Privacy Notice
Flowtalk (hereinafter referred to as the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of users and to handle related grievances quickly and smoothly.
Article 1 (Purpose of Processing Personal Information)
The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use is changed, necessary measures such as obtaining separate consent will be implemented.
- Member Registration and Management: Identification through Google social login, verification of age restrictions (restriction for children under 14), confirmation of intent to use the service, etc.
- Service Provision: Generation of English learning curricula based on YouTube videos, script analysis using AI, management of learning progress, etc.
- Paid Service Provision and Payment Management: Processing in-app subscription payments, synchronizing purchase history and managing subscription status, and responding to payment-related customer inquiries such as subscription cancellations and refunds.
- User Support: Responding to inquiries related to service use and delivering notices.
Article 2 (Items of Personal Information Processed)
The Company collects the minimum personal information necessary to provide the service.
- Required Items: Google account information (Email, profile name, profile picture), service usage records (logs).
- Items Collected for Subscription Services: Purchase records (receipt tokens, order numbers), subscription status information, and RevenueCat App User ID.
- Payment Note: The Company utilizes the Google Play in-app billing system. Sensitive financial payment information, such as the user's credit card number, is neither collected nor stored on the Company's servers.
- Collection Method: Integration through Google social login and direct input by the user.
Article 3 (Retention and Usage Period of Personal Information)
- The Company processes and retains personal information within the period of retention and use agreed upon when collecting personal information from the user or within the period required by law.
- Retention Period: Until account withdrawal.
- Upon withdrawal, the Company immediately destroys the user's personal information and learning data. However, if it is necessary to preserve it in accordance with relevant laws and regulations, it shall be stored for that specific period.
Article 4 (Provision to Third Parties and Entrustment)
- The Company processes users' personal information only within the scope specified in Article 1 and does not process it beyond the original scope or provide it to third parties without the user's prior consent.
- Entrustment of Processing: The Company entrusts the following personal information processing tasks to external specialized agencies for smooth service provision.
| Trustee | Description of Entrusted Work | Period of Use |
|---|---|---|
| Google Firebase | Server infrastructure, Google social login authentication, data storage | Until withdrawal or termination of contract |
| Google AdMob | Providing personalized in-app advertisements and analyzing ad performance | Until withdrawal or termination of contract |
| RevenueCat | Verification of in-app payment (subscription) receipts, synchronization of purchase history, and management of subscription status | Until membership withdrawal or end of entrustment contract |
Article 5 (Use of YouTube API Services)
The Company uses YouTube API Services, and accordingly, the Google Privacy Policy (https://www.google.com/policies/privacy) applies. The Company does not download or store YouTube videos on its servers.
Article 6 (Rights and Obligations of Data Subjects)
- Users may view or modify their registered personal information at any time and request termination of subscription (withdrawal).
- If a user requests correction of an error in personal information, the Company will not use or provide the personal information until the correction is completed.
Article 7 (Destruction of Personal Information)
- The Company destroys personal information without delay when it becomes unnecessary, such as the expiration of the retention period or the achievement of the processing purpose.
- Information in the form of electronic files is deleted using technical methods that cannot reproduce the records.
Article 8 (Measures to Ensure Safety of Personal Information)
The Company takes the following safety measures to ensure that users' personal information is not lost, stolen, leaked, altered, or damaged.
- Encryption: Important information is stored and managed in an encrypted form.
- Technical Measures against Hacking: Security programs are installed and periodically updated and inspected to prevent leakage or damage of personal information caused by hacking or computer viruses.
Article 9 (Privacy Officer)
The Company is responsible for overall personal information processing and designates a Privacy Officer as follows to handle user complaints and remedy damages.
- Email: mizzijin@gmail.com
Article 10 (Changes to the Privacy Policy)
This Privacy Policy is effective from the enforcement date. If there are any additions, deletions, or corrections to the contents in accordance with laws and policies, the Company will notify users through announcements 7 days prior to the implementation of the changes.
Enforcement Date: June 13, 2026