Privacy Policy

Effective 2026-11-01

Susu Korean ("the Service") takes your personal information seriously. This policy sets out what we collect, why, how long we keep it, and how it is deleted.

1. What we collect

When you sign up — your email address. If you sign up with Google, Kakao, or Apple, we receive the email address and display name those services give us. If you use Hide My Email from Apple, we receive a relay address Apple creates instead of your real one. If you sign up with an email address and password, the password is stored in an irreversible form and we cannot read it. If you sign up with Apple, we keep an encrypted sign-in refresh token used only to revoke the Apple connection when you delete your account; it is deleted together with the account.

While you use the Service — the text of your answers, your practice history (what you practised and how it was scored), and the language you are reading in.

Only with your consent — voice recordings. The default is not to store them; without consent they are discarded as soon as scoring finishes.

Automatically — we count requests by IP address to prevent abuse. We do not store the address itself, only an irreversible value derived from it.

Automatically — whether you use the web, the iPhone app, or the Android app, and the app version. Your app or browser sends this with each request; we record it when you start practice or save your profile. We do not collect device identifiers.

Community — posts, comments, and photos you upload, shown with your nickname and nationality. Community posts are visible to other users. Photos are resized on your device before upload, which also strips metadata such as location (EXIF).

When you buy the Naturalization Interview Membership — the transaction ID, product, amount and time that Apple (App Store) or Google (Google Play) reports to us (and the refund time, if refunded). Payment details such as card numbers are handled by Apple or Google and never reach us.

When the app shows ads (if you are not a member) — ads are served by Google AdMob. To choose ads and count views and taps, Google directly receives the advertising identifier (on iPhone, the IDFA if you allow tracking; on Android, the advertising ID), IP address, device and app information, and records of ads viewed and tapped. This information is not stored on our servers and is handled under Google's privacy policy. If you don't allow tracking on iPhone or delete the advertising ID on Android, you see non-personalized ads. Where consent is required, such as in Europe, we ask first.

When the website shows ads — susukorean.com shows Google AdSense ads. To choose ads and count views, Google directly receives cookies, browser and device information, and your IP address. This information is not stored on our servers and is handled under Google's privacy policy. You can turn off personalized ads at google.com/settings/ads, and where consent is required, such as in Europe, we ask first.

2. What we do not collect

Answers to questions that identify you personally — your name, address, or registration number — are never sent to our servers. Those answers are handled on your device and discarded.

If such an answer were ever transmitted, the database erases it before storing. This is enforced by the database itself, not by a promise in the application code.

3. Why we use it

To sign you in and keep your account

To score your answers and show your practice history

To limit usage so the Service is not abused or driven to excessive cost

To answer support requests and guide app updates, by knowing which platform and app version you use

To show ads in the app to users who are not members, and on the website

We do not use it for anything outside these purposes.

4. How long we keep it

You can delete your account yourself from My Page. There is no request to send and no wait.

Deleting your account immediately removes your profile, practice history, review notes, answers, and any stored voice recordings. This cannot be undone.

Even without deleting your account, voice recordings are deleted if you withdraw your consent to store them.

Usage counts are kept only as long as needed to detect abuse and are cleared regularly.

You can delete your community posts, comments, and photos directly on screen; deleting your account removes them all. Posts that break the rules may be hidden or removed by admins.

Purchase records (transaction ID, product, amount, time) are kept for 5 years even after you delete your account, as required by the Act on Consumer Protection in Electronic Commerce, and then destroyed. During that period only the nickname at the time of purchase stays with the record; it is not linked to any other data.

5. Processors we rely on

Running the Service requires the following companies. They may not use your information for anything beyond what we specify.

Supabase — storage of accounts and practice history

Vercel — serving the website

Google — turning spoken answers into text (Gemini)

Google, Kakao, Apple — social sign-in (only if you signed up that way)

Apple, Google — in-app payment and refunds (App Store, Google Play)

Google — ads in the app (AdMob) and on the website (AdSense). The information ads need goes directly to Google and is handled under Google's own policy.

6. Transfer outside Korea

The facilities of the companies above are located outside Korea. Using the Service requires this transfer; the items and purposes are those listed above.

If you do not want this transfer, the Service cannot be used. You may decline to create an account, or delete an existing one.

7. Your rights

You may view, correct, and delete your information, and ask us to stop processing it.

To delete your account you do not need to wait for a request to be handled — you can do it yourself from My Page.

Send requests to 1onestepenglish@gmail.com. We act on them within 10 days of receipt and tell you the outcome.

8. How we keep it safe

Everything travels over an encrypted connection (HTTPS).

Row-level access control in the database means a signed-in person can only read their own records.

Answer keys are excluded from every path that reaches a user at all.

9. Changes to this policy

We announce changes on the site before they take effect. Changes that disadvantage users are announced 30 days in advance.

Questions about personal information go to 1onestepenglish@gmail.com.