Privacy Policy

K-EduPoint — Korean-language learning app
Effective date: July 13, 2026 · Last updated: July 20, 2026

This Privacy Policy explains how Innovicons Co., Ltd. ("Innovicons", "we", "us", or "our") collects, uses, shares, and protects your information when you use the K-EduPoint mobile application and related services (the "Service"). K-EduPoint is a free, ad-supported app that helps people learn the Korean language and earn in-app rewards.

1. Information We Collect

a. Account and profile information

• Sign-in identifier and email. When you sign in with Google or Apple, we receive a unique account identifier (the provider's "subject" ID) and your email address, which we use to create and secure your account.
• Nickname. We automatically generate a nickname when you sign up; you can change it at any time.
• Learning preferences. Your chosen interface/content language, your placement/starting level, and a learning avatar you select (a male/female cartoon character — this is a display choice, not your real gender).

b. Device region and language settings

• Country/region and language derived from your device's locale settings — used for leaderboards and to show the correct language and regional context. This is not GPS or precise location.
• Time zone (e.g., "Asia/Seoul") — used to schedule notifications at appropriate local times.

c. Learning and usage data

• Your progress through lessons, the Hangul learning path, quizzes, and exercises, including attempts, results, streaks, and experience points (XP).
• Spaced-repetition study state, daily activity, and mini-game scores and ticket usage.
• Your in-app virtual currency ("Gold"/points) balances and a transaction ledger (amounts, reasons such as lesson rewards, and timestamps), owned shop items, and reward records.

d. Notifications and device token

• A push notification token (Firebase Cloud Messaging) for your device, and the time it was registered.
• Your notification preferences: marketing notifications (on by default; you can turn these off) and night-time notifications (off by default).

e. Communications

• The content of 1:1 support inquiries you send us (your message text) and their status and timestamps.

f. Microphone and voice (optional feature)

If you use the optional pronunciation ("speak / shadow") feature, the app accesses your microphone and uses your device's built-in speech recognition to score your pronunciation on your device. We do not receive or store any audio recording, and the recognized text is not sent to our servers — only an on-screen score/feedback is shown to you. Your device's speech-recognition service (for example, Google's) may process the audio under its own privacy terms.

g. Advertising and diagnostics data (collected via Google)

• Advertising identifier. Our advertising partner, Google AdMob, may use your device's advertising ID to deliver and measure ads.
• Usage analytics. Firebase Analytics collects app-usage events (such as screen views and session, app, and device information) to help us understand how the app is used.
• Crash diagnostics. Firebase Crashlytics collects crash reports and related device and app-state information so we can fix problems.

h. Technical and session data

• A login session token that keeps you signed in.
• Standard connection data such as your IP address is processed to deliver the Service and to protect against abuse (for example, rate-limiting sign-in attempts). For the gift card reward program described below, we also store your IP address (and a country estimate derived from it) with each redemption request, and at the time your account's country is first set, in order to prevent country/location spoofing and fraud.

i. Gift card reward program (optional feature)

• If you choose to participate in the in-app gift card reward program, we process your account country (derived from device/IP information), the gift card tier and amount, your email address, and your IP address at signup and at each redemption request, in order to determine eligibility, prevent fraud/spoofing, and deliver the gift card.
• To issue the gift card, we share your email address and the redemption details with our rewards partner, Tremendous, which sends the gift card on our behalf. See Section 8.

2. Information We Do Not Collect

We do not collect your real name, gender, date of birth or exact age, phone number, home or postal address, precise/GPS location, photos or camera access, contacts, or government identifiers. The Service has no real-money in-app purchases, so we do not collect or store payment card data.

3. How We Use Your Information

• To create and secure your account and keep you signed in.
• To provide the learning experience — save progress, award and track in-app rewards, personalize difficulty, and run leaderboards and mini-games.
• To send notifications you have not turned off (study reminders and, if permitted, marketing messages) at suitable local times.
• To display ads that keep the app free, and to measure their performance.
• To understand usage, diagnose crashes, and improve the app.
• To respond to your support inquiries.
• To detect, prevent, and address fraud, abuse, and violations of our Terms.
• To comply with legal obligations.

4. Legal Bases (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases: performance of a contract (to provide the Service and your account); your consent (for marketing notifications and, where required, personalized ads — you can withdraw consent at any time); legitimate interests (to keep the Service secure, understand usage, and improve the app); and legal obligation where applicable.

5. Advertising

K-EduPoint is free and supported by ads served through Google AdMob (banner, full-screen, rewarded, and native ads). AdMob may use your device advertising ID to serve ads, which may be personalized. You can limit or reset this at any time:

• Android: Settings → Google → Ads → "Delete advertising ID" or "Opt out of Ads Personalization".

Where consent is legally required (for example, in the EEA/UK), ads will be served in accordance with the applicable consent requirements. Some features let you earn rewards by watching a "rewarded" ad; to grant the reward securely, we transmit your (numeric) user ID to Google for verification. For more information, see Google's advertising policies.

6. Analytics and Crash Reporting

We use Firebase Analytics and Firebase Crashlytics (Google) to understand app usage and diagnose crashes. This processing is governed by Google's privacy and security information for Firebase.

7. Push Notifications

We use Firebase Cloud Messaging to send notifications. You can turn notifications off in your device settings at any time, and you can control marketing and night-time notifications inside the app's settings.

8. How We Share Information

We do not sell your personal information. We share information only as follows:

• Service providers / processors: Google (Sign-In, Firebase Analytics, Crashlytics, Cloud Messaging, and AdMob) and Apple (Sign in with Apple, where offered); our cloud infrastructure provider, Naver Cloud Platform (NCP), which hosts our servers, database, and media storage in the Republic of Korea; and Tremendous, which issues and sends gift cards to users who participate in the optional gift card reward program (we share your email address, country, and redemption amount with Tremendous for this purpose only).
• Legal and safety: when required by law, legal process, or to protect the rights, safety, and security of our users, the public, or the Service.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

9. International Data Transfers

Our servers and database are located in the Republic of Korea. If you use the Service from another country, your information will be transferred to and processed in Korea, and by our providers (such as Google and Apple) in the countries where they operate. Where required by law, we rely on appropriate safeguards for such transfers (for example, Standard Contractual Clauses).

10. Data Retention

We keep your personal information for as long as your account is active. When you delete your account (see Section 12), we delete or anonymize your personal data within 30 days, except where we are required to retain certain information to comply with legal obligations or to resolve disputes. Analytics and crash data are retained according to Google's Firebase retention settings.

11. Security

We use reasonable and industry-standard measures to protect your information, including encrypted transport (HTTPS/TLS), access controls, and reputable cloud infrastructure. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data; to restrict or object to certain processing; and to withdraw consent. You can:

• Change your nickname, language, and notification preferences in the app.
• Limit ad personalization in your device settings.
• Request account and data deletion. We are adding an in-app "Delete account" option; in the meantime, contact us (see Section 15) and we will delete your account and associated personal data within 30 days, subject to legal exceptions.

To exercise any right, email us at innovicons@innovicons.com or use the in-app Customer Support (1:1 inquiry). We will respond within the time required by applicable law.

13. Children's Privacy

The Service is intended for users aged 18 and older (or the age of majority in your country of residence, if higher — for example, 19 in the Republic of Korea). We do not knowingly collect personal information from children, and the Service is not directed to children. If you believe a minor has provided us personal information, please contact us and we will delete it.

14. Region-Specific Disclosures

European Economic Area / United Kingdom (GDPR)

The data controller is Innovicons Co., Ltd., 807-897, 268 Cheongseok-ro, Paju-si, Gyeonggi-do, Republic of Korea. You have the rights described in Section 12 and the right to lodge a complaint with your local data protection supervisory authority.

California (CCPA/CPRA)

We collect the categories of personal information described in Section 1 (identifiers such as account ID and email; internet/app activity; and audio is processed only on your device and not collected by us). We do not sell your personal information for money. Certain ad-related data use may be considered "sharing" for cross-context behavioral advertising under California law; you may opt out by limiting ad personalization in your device settings. You have the right to know, delete, and correct your information, and not to be discriminated against for exercising these rights.

Republic of Korea (PIPA)

We handle your personal information in accordance with the Personal Information Protection Act. You may request access, correction, deletion, or suspension of processing, and withdraw consent, using the contact details below.

15. Contact Us

Innovicons Co., Ltd.
CEO: Kim Eunbi · Business Registration No.: 579-81-03370
Email: innovicons@innovicons.com
Address: 807-897, 268 Cheongseok-ro, Paju-si, Gyeonggi-do, Republic of Korea
In-app: Settings → Customer Support (1:1 inquiry)

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and notify you in the app where appropriate. Your continued use of the Service after an update means you accept the revised Policy.