Privacy Policy of Delicious Korean

1. Purpose of Processing Personal Information

Delicious Korean processes personal information for the following purposes. The processed personal information will not be used for any purposes other than those outlined below. If the purpose of use changes, we will obtain the necessary consent in accordance with relevant laws and regulations.

1. Account Creation and Membership Management

   We process personal information to confirm membership intent, verify the identity of users, manage accounts, and prevent unauthorized or fraudulent use.

2. Service Provision

   Personal information is processed to provide and operate the Company’s Services, including account access, educational content, 1-on-1 coaching sessions, Learning Games, speaking games, interactive learning features, payment processing, customer support, and user interactions.

3. Handling User Complaints

   We process personal information to verify the identity of complainants, investigate complaints, notify users of complaint resolutions, and ensure a smooth resolution.

4. Community and Interactive Features

   Personal information may be processed to operate community spaces, messaging features, game features, profile features, nicknames, user interactions, and other interactive features. Depending on the specific Service, users may be required to use their real name or may be allowed to use a nickname or profile name.

5. Service Improvement and Marketing

   Personal information is processed to develop new services, offer tailored content, send promotional materials, manage participation in events, and compile usage statistics.

6. Legal Compliance

   Personal information may be processed to comply with legal obligations, including accounting, taxation, and other regulatory requirements.

7. Voice Data, Speech Inputs, and AI Features

   When users participate in 1-on-1 coaching sessions, speaking games, Learning Games, Korea Town, or other interactive learning features, the Company may collect and process voice recordings, speech inputs, pronunciation data, learning responses, and related activity data. This data may be used to provide the Services, generate learning feedback, support speech recognition features, improve service quality, troubleshoot issues, and provide customer support.

   Where required by applicable law, the Company will obtain separate consent before using voice recordings, speech data, or User Content for AI learning, model training, or similar purposes beyond the direct provision of the Services.

8. Learning Games and Game Data

   When users use Learning Games, speaking games, quizzes, missions, number games, vocabulary games, role-play activities, or other game-based learning features, the Company may process Game Data such as gameplay records, scores, levels, progress, missions, answers, speech responses, voice recordings, feedback results, and activity logs. This information is used to operate the games, provide learning feedback, track progress, prevent abuse, improve learning features, and enhance the user experience.

2. Legal Basis for Processing Personal Information

Under GDPR, we must establish a lawful basis for processing personal data. The following are the legal grounds on which we rely:

• Contractual Necessity: We process personal information to fulfill the contract we have with users, such as providing access to coaching sessions or purchased content.
• Legal Obligations: Certain data is processed to comply with legal obligations (e.g., financial reporting, tax laws).
• Consent: For marketing communications or voice recordings for AI learning, we will seek explicit user consent.
• Legitimate Interests: We may process personal data to improve services, ensure security, or prevent fraud, provided such interests are not overridden by user rights.

3. Retention Period for Personal Information

Personal information is retained for the minimum necessary period to fulfill the purposes outlined above or as required by law.

1. Account and Membership Information

   • Personal information will be retained until the user withdraws from membership or until necessary for legal and business operations.
   • Account Deletion: Upon user account deletion request, personal data will be retained for a period of 30 days, after which it will be permanently deleted from our systems unless required for legal or regulatory purposes.

2. Service Provision

   Personal data related to service provision, such as session schedules and content access, will be retained until the completion of the service.

3. Legal Retention Requirements

   Certain records will be retained as required by law:

   • Records of transactions, contracts, and withdrawals: 5 years
   • Records of payment and goods provision: 5 years
   • Records of consumer complaints and dispute resolutions: 3 years
   • Communication logs (IP addresses, connection times): 1 year

4. Learning Games and Game Data

   Game Data, including gameplay records, scores, levels, missions, progress, answers, feedback results, and activity logs, will be retained for as long as necessary to provide the Services, maintain user progress, improve learning features, prevent abuse, and comply with legal or business requirements. When the user deletes their account, Game Data will be deleted or anonymized unless retention is required by law or necessary for legitimate business purposes.

5. Voice Recordings and Speech Data

   Voice recordings, speech inputs, pronunciation data, and related speech data will be retained only for as long as necessary to provide the relevant Service, generate learning feedback, improve service quality, provide customer support, or comply with applicable legal obligations. Where such data is used for AI learning or model improvement based on separate consent, users may withdraw consent as provided under applicable law.

1. Categories of Personal Information We Collect

   The following categories of personal information may be collected:

   1. Account Creation and Management
      • Required: Email address, password, name
      • Optional, depending on sign-up method: Profile picture, nickname, account information from third-party services such as Google, Facebook, or Apple
   2. Service Interaction
      • Required or optional depending on the Service: Real name, nickname, email address, profile information, user-generated content, messages, learning responses, and community interaction data
   3. Learning Games and Speaking Features
      • Gameplay records, scores, levels, missions, progress, answers, quiz results, speech responses, voice recordings, pronunciation data, speech recognition results, AI-generated feedback, learning activity logs, and related interaction data
   4. 1-on-1 Coaching Sessions
      • Session schedules, coach assignment information, attendance records, learning notes, feedback, lesson records, and, where applicable, voice or video recordings
   5. Payment Information
      • Payment details, billing information, payment status, transaction records, refund details, and other information necessary to process payments and refunds. The Company may use third-party payment processors and may not directly store full credit card numbers.
   6. Technical Information
      • IP address, device information, browser type, operating system, language settings, access logs, cookies, approximate location data, and other technical data used for security, fraud prevention, analytics, and user experience optimization

1. Children and Minors

   The Services are not intended for children under the age required by applicable law to provide valid consent without parental or legal guardian approval.

   If the Company knowingly collects or processes personal information from a child or minor who requires parental or legal guardian consent under applicable law, the Company will obtain such consent or take other appropriate measures as required by law.

   If a parent or legal guardian believes that a child has provided personal information without the required consent, they may contact the Company at [email protected] to request appropriate action.

1. Rights of Users under GDPR

   As per GDPR, users in the European Economic Area (EEA) have the following rights:

   1. Right to Access

      Users can request access to their personal information and obtain a copy of the data we hold.

   2. Right to Rectification

      Users can request corrections to any inaccurate or incomplete personal information.

   3. Right to Erasure

      Users can request the deletion of their personal data in specific circumstances (e.g., when the data is no longer necessary for the purposes it was collected).

   4. Right to Restrict Processing

      Users can request restrictions on the processing of their data under certain conditions.

   5. Right to Data Portability

      Users can request to receive their data in a machine-readable format to transfer to another service provider.

   6. Right to Object

      Users can object to the processing of their personal data, particularly in cases of direct marketing or profiling.

   7. Right to Withdraw Consent

      Users have the right to withdraw consent at any time for processing activities based on consent (e.g., marketing communications, AI learning).

1. CCPA Rights (California Residents)

1. Data Sharing and Transfers

1. Data Security Measures