Privacy Policy

1. Data Controller Information

Service name: tab-hunmin

Operator (company name): Hoppe AI

Representative: Hong Beompyo

Address: 375, Jungbu-daero, Giheung-gu, Yongin-si, Gyeonggi-do, Republic of Korea

Contact: hbpjjang2@gmail.com

Data Protection Officer: Hong Beompyo / Representative / hbpjjang2@gmail.com

2. Personal Information Collected

The Company collects the following personal information to provide the Service.

• Account information (social login): email address, name (nickname), profile image, social login identifier (information provided upon Google or Apple sign-in)
• Learning records: typing records, accuracy and speed, pronunciation tutor pass results, words/sentences/expressions studied, mastery level, streaks, experience points, and lesson progress
• Automatically collected information: service usage records, access logs, device and browser information, cookies, advertising identifiers, and usage analytics data (collected via Firebase Analytics)
• Payment information (for paid purchases): payment method, transaction history, subscription status (actual card numbers and other sensitive payment data are processed by the payment gateway and are not stored by the Company)
• Optional information: learning motivation/goals (K-pop, dramas, travel, TOPIK, etc.), marketing consent status

3. Purposes of Collection and Use

• Member identification and account/login management
• Providing the learning service, progress tracking, achievements, and personalized learning
• Pronunciation and typing correction and difficulty adjustment
• Service improvement, usage analysis, and error diagnosis
• Billing, settlement, and subscription management for paid services
• Responding to customer inquiries and delivering notices
• (Where separately consented) Providing marketing information such as events and promotions

4. Retention and Use Period

In principle, personal information is destroyed without delay upon account withdrawal. However, it is retained for the following periods where required by law.

• Records of contracts or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records of payment and supply of goods/services: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records of consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
• Website visit (access) logs: 3 months (Protection of Communications Secrets Act)

5. Provision of Personal Information to Third Parties

The Company does not provide users' personal information to third parties beyond the scope specified in this Policy, except where the user has given prior consent or where required by law.

6. Outsourcing of Personal Information Processing

The Company outsources the following personal information processing tasks to ensure smooth service delivery.

• Google LLC (Firebase): authentication, database, hosting, usage analytics
• Google LLC (Gemini API): AI processing for pronunciation and translation
• Toss Payments / Paddle: payment processing (when the corresponding payment method is used)

The Company specifies and manages/supervises relevant matters in outsourcing agreements to ensure personal information is handled securely.

7. International Transfer of Personal Information

Because the Company uses Google's cloud infrastructure (Firebase, Gemini API), personal information may be processed outside Korea.

• Recipient: Google LLC
• Countries of transfer: the United States and other countries where Google data centers are located
• Items transferred: information under "Personal Information Collected" above that is necessary to provide the Service
• Timing and method of transfer: transmitted over the network at the time of Service use
• Purpose of use and retention period: same as the purposes and periods stated in this Policy

Users may refuse the international transfer of their personal information, but doing so may limit their ability to use the Service.

8. Processing of Pronunciation and Voice Data (Service-Specific Notice)

When using the pronunciation tutor, the user's voice is processed solely for real-time pronunciation correction, and the raw audio is not stored on the server. Only derived indicators of learning results, such as pass/fail status and scores, are stored.

9. Cookies and Other Automatic Collection Tools; Behavioral Information

The Company uses cookies and similar technologies (Firebase Analytics, advertising identifiers, etc.) to analyze and improve Service usage. Users may refuse cookie storage or reset/block advertising identifiers through their browser or device settings, although this may limit certain Service features.

10. Rights of Data Subjects and How to Exercise Them

Users may at any time request access to, correction of, deletion of, suspension of processing of, and withdrawal of consent to their personal information. Requests may be made via hbpjjang2@gmail.com or through in-service settings, and the Company will act without delay.

11. Destruction of Personal Information

Personal information for which the retention period has expired or the processing purpose has been achieved is destroyed without delay. Electronic files are deleted using methods that prevent recovery, and printed materials are shredded or incinerated.

12. Measures to Ensure the Security of Personal Information

The Company implements technical, administrative, and physical safeguards for personal information protection, including access authority management, access control, encryption, and security vulnerability inspections.

13. Personal Information of Children Under 14

When the Company collects and uses personal information of children under 14 years of age, it obtains the consent of a legal guardian and verifies age at sign-up. The legal guardian may request access to, correction of, deletion of, and withdrawal of consent for the child's personal information.

14. Data Protection Officer and Requests for Access

Data Protection Officer: Hong Beompyo / Representative

Contact: hbpjjang2@gmail.com

Users may direct inquiries, complaints, and requests for relief regarding personal information to the Data Protection Officer, and the Company will respond promptly and in good faith.

15. Remedies for Infringement of Rights

If consultation or remedy is needed due to a personal information infringement, users may contact the following agencies.

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office Cyber Investigation Division: 1301 (www.spo.go.kr)
• National Police Agency Cyber Bureau: 182 (ecrm.police.go.kr)

16. Changes to This Policy

This Policy may be amended in response to changes in law or the Service, and any changes will be announced through in-service notices.

Effective date: 2026-07-06