NoriNori Privacy Policy
This is an English translation of the Korean privacy policy. The Korean original is here: 노리 개인정보 처리방침.
Nori Studio explains below how personal information is processed in Nori (the "App") and on its website.
1. Scope of processing
When you sign in, your study records and settings are linked to your account and synced across devices. For guests, study records and settings are kept on the device. Whether or not you are signed in, the information below may be processed during video playback, weather-based recommendations, subscriptions, watching ads, inquiries, and security checks.
2. Information we collect and why
| Information | Purpose | When |
|---|---|---|
| Account identifier, email, name, profile photo URL | Sign-in, account identification, record syncing, and responding to inquiries.
· Google: account identifier, email, name, profile photo URL · Apple: account identifier, email (a relay address if you use “Hide My Email”), name (if provided) · Kakao: Kakao member number, Kakao Account email | When you sign in |
| Nickname, avatar (emoji and color) | Showing your profile in the App. | Tutorial and profile editing |
| Study records (word card states, daily study amounts, course progress, practice and game records, mock exam attempt records with the answers you chose and time spent, real exam results you enter yourself, target level and exam date) | Providing review schedules, Today’s study, statistics, estimated scores, and study analysis, and improving the service. | When you study |
| Music usage records (play counts and playback method, likes, pins, follows, playlists and their names, records of words you pressed in lyrics) | Providing recommendations, your library, and new song notifications, and improving the service. | When you listen to songs |
| Speaking practice audio | Pronunciation assessment through Microsoft Azure. Audio for assessment is not stored in the App or on our servers. The list of assessed sentences is used to calculate the daily free usage limit. | When you tap the microphone in speaking practice (sign-in required) |
| Subscription information (product, purchase, renewal, and expiration records), account identifier, device information (OS, device model, app-specific device identifier) | Verifying Nori Plus subscriptions, restoring purchases, responding to refund inquiries, and sales statistics. | When you launch the App and use subscriptions |
| Account identifier, account deletion time | Confirming that account deletion requests were processed. | When you delete your account |
| Push notification token | Delivering notifications about new songs, songs you requested, and new articles. | When you allow notifications |
| Inquiry content; for email inquiries, the sender address, attachments, and sent and received times; a contact email you optionally enter; (if signed in) account identifier and account email; device type and app version | Responding to inquiries, feedback, and copyright requests, and checking errors. | When you send an inquiry |
| Approximate location | Looking up the current weather and recommending songs. Location is not stored after the weather lookup. | When weather-based recommendations are on |
| Ad request information (device information, device identifiers such as the advertising identifier, IP address, ad impression and reward records), ad consent status in the European region | Showing rewarded ads, granting rewards, and preventing ad fraud. Not used for personalized ads. | When you choose to watch an ad at the daily game limit |
| IP address, access logs, app and device integrity check information | Security and fraud prevention when accessing the App and website and during sign-in. | When you use the App or website |
3. Video playback
When a YouTube video plays, Google may collect device information and playback records, use cookies and similar technologies, or show ads. The YouTube Terms of Service and the Google Privacy Policy apply to this.
4. Processors and overseas transfers
To provide the service, we entrust the processing of personal information to the companies below. You can find each company’s privacy contact through the links below. Information is sent over the network when you use the relevant service, such as email inquiries, launching the App, sign-in, subscriptions, speaking, weather, notifications, or watching ads. The account identifier contains the sign-in provider’s member identifier (the Kakao member number for Kakao sign-in), and this identifier is also used for authentication (United States) and subscription management (RevenueCat, United States). For Kakao sign-in, consent to this overseas transfer is obtained together on Kakao’s consent screen.
| Recipient | Work entrusted and information transferred | Location and retention |
|---|---|---|
| Google LLC (Firebase) | Authentication, database, file storage, server functions (including pronunciation assessment and weather relay), and security checks — your account and the records above in general | Database and server functions: Republic of Korea (Seoul). Authentication: United States. Until account deletion. Authentication information is destroyed within up to 180 days after a deletion request; authentication IP logs are kept for a few weeks |
| Google LLC (Google Workspace) | Sending, receiving, and storing inquiry emails — sender address, email content and attachments, sent and received times | Countries where Google’s processing facilities are located, including the United States (list of locations). Kept and destroyed according to section 5 |
| Google LLC · Apple Inc. · Kakao Corp. (sign-in) | Processing sign-in — account information from each service | According to each company’s policy (Kakao: Republic of Korea) |
| RevenueCat, Inc. | Managing subscription status — account identifier, purchase and renewal records, device information | United States. For as long as needed to manage subscriptions. Deletion requests are handled separately from account deletion, and records subject to legal retention follow section 5 |
| Microsoft Corporation (Azure AI Speech) | Pronunciation assessment — recorded audio and the sentence to assess | Republic of Korea (Korea Central region). Not stored after assessment |
| Norwegian Meteorological Institute (MET Norway) | Weather lookup — the approximate location sent by Nori’s server (when you use weather-based recommendations) | Norway. States that request logs are kept within Norway |
| 650 Industries, Inc. (Expo) | Delivering push notifications — push token, notification content | United States. Notification content is not stored after delivery |
| Google LLC (YouTube) | Video playback — see section 3 above | According to Google’s policy |
| Google LLC (AdMob) | Showing and measuring rewarded ads — the ad request information above | Countries where Google’s processing facilities are located, including the United States. According to Google’s policy |
If you do not want overseas transfers, you can choose not to use, or turn off, the relevant features (sign-in, subscriptions, speaking practice, weather-based recommendations, notifications, watching ads). You can use the website contact form instead of email inquiries. However, video playback and features that require sign-in will be limited.
5. Retention and destruction
Account information and study and music records are destroyed when you delete your account. Inquiry records and account deletion confirmation records are destroyed once the purpose of processing has been achieved. However, the following records are kept separately under the Act on the Consumer Protection in Electronic Commerce, etc.
| Record | Retention period |
|---|---|
| Records of contracts, withdrawal of offers, payments, and service supply (account identifier, product, transaction details) | 5 years |
| Records of consumer complaints and dispute handling (contact information, inquiry content, outcome) | 3 years |
Personal information whose retention period has ended or whose processing purpose has been achieved is deleted without delay. Electronic files are destroyed so that they cannot be recovered or reproduced, and the deletion periods of entrusted services follow section 4 above.
6. Your rights
- Access and correction: You can view and edit your profile and goals directly in the App.
- Deletion: You can delete your account and records at any time in the App under "Settings & privacy → Privacy & data → Delete account".
- Notifications, location, and microphone: You can turn these off at any time in your device settings and the App’s settings.
- Ads: Ads are shown only when you choose them. In regions where consent is required, such as Europe, you can change or withdraw your consent in "Ad privacy choices" under "Settings & privacy" in the App.
- Disconnecting your Google account: If you signed in with Google, you can remove the App’s access at any time in Google security settings.
- You and your legal representative can request access, correction, deletion, or suspension of processing through the contact below.
7. Children’s personal information
The App is intended for users aged 14 and over. If we find that personal information of a child under 14 has been collected, we delete it without delay.
8. Security measures
Data is encrypted in transit and at rest, and access rules on the server database limit reading and writing to your own data. Administrators view data only to the extent needed to handle inquiries and operate the service.
9. Changes to this policy
If the contents change, we update the effective date on this page and announce important changes through the App’s notices.
10. Contact
Privacy officer: Kim Sangmin (Nori Studio). You can request access, correction, deletion, or suspension of processing, and raise complaints, through "Send feedback" in the App or the contact page.
Email: contact@norijapanese.com · Contact form