Privacy Policy

1. Information We Collect

· Account info (via Google login): email address, name, profile photo

· Profile: handle (public identifier), display name

· Learning data: practice records and scores, voice recordings (latest per sentence), lessons you create

· Payment info: payments are processed by an external payment provider; we do not store card numbers and keep only transaction IDs, plan, and subscription status.

· Automatically collected: access logs, session authentication cookies (no advertising or tracking cookies)

2. How We Use Information

Providing the service (connecting your YouTube channel, lesson creation, shadowing, pronunciation assessment), managing assessments and subscriptions, processing payments and refunds, preventing abuse, and sending emails about sign-up, payments, cancellation, refunds, and account deletion.

3. Retention

· Voice recordings: automatically deleted 3 months after the last save.

· Account and profile info: de-identified immediately upon account deletion (email scrambled, name/photo removed, handle anonymized).

· Learning records and usage ledger (assessment history): retained in a non-identifiable form after deletion (to protect other learners' practice and for statistics).

· Payment records: retained by our payment provider for statutory periods under applicable commerce laws.

4. Processors and International Transfers

We use the following overseas processors, which involves transferring data abroad:

· Supabase (US): database and voice recording storage, authentication

· Vercel (US): web hosting — voice data transits during processing and is not stored

· Microsoft Azure (Korea region): pronunciation assessment

· OpenAI (US): subtitle cleanup and pronunciation guide generation (text only; no voice is sent)

· External payment provider: payment processing (named here once finalized)

· Resend (US): transactional emails

· Google (YouTube Data API): listing videos and retrieving captions from the YouTube channel you connect with your consent (using a Google-issued access token; Google's privacy policy applies)

5. Deletion Procedures

Voice recordings past the retention period are removed by an automated daily job.

Upon account deletion, account info is de-identified immediately and any active subscription is canceled.

6. Your Rights

· Access/correction: view and edit your profile in My Page.

· Deletion: use Delete Account in My Page to de-identify your account info.

· For other requests (e.g., data access), contact us at the address below.

7. Security Measures

We apply encryption in transit (HTTPS), database row-level security (RLS), a private bucket for voice recordings (owner-only access), payment webhook signature verification, and separated server-only keys.

8. Children

We do not collect personal information from children under 14, and the Service is not available to them.

9. Contact and Notices

Privacy inquiries: moneycopy88@gmail.com

Changes to this policy will be announced in the Service or by email.