Legal

Privacy Policy

Last updated: March 15, 2026

1. Who We Are

Hangul Hero ("we", "us", "our") is a Korean language learning platform. Our website is located at hangul-hero.com. If you have questions about this policy, contact us at hello@hangul-hero.com.

2. What We Collect

We collect the following categories of personal data:

  • Account information — email address and password (hashed) when you sign up via email, or your name and email from Google if you use Google OAuth.
  • Learning data — words you study, quiz responses, spaced repetition scores, streak counts, and session timestamps. This data is essential to the service.
  • Usage data — pages visited, features used, and browser type, collected via anonymous analytics (if enabled).
  • Payment data — if you subscribe, billing is handled by Stripe. We never store your card number. Stripe's privacy policy applies to payment processing.

3. How We Use Your Data

  • To provide, operate, and improve the learning platform
  • To personalise your study queue and spaced repetition schedule
  • To send transactional emails (account confirmation, password reset)
  • To send learning reminders (you can opt out at any time)
  • To process subscription payments via Stripe
  • To comply with legal obligations

We do not sell your personal data to third parties.

4. Legal Basis (GDPR)

If you are in the European Economic Area (EEA), we process your data under the following legal bases:

  • Contract performance — to provide the service you signed up for
  • Legitimate interests — to improve the product and prevent fraud
  • Consent — for cookies and optional marketing emails
  • Legal obligation — where required by law

5. Data Retention

We retain your account and learning data for as long as your account is active. If you delete your account, all personal data is permanently erased within 30 days. Anonymised, aggregated analytics data may be retained indefinitely.

6. Third-Party Services

We use the following third-party services that may process your data:

  • Supabase — database and authentication (EU/US hosted)
  • Stripe — payment processing
  • Resend — transactional email delivery
  • OpenRouter / Anthropic — AI-generated example sentences (no personally identifiable information is sent)
  • Vercel — hosting and edge network

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and all associated data
  • Object to or restrict processing
  • Request a machine-readable export of your data
  • Withdraw consent at any time (where processing is consent-based)

To exercise any right, email hello@hangul-hero.com. We will respond within 30 days.

8. Cookies

We use essential session cookies to keep you logged in. If we add analytics cookies in future, we will ask for your consent first. You can manage cookies in your browser settings at any time.

9. Children

Hangul Hero is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us immediately and we will delete it.

10. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes by email or by a notice on the platform. The "last updated" date at the top of this page reflects the most recent revision.