Privacy Policy

1. Operator and contact

정성헌, an individual in the Republic of Korea, operates Fall in Korean and is responsible for the app's handling of personal information. Contact elon4856@gmail.com with privacy questions or requests.

2. Information used by the app

• Google sign-in: your Google account identifier, name, email address, email-verification status and profile image when supplied. Our authentication system stores the provider credentials needed for sign-in. We do not receive your Google password.
• Anonymous sessions: a guest identifier and session cookie allow you to chat before Google sign-in. Session records include creation and expiry times, browser user-agent information and an IP address when available. A guest session is pseudonymous, not untraceable.
• Conversations and learning: messages you send, AI replies, translations, corrections, selected characters, conversation progress, saved expressions, review cards and practice results. These are stored to show your history and support learning features and daily limits.
• Created characters: names, descriptions, scenarios and portraits you choose to submit. Character records and uploaded images are stored for your account.
• Referrals: the ref URL parameter and supported UTM campaign parameters may be stored with your profile to understand how you found the service.
• Billing: customer, transaction, subscription and checkout identifiers, plan, payment-related subscription status and billing-period information received from Paddle. We use these to manage access and respond to billing requests; the app does not store full payment-card details.
• Support: information you choose to send by email when requesting help, a refund or deletion.

3. Hosting, AI and payments

Cloudflare hosts the service, database and uploaded images. It processes network requests and operational information for delivery, reliability and security. App request logs record route categories, HTTP methods, status codes, durations and error types; our logging code does not record conversation text.

OpenCode Zen / Console provides our AI connection, currently using Google Gemini. To produce a reply, we send your current message, recent conversation context, character instructions and selected saved expressions. Expression-card generation sends selected conversation phrases. This content is processed by OpenCode and the upstream model provider. Do not submit passwords, payment-card details or other sensitive information in chats.

Google provides the sign-in service. Paddle, our Merchant of Record, collects and handles payment and checkout information under its own privacy notice. We receive the billing information needed to provide your subscription.

These providers may process data outside your country, including outside the Republic of Korea. Provider-side retention and processing are governed by their applicable terms and privacy notices; we do not promise that a provider deletes data immediately or never uses it for its own permitted purposes.

4. Analytics and browser storage

PostHog receives limited product events such as screen views, sign-in, messages sent, corrections and upgrades. The app sends an anonymous analytics identifier, screen or built-in character category, layout version and limited event flags. Our event filter excludes message text, correction text, email addresses and full URLs. Automatic event capture and session recording are disabled; the identifier is kept in memory rather than persistent analytics storage. PostHog is not initialized when your browser sends Do Not Track as 1. Like other network services, the analytics endpoint receives connection information when contacted.

Cloudflare Web Analytics receives page-visit and performance telemetry through its browser beacon. Its operation is separate from the PostHog setting.

We use essential sign-in and language-preference cookies, a short-lived sign-in event marker, session storage for attribution and drafts, and local storage for guest conversation/vocabulary backups and character drafts. Guest backups may be imported into your signed-in account. Clearing cookies or site storage can remove local-only progress and does not delete server records. Downloaded share-card images are rendered on your device; the export feature does not upload the finished image.

5. Retention

Account, conversation, learning and character records are kept to provide your saved history. There is currently no automatic age-based deletion of these records; they remain until removed through a verified deletion request or applicable account cleanup. Session validity expires separately. Local drafts and backups remain until cleared, replaced or successfully recovered by the app.

When you request deletion, we will review and remove the data we control that is no longer needed. Limited billing, security, dispute or legal records may need to be retained where required by law or necessary to resolve a dispute. We will explain any such exception in our response. Our providers manage their own operational, backup and legal records under their policies.

6. Access, correction and deletion requests

Email elon4856@gmail.com to request access to, correction of or deletion of your information. For an account request, use your sign-in email and describe what you want removed. For a guest session, keep the original browser available and ask for help identifying the session; do not email session cookies, passwords or tokens. We may need to verify ownership before acting, and may not be able to locate guest data if the identifying session has been lost.

There is no self-service account-deletion button at present. Deletion requests are handled manually. Deleting app data does not automatically cancel a Paddle subscription; also use Manage subscription or Paddle support to stop renewal. You may have additional rights under the law where you live, including the right to complain to a data-protection authority.

7. Children and updates

The service is intended for adults aged 18 and over. If you believe a child has provided personal information, contact us so we can investigate and remove it as appropriate. We will publish changes to this policy here with an updated date.