analytics, Firebase Crashlytics, and AdMob, which collect your advertising ID and app usage. This may be used to show ads based on your interests. You can turn this off at any time:
- Android: Settings > Privacy > Ads > Delete advertising ID
- iOS: Settings > Privacy & Security > Tracking > turn off for the app
You can keep using the Services after opting out; you will see non-personalized ads instead.
9. AI features
We use one or more of the Google Gemini API, OpenAI API, and Anthropic Claude API to generate learning content. When you use an AI feature, the text you enter and related learning data are sent to the relevant provider only to produce the result. Under the paid API terms we use, these providers do not use this data to train their AI models.
Our AI features provide learning content only. They do not make fully automated decisions that significantly affect your rights or obligations. Please do not enter personal or sensitive information into AI features.
10. Children
The Services are not available to children under 14, and we do not knowingly collect their information. If we learn that we have, we will delete it promptly. Parents or guardians who become aware of this can contact us below.
11. Your rights
You can ask at any time to access, correct, or delete your personal information, to stop its processing, or to withdraw your consent.
- In the app: delete your account in Settings > Delete Account (OpenVocab) or My Page > Delete account (OpenListening)
- By email: contact@openlanguage.ai
We will respond within 10 days. A legal representative or someone you authorize may also make a request with a power of attorney. Information we must keep by law cannot be deleted before its retention period ends.
12. Security
- Administrative: an internal privacy management plan, limited staff access, regular training
- Technical: access controls, one-way password encryption, encryption in transit (TLS), access log retention
- Physical: data centers of certified cloud providers
13. Contact
For privacy questions, complaints, or requests, contact our Privacy Officer:
- Name: Kang Kim
- Title: Representative
- Email: contact@openlanguage.ai
14. Complaints
If you are not satisfied with our response, you can contact the Korean authorities below.
| Organization | Phone (Korea) | Website |
|---|---|---|
| Personal Information Dispute Mediation Committee | 1833-6972 | www.kopico.go.kr |
| Personal Information Infringement Report Center (KISA) | 118 | privacy.kisa.or.kr |
| Supreme Prosecutors' Office | 1301 | www.spo.go.kr |
| Korean National Police Agency | 182 | ecrm.police.go.kr |
If you live outside Korea, you may also contact the data protection authority in your country.
15. Changes to this policy
We will announce changes in the app at least 7 days before they take effect. For significant changes, such as collecting new types of information, we will give at least 30 days' notice and ask for your consent where required.
16. Effective date
This policy takes effect on October 19, 2026.
If this English version differs from the Korean version, the Korean version prevails.