keecon Co., Ltd. ("we", "our") respects your privacy. This policy explains what data TOPIK Coach (the "App") collects, how we use it, and the rights you have. We comply with applicable laws including the GDPR (EU) and the CCPA (California, USA).
1. Information We Collect
| Type | Data | Source | Purpose |
|---|---|---|---|
| Required (auto) | Anonymous session token, device OS version, app version, IP | Auto-generated via Better Auth anonymous sign-in | Service delivery, session, study history storage |
| Required (auto) | App usage: question results, viewed types, time spent, screen navigation | Collected automatically while using the App | Study progress, wrong-answer notebook, analytics |
| Required (auto) | Crash logs, device model, OS version, stack traces | Firebase Crashlytics on abnormal termination | Stability and bug diagnosis |
| Optional (ads) | Advertising identifiers (IDFA/GAID), impressions, clicks, tracking consent | Google AdMob SDK (iOS: only after ATT consent) | Ad delivery and measurement |
| Optional (social login) | Email address, display name, social account ID | Only when you link Sign in with Apple or Google | Restore progress across devices |
| Optional (preferences) | UI language, theme, audio speed, auto-advance, etc. | Set by you in-app | Personalized learning environment |
Data We Do Not Collect
- Camera, microphone, location, contacts, photos/gallery
- Phone number, legal name, address, national ID numbers
- Credit card / payment information (the App currently has no in-app purchases)
- Audio, video, or image data
2. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA) and UK, we rely on the following legal bases under Article 6 of the GDPR:
- Performance of a contract — providing the App and storing your study history.
- Legitimate interests — debugging crashes, measuring aggregate usage, preventing abuse.
- Consent — advertising identifiers (IDFA/GAID) via ATT/UMP, optional social login linking. You can withdraw consent at any time via device settings or by unlinking your account.
3. CCPA Rights (California Residents)
California residents have the following rights under the California Consumer Privacy Act (CCPA) and CPRA:
- Right to know what personal information is collected, used, and shared
- Right to request deletion of personal information
- Right to opt out of the sale or sharing of personal information
- Right to non-discrimination for exercising privacy rights
Do Not Sell or Share My Personal Information: We do not sell your personal information for money. We do share advertising identifiers with Google AdMob for targeted advertising — you can opt out via device settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Privacy → Ads) or by sending us an email.
4. Service Providers (Processors)
| Provider | Purpose | Data |
|---|---|---|
| Cloudflare, Inc. (USA) | Workers runtime, edge delivery, firewall | IP address, session tokens, API logs |
| Supabase | Managed PostgreSQL database | Anonymous session IDs, study history, linked social IDs |
| Google LLC — Firebase (USA) | Crashlytics, Analytics | Crash logs, device info, screen events, install IDs |
| Google LLC — AdMob (USA) | Advertising | Advertising IDs, impressions, clicks, device info |
| Apple Inc. / Google LLC | Sign in with Apple / Google | Email, display name, social account ID (when you link) |
5. Data Retention
- Study history and wrong-answer notebook: kept until you delete your account. After a deletion request, there is a 14-day grace period for recovery; then data is permanently removed.
- Social login links: deleted immediately on unlink or account deletion.
- IP / API logs: automatically deleted after 60 days.
- Advertising identifiers and events: governed by Google AdMob retention (up to 14 months).
6. Cookies and Tracking Technologies
- Website cookies: The landing site (topikcoach.keecon.com) is a static page that does not set its own cookies and does not use tracking cookies or analytics scripts. Blocking cookies in your browser does not affect the site.
- IDFA/GAID: Only collected after explicit consent. iOS uses App Tracking Transparency (ATT); Android respects the device Ad ID setting.
- Firebase Analytics: You can limit ad personalization in device settings, which limits analytic events.
7. Your Rights
You can exercise the following rights at any time:
- Access, correct, or delete your personal information
- Port a copy of your data (GDPR Article 20)
- Object to processing or withdraw consent
- Lodge a complaint with your local data protection authority
Delete your account inside the App via Settings → My Info → Delete account. For other requests, email us.
8. Privacy Contact
| Field | Value |
|---|---|
| Contact | keecon Co., Ltd. |
| support@keecon.com |
9. Changes to This Policy
We post any change to this policy at least 7 days before it takes effect. Significant changes (new data categories, new third parties, etc.) are announced at least 30 days in advance on this page and in-app.