Privacy Policy

The short version

Hangul Route is built for children ages 5–11. We collect as little as possible, never show ads, and never sell data. Most learning data stays on the device until a parent chooses to sign in. A parent is always in control.

Who creates the account

Accounts are created and managed by a parent or legal guardian. A child uses the app, but a grown-up sets it up, enters any billing details, and confirms consent behind a parent-gate. We do not knowingly let a child under 13 create an account without verifiable parental consent.

What we collect

• Child profile: a display nickname and an age band (5–7 / 8–11). A real name is optional and only stored if a parent enters it.
• Learning progress: quests completed, stars earned, cards unlocked, streaks, and which jamo a child recognizes — so the journey can resume and a parent can see progress.
• Account contact: a parent email, used for sign-in, receipts, and account recovery.
• Basic device and diagnostic data: app version, device type, and crash logs, to keep the app stable.

What we never collect

• No advertising identifiers and no third-party ad tracking — ever.
• No precise location.
• No contacts, photos, or microphone audio leaves the device. Voice mini-games process speech on-device and discard it.
• No behavioral profiles sold or shared for marketing.

Children's privacy (COPPA / GDPR-K)

Hangul Route is designed to comply with the U.S. Children’s Online Privacy Protection Act (COPPA) and similar rules for minors. We practice data minimization, require verifiable parental consent before any personal data is linked to an account, and give parents the right to review or delete their child’s data at any time.

Where your data lives

By default, learning data is stored locally on the device. If a parent signs in, progress syncs to our servers (Cloudflare) so it can be restored on a new device. Data in transit is encrypted (HTTPS), and at rest it is access-controlled.

Payments and subscriptions

Subscriptions are billed through the Apple App Store or Google Play. We never see or store full card numbers — the store handles payment and gives us only the minimum needed to unlock the subscription on the account.

Third-party services

• Apple App Store / Google Play — payments and subscription management.
• Cloudflare — hosting, storage, and content delivery.
• We do not use third-party advertising or social-media tracking SDKs.

Parental rights and choices

A parent can review, export, correct, or delete their child’s data, withdraw consent, and close the account. To make a request, email us from the address on the account and we will respond within 30 days.

Data retention and security

We keep account data while the account is active and delete it within 90 days of an account being closed, unless we are legally required to keep it longer. We use industry-standard safeguards, but no system is perfectly secure.

Changes to this policy

If we make a material change, we will notify parents in the app or by email before it takes effect. The date below shows the current version.

Contact

Questions about privacy? Email privacy@hangulroute.example. We read everything.