WriteLang / 쓰면영어 Privacy Policy
Updated: 2026-10-28 · Effective date: (publication date) · Previous version: 2026-10-23 · 한국어
1. Operator and contact
WriteLang, known in Korea as 쓰면영어, is a desktop (Windows, macOS) and mobile (iOS, Android) app provided by an individual developer. This policy covers the app and the servers it uses. Privacy contact: the developer (WriteLang privacy and support contact), [email protected].
2. Personal data we process
Using the app requires signing in with a Google or Apple account. Data whose ground is "contract" is needed to provide the service and is processed without consent (Korean Personal Information Protection Act (PIPA) Article 15(1)(4)). The one consent we ask for is to send your text to an external AI service (section 3).
| Category | Purpose | Data | Ground | Retention |
|---|---|---|---|---|
| Account | Sign-in, allowance and subscription, account deletion | Account number (random), sign-in provider's user ID, email (relay address if you use Apple's Hide My Email), sign-up and sign-in times. Name and profile photo are deleted on receipt | Contract | Until account deletion |
| Sign-in session | Keeping you signed in, security | Session number, IP address, app/browser information, refresh time, authentication log | Contract | Until sign-out or account deletion. Authentication log: to be confirmed |
| Trial-length group | Google Play free-trial length (A 14 days, B 7 days), group statistics (section 2.1) | One random letter (A or B) set at first sign-in | Contract; further use (PIPA Art. 15(3)) | 8 weeks after the grouping ends; immediately on account deletion |
| Subscription | Providing Pro and trials, subscription support | Store, transaction number, product, trial flag, status, end time, store notification type and date, random account value for Google Play billing | Contract | Until account deletion |
| Translation, correction, learning material (Pro) | Running the translation, correction and learning material you ask for | Text you send, notes, requests, terms to keep, language and tone settings, account pseudonym, weekly usage totals (calls, tokens, cost), the weekday your allowance refills and your time-zone offset | Contract; consent before sending (section 3) | The relay server does not store text. Usage totals 90 days |
| Consent record | Proving consent, asking again when terms change | Purpose, wording version, consent or withdrawal, time | Contract; legal obligation | Until account deletion |
| Sync (Pro) | Keeping cards, learning material and review history in step across your devices | Device number (random), device type and generic name, sync times, cards and learning material (including source and corrected text), saved sentences, review history, learning settings | Contract. Can be turned off in Settings > Devices | Until account deletion; deleted 90 days after a subscription ends |
| Apple sign-in token | Disconnecting Apple sign-in on account deletion | Apple refresh token (stored encrypted) | Contract | Deleted immediately on account deletion |
| Feedback | Receiving and answering inquiries | What you write, optional reply email, app version, OS, submission number, time | Contract. Sent only when you press Send; email used only to reply | 30 days after the final reply or 90 days after receipt, whichever comes first |
| Ratings (👍👎) | Comparing result quality | Rating, model and prompt version, app version, OS, submission number, time. No text | To be confirmed. Sent only when you rate | To be confirmed |
- History, settings and cards stored on your device are not sent to us (except Pro sync). They may remain after you uninstall; delete them yourself if needed.
- We use no cookies, advertising IDs, usage tracking or automatic crash reports, and we do not collect your translations for quality improvement. Operating-system permissions to read and replace selected text are used only for that feature.
- Sync data is stored encrypted at rest on our account server in the United States, and other accounts cannot read it. It is not end-to-end encrypted, so it can be read with server administrator access; we open it only at your request or when the law requires.
- The zip release checks
https://writelang.com/latest.jsonfor updates at startup, which passes your IP address to the hosting provider. Turn off Check for updates in Settings to stop it.
2.1. Criteria for further use
To set plans and trial lengths, we count trial-length groups and subscription history only as weekly numbers per group. This relates to the original purpose (providing trials and subscriptions), is disclosed in advance here, is never used for individual decisions, advertising or disclosure to third parties, and is computed inside the account store so that only numbers leave it (PIPA Art. 15(3), Enforcement Decree Art. 14-2). The privacy contact reviews this quarterly.
3. Sending text for translation and correction, and consent
- Only when you run a translation or correction, your text goes through our relay server (Cloudflare) to OpenAI in the United States. Nothing is sent while you type. The relay server does not store your text. OpenAI may keep it for up to 30 days for abuse monitoring.
- Pro learning material is made with OpenAI and Google (Gemini). Google may keep text flagged by its abuse monitoring for up to 90 days. Turn off Auto-save Pro results in learning settings so corrected text is not sent again automatically.
- Before your text is first sent, we show where it goes and how long it is kept, and ask for consent. If you do not agree, nothing is sent and translation and correction are unavailable. You can withdraw consent in Settings > Account; we ask again if the recipients or retention change.
- We do not train AI models on your text. OpenAI and Google state that they do not use data received through their APIs for model training by default.
- Do not enter sensitive information such as health or financial data or national ID numbers.
4. Processors and international transfers
We do not sell your personal data or provide it for advertising. We entrust the work below; international transfers are disclosed in this policy under PIPA Article 28-8(1)(3). Items marked "to be confirmed" will be added here once settled.
| Recipient and contact | Work and data transferred | Country, timing, method | Retention |
|---|---|---|---|
| Supabase Pte. Ltd. — [email protected], 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513 | Account server: account, session, group, subscription, consent, sync and Apple token data in section 2 | United States (Oregon). HTTPS at sign-in, sync and subscription checks | As in section 2 |
| Cloudflare, Inc. — [email protected], 101 Townsend St, San Francisco, CA 94107, USA | Correction relay (text you send, account number, usage totals, IP), receiving and storing feedback and ratings, forwarding inquiry email | Cloudflare locations worldwide. HTTPS when you run or submit | Text not stored; otherwise as in section 2 |
| OpenAI — contracting entity to be confirmed, privacy policy | Translation, correction and learning material: text you send, notes, requests, terms to keep, account pseudonym | United States. HTTPS when you run | Up to 30 days |
| Google (Google Cloud Vertex AI) — contracting entity to be confirmed, privacy notice | Learning-material check: learning-material text and part of the source (no account data) | To be confirmed. HTTPS when learning material is made | Only text flagged by abuse monitoring, up to 90 days |
| Google LLC — contact, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA | Storing inquiry email (Gmail) | United States. When email is received or answered | As for feedback |
To refuse international transfer, do not sign in or do not consent to sending. Translation and correction are processed only in the United States, so they are then unavailable. If you have signed in, you can withdraw consent or delete your account (Settings > Account). Feedback and ratings are not transferred unless you send them.
Google and Apple sign-in and App Store, Google Play and Microsoft Store payments are handled by those companies under their own policies. We do not receive payment details.
5. Deletion and safeguards
- When retention ends, the purpose is met, or you request deletion or withdraw consent, we delete the data without delay and in a way that is hard to recover. If a legal retention duty arises, we state its basis and period and keep the data separately.
- Delete your account in the app (Settings > Account > Delete account). We immediately delete the account data in section 2 and ask Apple to disconnect sign-in. If the relay server does not respond, we retry for up to 30 days. Subscription billing stops only when you cancel in the store.
- Deleted data may remain in the feedback store's recovery history for up to 7 days and is not reused.
- Safeguards: encryption in transit (HTTPS), encryption at rest, per-account access control, multi-factor authentication on operator accounts, least access. Server logs do not contain your text.
6. Your rights
You or your legal representative can ask at [email protected] to access, correct, delete or stop processing your data, or to withdraw consent. Account deletion and consent withdrawal are available directly in Settings > Account. On request we send your synced data as a file. We check only the minimum information needed to find your data and do not routinely ask for ID.
We make no automated decisions or profiles about you (trial-length groups are random). For advice or dispute mediation in Korea: Personal Information Portal, Personal Information Dispute Mediation Committee.
7. Children under 14
The app is for people aged 14 and older. We do not accept accounts or feedback from children under 14. If we learn we have received such data, we stop processing it and delete it without delay.
8. Changes
We post changes and their effective date in this policy and in the app. If the recipients of your text or its retention change, we ask for consent again before your next send. The Korean and English texts say the same thing.
Website feedback
When you press Send on the website, your message, a random submission reference, submission time, form version and a web-channel label are sent through Cloudflare Pages to the existing Worker and D1. The form has no email field and does not attach device identifiers, your actual OS, translation content or diagnostic logs. Messages are used for inquiry handling; section 3.1’s retention rules for comments without email and deletion-request process apply.
The form does not save messages in cookies or persistent browser storage. After a failed send, text remains only in the open page; no background retry occurs. Closing the page discards that text and its retry reference. Cloudflare may process IP and HTTP request information during HTTPS connections; this does not guarantee zero retention.