Privacy Policy
Effective date: 2026-08-08 · Covers: wouldyoukorean.com (website and level test) and app.wouldyoukorean.com (the student app)
The short version: we collect what a small 1-on-1 Korean school actually needs to teach you, we name every company it passes through, your account and your voice recordings are stored in Korea, and you can have all of it deleted by sending one email.
WYK Pass is a separate product. Its website and its mobile app are both covered by the Pass privacy policy.
1. Who is responsible
WouldYouKorean (우쥬코리안), a sole proprietorship registered in the Republic of Korea, operated by Kim Youngmin (Maru). Privacy officer: Kim Youngmin. Contact: wouldyoukorean@gmail.com.
2. What we collect, and why
2.1 If you only browse the website
| Data | When | Why |
|---|---|---|
| Usage events (pages viewed, buttons and links clicked, whether you reached the pricing section) | While you browse | Analytics, so we know which pages help and which do not. Pseudonymous ID, no advertising networks, no ads. |
| IP address and browser user agent | On every request, as with any website | Serving the page, server logs, and analytics geography at country level. |
2.2 If you take the free level test
You can take the whole test without giving us anything. Nothing is sent to our server while you answer. Only if you submit the "email me my result" form do we store the following:
| Data | Why |
|---|---|
| Name and email address | To email you your result, and to reply if you write back. |
| Your answers to the test, plus your own 1 to 10 self ratings for speaking and listening | To produce your result and starting point, and to improve the test. |
| Your computed result (level, estimated TOPIK and CEFR band, recommended starting Phase and Block) | So we can show you the same result again and pick up where you left off if you book. |
| Browser user agent | Debugging display problems on unusual devices. |
2.3 If you book and pay for sessions
| Data | Why |
|---|---|
| Name, email, and the times you booked, from the booking tool | To schedule your sessions and send you the meeting link. |
| Payment confirmation: the payer name, payer email, amount, currency, and date reported to us by Wise or PayPal, and the raw confirmation message they send us | To match your payment to your booking, approve it, issue refunds, and keep the accounting records Korean law requires. |
We do not see or store your card number, CVC, or bank account number. Wise and PayPal handle those and never pass them to us.
2.4 If you are an enrolled student using the app
The student app at app.wouldyoukorean.com is invitation only. We create your account after you enrol.
| Data | Why |
|---|---|
| Email address and password | Sign-in. The password is stored only as a salted hash by our authentication provider. We never see it. |
| Your display name, level, current Phase and Block, enrolment date, last sign-in date | To show you the right material and track where you are in the course. |
| Messaging handle (for example WhatsApp), if you give us one | Optional. To reach you about your lessons, questions about your homework, and schedule changes. Leave it empty and we use email only. |
| Push notification token, if you allow notifications | To send session and homework reminders to that device. Turn notifications off and it stops being used. |
| Homework answers you type, whether each was correct, your score, and how long you spent | To mark your homework and show your teacher what to review with you. |
| ★ Voice recordings you make for pronunciation homework, and the text transcribed from them | To score your pronunciation and let your teacher listen back. See 2.5. |
| Teaching notes written by your teacher about your progress | To teach you. You may ask to see these at any time. |
2.5 Your voice recordings, specifically
- They are stored in a private storage bucket in South Korea, under your own account folder. Database rules mean no other student can read your files.
- When you submit a recording for scoring, the audio file is sent to OpenAI in the United States for speech-to-text only, and the resulting text comes back to us. This is the one place your voice leaves Korea.
- They are never used for marketing, never published, and never used to train any AI model by us.
- If you would rather not have your voice recorded at all, tell us and we will mark your account so pronunciation homework is done live in session instead.
2.6 What we never collect
Card or bank numbers, passport or ARC numbers, home address, health data, or precise location. We do not run advertising trackers and we do not sell anything to anyone.
3. Where your data goes, including outside Korea
Korean privacy law (PIPA) requires us to name every recipient, the country, what they get, and how long it stays. This is the full list.
| Recipient | Country | What they get, and why | Kept for |
|---|---|---|---|
| Supabase database, sign-in, file storage |
South Korea (Seoul region) |
Your account, level test result, booking and payment records, homework answers and voice recordings. Stored in the Seoul data region. Supabase, Inc. (USA) operates the infrastructure. | Until deleted (see §4) |
| OpenAI speech-to-text |
USA | The audio file of a pronunciation recording, at the moment you submit it for scoring, so it can be transcribed. | Not stored by us there; per OpenAI's API policy |
| PostHog analytics |
USA | Usage events with a pseudonymous ID, plus IP and user agent. No homework content and no recordings. | As long as needed for product analysis, then purged |
| Resend email delivery |
USA | Your name, email, and level test result, in order to send you that email. | Per Resend's log retention |
| Vercel website hosting and CDN |
USA / global CDN | Serves the website and app; standard access logs (IP, user agent). | Per Vercel's log retention |
| Expo app delivery and push |
USA | Push notification token and delivery of app updates, if you use the installable app and allow notifications. | While notifications are on |
| TidyCal bookings |
USA | Your name, email and chosen times when you book. | Per TidyCal's policy |
| Wise and PayPal payments |
UK / Belgium / USA | Whatever you give them to pay. They tell us only that a payment arrived, from whom, and how much. | Per their policies and financial law |
| Zoom the sessions themselves |
USA | Your name and email to join, and the audio and video of the session while it runs. | Not recorded unless you agree in advance |
| Google Sheets, Drive, Calendar, Fonts |
USA | Schedules, the student roster and payment log we keep to run the school. Loading the page also requests fonts from Google, which makes your IP visible to them. | While you are a student, plus accounting retention |
| jsDelivr and Cloudflare script CDNs |
Global | Your browser fetches shared libraries from them, which makes your IP visible to them. No account data. | Not stored by us |
You may refuse the overseas transfers above. Analytics and hosting cannot be separated from the service as it is built today, so refusing means we cannot provide the website or app. For voice recordings specifically there is a workable alternative: ask us and we will switch your pronunciation homework to live practice in session, and nothing is sent to OpenAI.
4. How long we keep it, and how to delete it
- Student account, homework and recordings stay while you are a student and for a short period afterward in case you return. Ask us and we delete them sooner.
- Level test result stays until you ask us to delete it.
- Payment and booking records are kept for the period Korean tax and commerce law requires, even if you ask for deletion. We keep only what the law names.
- Analytics events are pseudonymous and purged periodically.
To delete everything: email wouldyoukorean@gmail.com from your account email with the subject "Delete my data". We do it and confirm back, normally within 10 days, as required by PIPA. You can also ask us to show you everything we hold about you, or to correct it, or to stop a particular use.
5. Cookies and local storage
Honest list. We use browser local storage for exactly these:
| Key | What it is for |
|---|---|
wyk_cookie_consent | Remembers that you dismissed the cookie notice. |
wyk_internal | Marks a device belonging to us so our own visits are excluded from analytics. |
sb-...-auth-token | Your sign-in session for the student app. Signing out removes it. |
Our analytics provider also sets its own cookie to recognise a returning browser pseudonymously. We do not use advertising cookies, retargeting pixels, or ad networks. Third-party tools you interact with (TidyCal, Wise, PayPal, Zoom) set their own cookies under their own policies.
6. Age limit
You must be 14 or older to give us your information directly, which is the consent age under Korean law. If you are under 14, a parent or legal guardian must contact us and enrol on your behalf.
7. How we protect it
- Row level security on every database table, so an account can only ever read its own rows. Voice recordings sit in a private bucket under the same rule.
- Administrative keys never ship to the browser. The key your browser holds cannot read another student's data even if copied.
- All traffic is HTTPS only.
- Access to student data by us is kept to what teaching requires.
8. Changes
If this policy changes in a way that matters, meaning new data, a new recipient, or a new purpose, we update this page and change the effective date at the top at least 7 days before it applies.
9. 한국어 고지 (개인정보 처리방침 요지)
아래는 「개인정보 보호법」에 따른 필수 고지 사항의 한국어 요지입니다. 영어 본문과 다를 경우 한국 이용자에게는 한국어 요지가 우선합니다.
- 수집 항목·목적
① 이메일·이름 — 계정 생성, 수업 예약·연락, 레벨테스트 결과 발송
② 레벨테스트 응답·자기평가 점수·판정 결과 — 결과 산출 및 학습 시작점 안내 (결과 이메일 신청 시에만 저장)
③ 학습 기록(숙제 답안, 정오답, 점수, 소요 시간, 진도) — 수업 운영 및 첨삭
④ 발음 숙제 음성 녹음 및 그 전사 텍스트 — 발음 채점 및 교사 검토
⑤ 결제·예약 기록(결제자명, 결제 이메일, 금액, 일시, 결제사 원본 통지 내용) — 결제 확인, 환불, 세무 기록
⑥ 서비스 이용 기록·IP·브라우저 정보 — 보안 및 서비스 개선
⑦ 푸시 토큰, 메신저 아이디(선택) — 수업·숙제 알림 - 보유·이용 기간: 수강 종료 후 일정 기간까지 또는 삭제 요청 시까지. 단, 전자상거래법·세법 등 관계 법령이 보존을 요구하는 결제·거래 기록은 해당 법정 기간 동안 보존합니다.
- 국외 이전
① OpenAI, L.L.C.(미국) — 발음 녹음 음성 파일, 음성-텍스트 변환 목적, 제출 시점에 전송
② PostHog, Inc.(미국) — 서비스 이용 행태 이벤트·IP
③ Resend, Inc.(미국) — 이름·이메일·레벨테스트 결과, 이메일 발송 목적
④ Vercel, Inc.(미국) — 웹 호스팅 및 접속 로그
⑤ Expo(미국) — 푸시 토큰 및 앱 업데이트 전달
⑥ TidyCal·Zoom·PayPal(미국), Wise(영국·벨기에) — 예약 및 결제 처리
⑦ Google LLC(미국) — 일정·명단 관리, 웹폰트 제공(접속 IP)
★ 계정 정보·학습 기록·음성 녹음 원본이 저장되는 데이터베이스와 스토리지는 대한민국(서울 리전)에 있습니다.
이용자는 국외 이전을 거부할 수 있으며, 거부 시 서비스 이용이 제한될 수 있습니다. 다만 음성 녹음의 국외 이전은 거부하면서 수업은 계속할 수 있습니다. 요청하시면 발음 숙제를 수업 중 실시간 방식으로 전환합니다. - 파기 절차·방법: 보유 기간 경과 또는 처리 목적 달성 시 전자적 파일은 복구 불가능한 방법으로 파기합니다.
- 이용자 권리: 열람·정정·삭제·처리정지를 요구할 수 있습니다. wouldyoukorean@gmail.com으로 요청하시면 통상 10일 이내에 처리합니다. 만 14세 미만 아동은 법정대리인을 통해서만 등록할 수 있습니다.
- 개인정보 보호책임자: 김영민 · wouldyoukorean@gmail.com
- 권익 침해 구제: 개인정보분쟁조정위원회 1833-6972 · 개인정보침해 신고센터 privacy.kisa.or.kr, 국번 없이 118
10. Service provider (사업자 정보)
- Services covered: wouldyoukorean.com · app.wouldyoukorean.com
- 상호 (Business name): 우쥬코리안 (WouldYouKorean)
- 대표 (Representative): 김영민
- 사업자등록번호 (Business registration no.): 206-49-61036
- Hosting: Vercel, Inc. (web) · Supabase (database and file storage, Seoul region, South Korea)
- Contact / 문의: wouldyoukorean@gmail.com