Privacy Policy

This Privacy Policy sets out how Hanglass (the "App") handles information about users (including personal information) in connection with the Korean vocabulary learning service provided by the App (the "Service").

By using the Service, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service.

The operator may collect the following information to provide, improve, and secure the Service.

1. Account Information
   • Email address (optional / may be collected depending on login method)
   • Authentication information (user IDs and tokens from third-party services, etc.)
   • User identifiers (IDs assigned within the Service, etc.)
   • * Passwords are managed by third-party authentication services; the operator does not obtain or store plain-text passwords.
2. Learning Data
   • Records of studied words, review history, learning progress, statistics, and settings
3. Device and App Information
   • Device type, OS version, app version, language settings, etc.
   • Device identifiers (including identifiers used by SDKs for advertising, fraud prevention, and analytics)
4. Usage and Log Information
   • Operation logs, screen transitions, error information, crash reports, performance data, etc.
5. Purchase and Billing Information
   • Subscription status, plan type, purchase receipt information
   • Entitlement information managed by RevenueCat
   • * Payment details such as credit card numbers are managed by the app store (Apple / Google); the operator does not obtain or store such information.
6. Inquiries and Feedback
   • Inquiry content, contact information (if necessary), and attachments

The operator uses the collected information for the following purposes.

1. Providing, maintaining, and improving the Service (including learning, review, and progress features)
2. Account management, authentication, identity verification, and inquiry handling
3. Storing, syncing, backing up, and restoring learning data
4. Analyzing usage, improving quality, adding features, and improving UI/UX
5. Preventing unauthorized use, security measures, and incident response
6. Notifying users of important updates (policy/terms changes, critical bugs, etc.)
7. Managing paid plans, verifying billing status, and handling purchase restoration
8. Complying with legal obligations

The operator will not disclose or provide user information to third parties except in the following cases.

1. When the user has given consent
2. When required by law or when a lawful request is received from a court or government authority
3. When entrusting handling to a third-party service provider to the extent necessary to provide the Service (e.g., authentication, data storage, advertising, analytics, crash analysis)
4. When information is transferred as part of a merger, company split, business transfer, or other business succession

The operator takes reasonable security measures to prevent leakage, loss, damage, or unauthorized access to collected information.

1. Communication Security
   • The Service may be protected by reasonable measures such as encrypted communications.
2. Storage Location
   • Learning data and other information may be stored on third-party servers (e.g., Supabase).
3. Retention Period
   • Information is retained for the period necessary for the stated purposes.
   • If a user deletes their account, data may be deleted or anonymized after a certain period.
   • Information may be retained for longer periods as required by law or as reasonably necessary for fraud prevention or dispute resolution.

To the extent permitted by applicable law, users may make the following requests regarding their information.

1. Disclosure (confirmation of information held)
2. Correction, addition, or deletion
3. Suspension of use or suspension of provision to third parties
4. Account deletion

Requests should be submitted through the in-app inquiry form. The operator may require identity verification or other reasonable procedures.

The Service may use third-party services (advertising SDKs, analytics SDKs, etc.) for delivering ads and analyzing usage. These services may collect and use advertising identifiers, device information, event data, and similar information.

Users may be able to limit personalized advertising or restrict identifier use through their device settings. Please refer to your device's OS documentation for instructions.

The Service uses the following third-party services:

1. Supabase
   • Database and authentication services
   • Privacy Policy: https://supabase.com/privacy
2. Firebase (Google)
   • Analytics and crash reporting
   • Privacy Policy: https://policies.google.com/privacy
3. Google Mobile Ads (Google)
   • Advertising
   • Privacy Policy: https://policies.google.com/privacy
4. Google OAuth
   • Authentication services
   • Privacy Policy: https://policies.google.com/privacy
5. Apple Sign In
   • Authentication services
   • Privacy Policy: https://www.apple.com/privacy/
6. RevenueCat
   • In-app purchases and subscription management
   • Privacy Policy: https://www.revenuecat.com/privacy

These services process information in accordance with their respective privacy policies.

The Service is not intended for children under the age of 13. The operator does not knowingly collect personal information from children under 13.

If the operator becomes aware that information from a child under 13 may have been collected, it will take reasonable steps to verify and, if necessary, delete such information.

The operator may update this Privacy Policy as necessary. Changes take effect when posted within the Service or communicated by other means deemed appropriate by the operator.

In the case of significant changes, users will be notified by reasonable means (such as in-app notifications).

For inquiries about this Privacy Policy, or to request disclosure, correction, or deletion of your information, please use the in-app inquiry form.