Privacy Policy

Last updated: July 8, 2026

1. Personal Information We Collect

  • At sign-up: name (optional), email address, password (encrypted at rest by Supabase — the Operator cannot see the plaintext)
  • When signing in with Google: name and email address provided by your Google account
  • Generated while using the Service: saved words (headword, reading, meaning, example sentence, source), review history (SRS progress, correct/incorrect record), account creation and last-updated timestamps
  • Automatically collected: the Service currently uses no analytics, advertising, or tracking cookies. Standard server access logs (IP address, access time) may still be generated by the hosting provider (Vercel) for ordinary operational purposes.

2. How We Collect Personal Information

Collected through email/password sign-up and Google OAuth sign-in.

3. Purpose of Use

  • Member identification and login authentication
  • Cross-device sync of wordbook and review history (cloud storage)
  • Responding to support inquiries
  • (Only if you opt in) Sending product updates and learning tips

4. Retention Period

As a rule, data is deleted without delay upon account closure, except where retention is required by applicable law.

The Service does not yet offer a self-service account-deletion button. To request deletion of your account or data, contact us at the email below and we will process it without undue delay. Absent such a request, data is retained without automatic deletion.

5. Disclosure to Third Parties

As a rule, the Operator does not disclose personal information to outside parties, except:

  • Where the user has given prior consent
  • Where required by law, or requested by an investigative authority following the procedures prescribed by law

6. Outsourced Processing

The following providers process personal information on the Operator's behalf:

  • Supabase Inc. — authentication and database hosting (accounts, wordbook, review history), Asia Seoul region
  • Google LLC — OAuth authentication when signing in with a Google account
  • Vercel Inc. — website hosting

7. User Rights

Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal information. Wordbook data can be downloaded directly via the Service's CSV/JSON export feature; to request account or data deletion, email us at the address below.

8. Security Measures

  • Passwords are stored encrypted; no one, including the Operator, can view the plaintext.
  • The database is protected by Row Level Security (RLS), so each user can only access their own data.
  • All communication is encrypted via HTTPS.
  • Furigana conversion and dictionary lookups run only inside the user's browser and are never transmitted to the server.

9. Use of Cookies

The Service does not use tracking cookies. It uses the browser's local storage (localStorage) to maintain your login session; this data stays only on your device.

10. Children's Privacy

The Service is not directed at children under 14. Sign-up may be restricted where a user is confirmed to be under 14.

11. Privacy Contact

For inquiries or requests to access, correct, or delete your personal information, please contact:

  • Email: [email protected]
  • Business name: Elpisia
  • Representative: Jihu Park
  • Address: 101-008, B101, 19 Gangnam-daero 42-gil, Gangnam-gu, Seoul, Republic of Korea

12. Notification of Changes

Changes to this Privacy Policy will be announced within the Service or by email.

Effective date: This Privacy Policy applies from July 8, 2026.