Privacy Policy for koko ai

1. Information We Collect

We may collect the following types of personal information:

1) Account Creation (Google & Apple Sign-In)

• We provide Google and Apple sign-in options for registration and login.
• Depending on your consent, we may collect:
  • From Google Sign-In: name, email address, profile photo (optional)
  • From Apple Sign-In: name, email address (if you choose “Hide My Email,” only the relay email is shared)
• We do not collect or store your Google or Apple account passwords. Authentication is handled securely by the respective providers.

2) During Service Use

• Voice input, audio recordings, and chat history when you use AI conversation or pronunciation features
• Pronunciation assessment data, including:
  • The word or phrase you were asked to pronounce
  • Speech-recognition transcripts
  • Pronunciation scores and pass/fail results
  • Language, recording and processing timestamps, audio format, and related technical metadata
  • Your user ID while needed to secure and manage recordings associated with your account
• Learning activity data (grammar corrections, quiz results, feedback logs)
• Device and technical information: IP address, OS, browser/app version, cookies, log data

3) For Paid Services (if applicable)

• Payment information (partial card number, billing details, transaction history)

2. Purpose of Collection and Use

Your personal information is used for the following purposes:

• Authenticate users via Google/Apple login
• Provide Korean learning services (AI conversations, corrections, feedback)
• Provide pronunciation assessment, including transcripts, scores, and pass/fail feedback
• Manage accounts and ensure secure access
• Personalize and improve learning content
• Process payments and refunds for paid services
• Respond to inquiries and provide customer support
• Analyze usage patterns to enhance service quality
• Evaluate and improve speech recognition and pronunciation assessment quality, including diagnosing inaccurate results
• Send marketing or event notifications (only with your consent)

3. Retention and Deletion of Data

• Identifiable pronunciation recordings and per-attempt metadata are retained only as long as reasonably necessary for the purposes described in this Policy and while your account remains active, unless a shorter period is disclosed in the Service.
• When account deletion is completed, we delete the account and associated personal data, including identifiable voice recordings, speech-recognition transcripts, pronunciation scores, and per-attempt results, unless retention is required by law.
• We may retain genuinely de-identified and aggregated statistics that cannot reasonably be linked back to you, such as word-level attempt counts, pass rates, or score distributions. These retained aggregates do not include raw audio, free-form transcripts, user IDs, exact attempt timestamps, or other identifiers reasonably capable of linking the data to you.
• Removing only an account identifier from a raw voice recording is not treated by us as anonymization.
• However, certain data may be retained as required by law:
  • Contracts and withdrawal records: 5 years (E-Commerce Act)
  • Payment and transaction records: 5 years (E-Commerce Act)
  • Customer complaints and dispute records: 3 years (E-Commerce Act)
  • Log data: 3 months (Communications Privacy Protection Act)

4. Sharing Personal Information with Third Parties

• We do not share personal information with third parties without your consent, except:
• When required by law or requested by government authorities through legal procedures

5. Service Providers

We may use trusted service providers to perform limited operations on our behalf:

• Authentication providers: account sign-in and identity verification
• Cloud and backend service providers: secure application operations, data processing, and private storage
• Pronunciation processing providers: authenticated processing and non-public storage of voice recordings and associated assessment metadata
• Payment providers and app stores: purchases, subscriptions, and refunds

All entrusted parties are contractually required to process personal data securely.

6. User Rights

You have the right to:

• Access, correct, or delete your personal information
• Request suspension of data processing
• Withdraw consent and delete your account
• Decline optional voice recording; however, pronunciation and voice-conversation features may not function without microphone access and the processing described in this Policy
• Exercise these rights by contacting us at jaylee8864@gmail.com

7. Safeguards for Personal Information

We take technical and organizational measures to protect your data:

• Encryption of sensitive information during storage and transmission
• Non-public cloud storage for pronunciation recordings and authenticated upload access
• Strict access control limited to authorized personnel
• Regular security monitoring and audits

8. Cookies and Log Data

• We use cookies and log data to improve user experience and analyze service usage.
• You may refuse cookies by adjusting your browser settings; however, some features may not function properly.

9. Data Protection Officer

• Name: Jake Lee
• Position: CEO / Data Protection Officer
• Email: jaylee8864@gmail.com
• Contact: (to be updated with company number if available)

10. Changes to This Privacy Policy

• This Privacy Policy is effective as of July 15, 2026.
• Any updates or changes will be notified through our website and in-app notices.