Privacy Policy

1. Information We Collect and Use

· Account and profile: email address, name, profile photo and account identifier provided through Google Sign-In, plus your public handle and display name

· Learning and voice: selected lesson and sentence, practice time, pronunciation results, scores and recognized text, and the latest microphone recording for each sentence

· Billing and entitlements: Paddle transaction, customer and subscription IDs, product, amount, currency, payment/subscription/refund status, and assessment usage. We do not directly store card details.

· YouTube connection (lesson production): when separately authorized, channel ID/name and video IDs, titles, thumbnails, durations and privacy status from that channel. We do not access or download YouTube captions. We never collect Google/YouTube passwords or store OAuth access tokens on our server.

· Technical information: request time, route, browser, OS, device type, country-level location, error and security logs. Vercel Web Analytics page-view data is used only in aggregate and is not linked to your account.

· Behavioral analytics events: page views and key product events such as practice, lesson production and checkout completion, plus your account identifier and email (PostHog)

· Open-beta feedback: satisfaction rating, free-text comments, submission time, and participation-bonus status

2. Purposes

We process data to authenticate accounts; provide speaking practice, pronunciation assessment and recording playback; produce and publish lessons; manage entitlements, subscriptions, payments and refunds; verify open-beta bonus eligibility and improve the product; send transactional emails; analyze reliability; resolve errors; and prevent abuse.

Audio is recorded and transmitted only after you press Practice and grant microphone access. We do not sell personal information or use it for personalized advertising.

3. Device Storage, Cookies and Analytics

· Essential storage: Supabase authentication cookies maintain your signed-in session.

· Session storage: a YouTube OAuth access token stays only in the current tab and normally expires in about one hour; it is removed on sign-out or account deletion.

· IndexedDB: for signed-in users, the latest recording for each sentence is separated by account and stored in that browser for playback. Guest recordings are not stored. You can remove recordings through browser data controls, and account deletion from the same browser clears them.

· Vercel Web Analytics: anonymous aggregate page statistics such as URL, referrer, country and device/browser type are collected without third-party cookies; its visitor hash is discarded after 24 hours.

· PostHog: collects page views and key product events linked to your account identifier to improve the Service, using cookies and local storage to distinguish visitors. Session replay (screen recording) is not used.

Embedded YouTube content, Google Sign-In and Paddle Checkout may use cookies or similar technology under their own policies.

4. Service Providers and International Processing

When needed to provide the Service, data is transmitted over encrypted connections and may be processed where these providers operate:

· Supabase (project region: Tokyo, Japan): authentication, database and private voice storage

· Vercel (US and other locations): hosting, server logs and anonymous analytics; pronunciation audio temporarily transits its API infrastructure.

· Microsoft Azure Speech (Korea Central): real-time pronunciation assessment using audio and reference text. Microsoft states that customer input for real-time pronunciation assessment is not retained after processing.

· OpenAI API (US and other locations): lesson transcript, translation and pronunciation-guide text only, not voice. API data is not used to train models by default; ordinary API abuse-monitoring logs may be retained for up to 30 days unless different controls apply.

· Paddle (UK, US and other locations): Merchant of Record for payment, tax, subscriptions, refunds and buyer support (applies once payments open)

· PostHog (US): behavioral analytics of page views and product events with your account identifier and email

· Resend (US): recipient address and content of transactional account, payment, subscription, refund and deletion emails

· Google/YouTube (US and other locations): Google Sign-In, authorized channel/video access and video playback

5. Retention and Deletion

· Browser voice recordings: once 90 days have passed from the time the latest recording for a sentence was stored, it is automatically removed the next time you use the Service in that browser. Saving the sentence again restarts the period.

· Server voice recordings: only the latest per sentence is stored, and recordings older than 90 days from the last save are removed in a daily batch. Saving the sentence again restarts the period. We attempt immediate deletion when you delete your account.

· YouTube OAuth token: never stored on our server and retained only for the browser tab session or normally about one hour.

· YouTube channel connection data: retained while the connection feature is provided and deleted immediately upon account deletion.

· Open-beta feedback: retained for campaign operation and product analysis for up to one year after the campaign ends, then deleted or de-identified; deleted immediately when you delete your account.

· Account/profile: on deletion, we replace the email with a non-deliverable value, remove name, photo and metadata, anonymize the public handle, and permanently block sign-in.

· Published lessons and learning/usage ledgers may remain under a UUID after account identifiers are removed for service operation, transaction evidence and abuse prevention. Information required by law or a dispute is kept only as long as necessary.

· Payment records may be retained by Paddle for legally required periods.

6. Google and YouTube Data Choices

Shadowing.tv uses YouTube API Services. By using those features, you also agree to the YouTube Terms of Service.

You can revoke Shadowing.tv access at any time in Google Account security settings. Once revocation or account deletion is known to us, stored Authorized Data is deleted as soon as possible and within the periods required by YouTube policy.

Deleting Shadowing.tv data or your account does not delete your Google Account, YouTube channel, or videos published on YouTube.

7. Your Rights and Account Deletion

You can view or edit your profile and request account deletion in My Page. Deletion immediately cancels an active subscription; removes server recordings, YouTube channel connection data and the current browser's token and recordings; and de-identifies account identifiers.

Local data stored only on another browser or device must be removed with that browser's data controls. Contact us to request access, correction, deletion, restriction or other applicable rights. We may verify your identity before responding.

8. Security and Children

We use HTTPS, database row-level security, owner-only private voice storage, payment-webhook signature verification and separation of server secrets.

We do not knowingly collect personal information from children under 14, and the Service is not available to them.

9. Contact and Changes

Operator: GUDOC Co., Ltd. · Privacy inquiries: shadowingtvenglish@gmail.com

We will announce material changes in the Service or by email before they take effect and update the effective date.