Sikppang English ("Company") values the privacy of TopikIQ application ("App") users and complies with the Korean Personal Information Protection Act and other applicable laws. This policy explains what personal information we collect, how we use it, how long we retain it, and your rights.

1. Information We Collect

Collected when you use the service

• Account information: email address, user ID, password (stored encrypted)
• Learning activity: quiz answers, writing submissions, study progress, scores
• Speaking and AI conversation data: when you use these features, voice recordings, speech transcripts, recent conversation context, and AI feedback. Recordings may be stored temporarily on your device during the session and are sent through Supabase Edge Functions to the OpenAI API for transcription, evaluation, and response generation.
• Device information: device identifier, OS version, app version, push token
• Payment-related: subscription plan, product, store, payment status, amount, currency, expiration date, and RevenueCat user ID (payment method details such as card numbers are processed by Apple/Google, not by us)

Optional

• Display name (nickname)
• Optional usage analytics and crash diagnostics (only if you enable them in the App)
• If you participate in promotional feedback: user ID, promotion code, submission timing, and free-text feedback

2. How We Use Your Information

• Account registration, authentication, and management
• Providing and personalizing learning content
• Providing AI writing grading, tutoring, speech transcription, speaking evaluation, and AI conversation features
• Subscription management and payment status verification
• Sending study reminders (push notifications)
• App stability monitoring and bug fixes
• Service improvement through usage analytics that may be linked to an account ID when you enable optional diagnostics

3. AI Services and Data Transmission

The App uses Supabase Edge Functions and the OpenAI API to provide AI features.

Data sent to the OpenAI API: learning text you submit, such as essays and questions, and—when you use speaking or AI conversation features—voice recordings, speech transcripts, recent conversation context, learning prompts, and level information. Passwords and payment method details such as card numbers are not included in AI requests.

Data sent to OpenAI is subject to OpenAI's API data handling and retention policies. OpenAI states that API inputs and outputs are not used to train its models by default. See OpenAI's Privacy Policy and API data controls.

4. Third-Party Services

We do not sell your personal information. We use the following third-party services to operate the App:

• Supabase: User account and learning data storage (Row Level Security enabled) — Privacy Policy
• RevenueCat: Subscription and in-app purchase management (PCI-DSS compliant) — Privacy Policy
• OpenAI: AI learning-text processing, speech transcription, speaking feedback, and speech synthesis — Privacy Policy
• Expo: Push notification delivery — Privacy Policy
• Sentry: Error monitoring and performance analytics when you enable optional diagnostics — Privacy Policy
• Google Sign-In: Account authentication and fraud prevention. The Google Sign-In SDK may process a user identifier and IP address and may use the IP address to estimate a device's general location — Privacy Policy
• Telegram Bot API: Delivery to a restricted administrator chat of purchase-event alerts (email address or user ID, product, store, amount, currency, and expiration date) and promotional feedback (user ID, promotion code, submission timing, and free-text content) — Privacy Policy

5. Data Retention and Deletion

• We retain information necessary to provide the service while your account is active.
• Upon account deletion, account and learning data controlled directly by TopikIQ in its primary systems is deleted within 30 days, unless retention is required by law.
• Speaking recordings may remain temporarily on the device during a session; the App attempts to delete them when they are replaced or the session is cleaned up. Data sent to OpenAI is subject to OpenAI's API retention policy.
• Optional crash and performance diagnostics are subject to Sentry's retention policy and our project settings.
• Operational alerts and promotional feedback sent to Telegram are subject to Telegram's policy and our restricted administrator-chat retention settings.
• Transaction and payment records are retained for 5 years as required by the Korean E-Commerce Act.

6. Your Rights

You may exercise the following rights at any time:

• Request access to, correction of, or deletion of your personal information
• Request suspension of personal information processing
• Request account deletion (Settings > Delete Account in the app, or by email)

Send requests to support@topikiq.com and we will process them within 7 days.

7. Data Security

• All data in transit is encrypted with TLS/SSL.
• Passwords are hashed before storage.
• Supabase Row Level Security (RLS) policies ensure users can only access their own data.

8. Children's Privacy

TopikIQ is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that such information has been collected, we will delete it immediately.

9. Changes to This Policy

This policy may be updated due to changes in law or service. Material changes will be communicated through in-app notifications.

10. Contact Information