Privacy Policy

1. Data we collect

We collect only what the service needs to operate:

• Sign-in provider (Apple or Google) and its account identifier — no password; the real name from your provider is never stored or used
• Date of birth — used only to enforce the minimum age of 14; never shown to other users
• Profile and settings — auto-generated nickname and avatar (editable in My Page), explanation-language choice (Korean / Vietnamese), device timezone, store market, notification and league-participation preferences
• Learning data — lesson progress, per-sentence grading results (pass/fail and per-word results), daily streak records, and weekly league scores
• Subscription status mirrored from our billing provider (trial / active / expired, plan, renewal dates) — never payment details
• Push notification token (if you enable notifications), consent records (consent type, version, time, IP address, user agent), and standard request metadata

2. What we never collect: your voice

Speech recognition and grading run entirely on your device — using the platform's built-in speech recognizer where available, or a bundled offline recognizer otherwise. No code path uploads, streams, stores, or transcribes your audio server-side. Our servers store only the graded result of each sentence: a pass/fail verdict and per-word results. There are no recordings or transcripts of your speech anywhere in our systems.

3. How we use your data

• Provide the service — sync your lesson progress, streak, and league standing across sessions and reinstalls
• Verify you meet the minimum age of 14
• Check your subscription entitlement so lessons unlock correctly
• Send the daily reminder and streak-warning push notifications — each can be turned off in My Page
• Measure engagement (lesson completions, funnels, retention) through a product-analytics service
• Comply with applicable Korean and Vietnamese law

4. Sharing and processors

We do not sell your personal data. We share it only with processors needed to run the service:

• Amazon Web Services (Seoul region) — hosting for our database and content delivery
• Apple App Store / Google Play — subscription billing; the store collects and manages your payment method
• RevenueCat — subscription state management; receives store receipts, never your learning data
• Apple and Google push services (APNs / FCM) — notification delivery
• A product-analytics service — engagement events only; never audio, speech content, or your real name
• Authorities, where disclosure is legally required

5. Cross-border transfers

Our servers are located in Seoul, South Korea. For users in Vietnam, the transfer of account data and graded results to Seoul is disclosed and consented to at sign-up, in accordance with the Personal Data Protection Law (Law 91/2025). No biometric voice data crosses any border — it never leaves your device in the first place.

6. Retention

Your data is kept while your account is active. When you delete your account, it is deactivated immediately with a 30-day recovery window; after 30 days your profile, lesson progress, grading results, streak records, league history, and subscription records are permanently deleted. Consent records are retained for 5 years from permanent deletion, as required by Korean general practice and Vietnam's PDPL. Database backups expire within 30 days. See Account Deletion for the full breakdown.

7. Security

All traffic is encrypted in transit (TLS 1.2 or higher), and access to production data is restricted to operating the service. By design, we never possess your voice recordings or your payment card data — the most sensitive categories never enter our systems at all.

8. Your rights

• Access and export the personal data we hold about you
• Correct your data — nickname, avatar, explanation language, and notification settings are editable directly in the app
• Delete your account and associated data — available directly in My Page
• Withdraw consent, object to processing, or request restriction of processing

To exercise a right you cannot complete in the app, contact support@quick-speaking.com.

9. Children

Quick Speaking is for users aged 14 and older. We collect date of birth at onboarding and refuse sign-up below 14; there is no parental-consent path, so the app is not offered to younger children at all.

10. Changes

We may update this Privacy Policy as the product evolves. For material changes — such as new processors, new data categories, or changed retention periods — we will notify you in the app before they take effect, and ask for fresh consent where required.

11. Contact

For any question about your data or this policy, contact support@quick-speaking.com.