Privacy Policy

Effective September 14, 2026 · English translation

SuperSpeak is operated by KIM SEONGHUN, who also handles privacy inquiries. For access, correction, deletion, or other privacy requests, email draftup@naver.com.

Information we use

SuperSpeak is a language-learning app for conversations with AI friends, explanations, and review. To provide these features, it uses App Store-signed app download verification information; derived user identifiers and sessions; public passkey credentials for existing web users; friend settings; conversation audio and transcripts; selected PDF content; vocabulary and learning records; subscription transactions; and call usage records. Biometric information such as Face ID and fingerprints is not sent to SuperSpeak's servers.

Information on your device and our servers

In the distributed app, conversation transcripts, summaries, explanations, vocabulary, and learning records are kept on your current device. Authentication information, settings and images needed for daily friend stories, subscription status, and call usage are stored on the server. Reinstalling with the same Apple Account or restoring purchases does not automatically transfer learning records. Save a backup in Settings before changing devices.

Current conversation and relevant learning context are sent to AI processing servers when needed for conversation and explanations. SuperSpeak does not retain original call audio as a recording file. PDFs are uploaded temporarily to extract expressions and deleted after analysis. Temporary materials left by interrupted operations are removed during cleanup.

Retention and deletion

• User identifiers, sessions, AI consent history, and friend settings and images support the service. Delete my information in Settings removes friends, learning materials, AI consent, access sessions, and linked passkeys. Original app download verification data is used for verification and is not stored. Access sessions expire after 30 days. Hashed identifiers, subscription transactions, call usage, and trial start times needed to restore purchases, verify remaining time, and prevent duplicate trials are retained after this deletion. You can ask the operator to remove that linkage too; additional support may then be needed to verify access.
• Server connection information for ended calls is limited to the most recent 32 calls within 30 days. Active connection and hang-up retry information is retained until the call is confirmed ended. Up to eight days of recent daily stories are retained per friend.
• Temporary PDFs are deleted after processing. Interrupted uploads and unused temporary images are deleted at the next daily cleanup after they are 24 hours old. If cleanup is delayed, they are deleted at the next successful run.
• Device learning records remain until you delete them in the app or remove the app's data. You are responsible for deleting exported backups.
• Server request and error logs use the hosting service's default retention: one hour on the free plan and one day on Pro. App logs do not record full conversation text or original audio.
• Deleting your information removes personal materials and existing sessions, subject to the purchase and usage records retained above. If ending an active call is delayed, only the connection identifiers needed to end it are kept until termination is confirmed. A nonidentifying path and deletion marker remain to prevent concurrent requests from recreating deleted data.

Electronic records are deleted from service storage and are not retained beyond the necessary scope. Email inquiries are kept as needed for support and disputes and deleted within three years after the inquiry is resolved. Records subject to separate legal retention requirements are kept separately to the extent required.

External services and international processing

The following providers process information needed for their features. Transfers use encrypted network connections when the feature is requested. Daily friend preparation may run on the server while AI consent and access remain valid.

OpenAI, LLC — AI voice, learning, and images

Information: call audio, necessary conversation context and transcripts, friend settings and image materials, selected PDF content, vocabulary, and learning context. Purposes: AI conversations, transcription, explanations, corrections, review, and friend images and stories. Contact: privacy@openai.com.

Processing takes place in the United States and countries where OpenAI's processing infrastructure operates. The app uses general API routes and does not restrict processing to South Korea. The provider's published list includes Australia, Brazil, Canada, France, Germany, India, Indonesia, Ireland, Italy, Japan, Malaysia, Mexico, the Netherlands, Norway, Poland, Singapore, South Africa, South Korea, Spain, Sweden, Switzerland, the United Arab Emirates, the United Kingdom, and the United States. Providers in the United States, Canada, and the Philippines may review policy-violating content. This does not mean each request goes to every country. See the current OpenAI subprocessor list.

Text analysis and call requests disable separate response and call storage. OpenAI does not use API inputs or outputs to train its models by default. Abuse-monitoring logs may be retained for up to 30 days by default, with exceptions such as legal obligations. Images are also subject to provider safety review policies. See OpenAI's API data retention information.

The latest app visit and per-friend call start and end times support natural returning greetings and dormancy after 30 days without a visit. Only the latest times are updated; a detailed visit history is not created. Relevant visit and call times may be shared with the AI during a call with that friend. These times are removed when you delete your information.

Vercel Inc. — Hosting and server storage

Information: hashed user identifiers, existing public passkey credentials, sessions, app download verification information, consent history, friend settings and images, subscription and call usage, conversation and learning context required for feature requests, temporary PDFs, IP addresses, and technical request information. Purposes: sign-in, user-specific storage, request processing, security, and operation. The configured region for the app server and private storage is Virginia, United States. Content delivery and security may also use network locations near users. Retention follows the periods above; the provider's own security records follow the Vercel Privacy Notice. Contact: privacy@vercel.com.

Apple — App verification and subscription payment

Apple handles payment methods and card numbers; SuperSpeak does not receive them. SuperSpeak receives signed app download verification information and subscription transaction identifiers, renewals, and expiry information. The app starts without separate registration and links subscriptions and usage using download verification associated with the same Apple Account. It does not receive your Apple Account password or email address.

Managing your information

Separate consent is requested before sending information to OpenAI for AI processing. Without consent you can view saved records and account settings, but cannot use new AI features. Withdraw AI data-sharing consent in Settings to stop new processing. Provider retention and deletion policies continue to apply to information already sent. If you do not want Vercel processing for account services, delete your account or ask the operator to stop processing.

You can revoke microphone permission in iPhone Settings. Delete conversations and words in the app, and export or restore device backups in Settings. Backups may contain personal conversations; keep them in a location you control. Deleting your account does not cancel Apple subscription renewals.

Delete my information removes server friend data, AI consent, existing passkeys, and learning records on the current device. Purchase and usage verification information is retained as explained above. Remove other devices' records and exported backups separately.

Advertising and tracking

The app does not currently use advertising identifiers or track activity across other companies' apps and websites for advertising. Learning records and usage support conversations, review, and subscription management.

Your rights and safeguards

Use Settings or the support email to request access, correction, deletion, processing suspension, or withdrawal of consent. Account ownership may be verified before a request is processed. The app does not support users under 14. If such a child's information is identified, use is stopped and the information is deleted. Legal guardians may contact the operator.

Safeguards include encrypted transmission, access control per user, private server storage, and Apple signature verification. Existing web accounts also use public-key passkey authentication. Device authentication providers manage biometric data and private passkey keys. In South Korea, privacy complaints can be directed to the Privacy Infringement Report Center (118) or Personal Information Dispute Mediation Committee (1833-6972).

Changes to this policy are reflected in the effective date and content on this page. The app will request new consent when required.