Privacy Policy

Hangul Step · Last updated: April 20, 2026 · Effective: April 20, 2026

This Privacy Policy describes how Youngwook Kim ("we", "us", "our") collects, uses, and protects your information when you use the Hangul Step mobile application ("App").

1. Age Restriction

Hangul Step is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13 (COPPA) or under 16 in the EEA/UK without parental consent (GDPR-K). An age gate on first launch blocks access to users under 13.

2. Information We Collect

On-device data (never transmitted):

Learning progress (lessons completed, cards reviewed, SRS schedule)
Pronunciation scores (numeric similarity values; audio is not stored)
Preference settings (formality, daily goal, haptics, reminder time)
Daily activity counters (streaks, XP)

Purchase data (via RevenueCat):

Subscription status, product ID, renewal/expiration date
Apple receipt verification (handled by platform)
We never see your payment card details

Microphone (pronunciation practice only):

Audio is processed by on-device speech recognition (Apple SFSpeechRecognizer)
Only the recognized text is scored; raw audio is not recorded or sent anywhere

Analytics (aggregated):

App open, lesson completion, review session events
Device platform and app version (no precise location, no IDFA)

3. How We Use Information

To operate the App and personalize your learning experience
To enforce free-tier limits and subscription entitlements
To fix bugs and improve the product
To send a daily study reminder (only if you opt in)

4. Third-Party Processors

Processor	Purpose	Data
RevenueCat	Subscription entitlement	User ID, purchase events
Apple	IAP billing & receipt	Payment info (receipt only)
Sentry	Crash diagnostics	Device platform, stack traces

We do not sell personal information.

5. Your Rights

GDPR (EEA/UK): Access, rectification, erasure, portability, objection, restriction, withdraw consent.

CCPA/CPRA (California): Know, delete, correct, opt out of sale/share (we do not sell/share).

In the App: Tap Profile → Export my data (JSON download) or Profile → Delete all my data (local erase).

6. Data Retention

On-device data persists until you delete the App or use "Delete all my data". We do not maintain server-side user accounts at this time.

7. Security

All network requests use TLS. Local data is stored in the device's sandboxed SQLite database. No method is 100% secure; we notify users of material breaches as required.

8. Children's Privacy

We do not knowingly collect data from users under 13. If you believe a child under 13 has used the App, contact us at kyw1984@gmail.com and we will take immediate action.

9. Changes to This Policy

We will post changes here and update the "Last updated" date. Material changes will be announced in-app before taking effect.

10. Contact

Email: kyw1984@gmail.com