DearLangs Privacy Policy

(US Version – COPPA/CCPA/CPRA, with Korea Law Clauses)

Effective Date: [YYYY-MM-DD]

1. Purpose and Principles

This Policy is based on applicable US, California, and Korean laws, and reflects best practice under COPPA, CCPA, and CPRA to protect users’ rights, dignity, and freedom.

2. Definitions

Service: All content and features provided by DearLangs.
User: Any customer using the Service under these Terms.
Child: Under 13 (COPPA 기준).

3. Personal Data Collected and Use

Users under 13:
Only ID and password are collected for account authentication.
No other personal data is collected or processed; no parental consent required unless law mandates.
Payments are handled through app stores; no payment data is collected/stored.
No marketing, profiling, or analytics are conducted.
Users 13 or older:
Social login info (ID, email, etc.), usage logs, device info, payment data (via app store only), and data required for service, support, analytics, and marketing (with consent).

4. Device Permissions

Device permissions (camera, gallery, files) are only requested for content creation/upload.

Permissions can be refused with no effect on basic Service use; features needing those permissions may be restricted.

All collected files are deleted after use unless otherwise requested by the user.

5. How We Collect Data

Directly from you: Account registration, communications, use of app features.
Automatically: Usage analytics, device/app logs, cookies/trackers.

6. Data Retention

Membership: Until account deletion; if under investigation, until completion.
Service: Until delivery/payment completion; longer if legally required.
Contract/cancellation: 5 years
Payments: 5 years
Complaints/disputes: 3 years
Advertising: 6 months
Service improvement: until end of use
Marketing: until withdrawal of consent
After expiry, data is deleted or anonymized.

7. Data Destruction

Data is destroyed promptly when the retention period ends or purpose is achieved; electronic files are deleted, paper records are shredded/incinerated.

8. Third-Party Provision

Data is only shared with consent, as required by law, or to protect vital interests.

9. Outsourcing

All data processing outsourcing contracts follow required safeguards for lawful processing, security, and liability.

10. Security

Administrative, technical, and physical measures are in place, including encryption, access control, and staff training.

11. User and Guardian Rights

Under 13: No statutory data rights apply as no personal data is processed, but account/support requests are accepted.
13 or older: Users may access, correct, delete, restrict, or withdraw consent for their data; rights may be exercised by legal guardians with proof.

12. Data Protection Officer

A designated Data Protection Officer manages privacy issues.

Contact: [sypark/Dev3/cs@dearsoft.co.kr]

13. Data Breach Notification

If a personal data breach occurs, we will notify affected users and authorities in accordance with US law.

14. Changes to the Policy

Policy changes are announced 7 days in advance (30 days for major changes) via app or website.