Privacy Policy

Article 1 (Purposes of processing)

BlahBlah processes personal information for the following purposes only. If the purposes change, we will take the necessary steps, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

• Membership: confirming sign-up, identifying and authenticating members, maintaining membership, preventing misuse, confirming guardian consent for children under 14, and sending notices.
• Inquiries: verifying identity, reviewing requests, contacting you and reporting results.
• Providing the Service: delivering the Service and content, saving learning progress, processing payments and managing subscriptions.

Article 2 (Retention period)

① We keep personal information only for the period required by law or agreed to by you, and delete it without delay when you delete your account.

② The following records are kept as required by Korean law:

• Contract and withdrawal records: 5 years
• Payment and supply records: 5 years
• Consumer complaint and dispute records: 3 years
• Website access logs: 3 months

Article 3 (Your rights)

You may ask to access, correct, delete or stop the processing of your personal information at any time, and we will act without delay. You can exercise these rights by emailing the privacy officer in Article 8.

Article 4 (Information we process)

We process only the minimum information needed to provide the Service. Depending on the features you use, we may process:

• Account and profile: email, name (display name), profile photo and sign-in method provided by your social login provider (Google, Apple), and internal user IDs (such as Firebase UID).
• Payments: payer name, email, phone number, product/subscription/payment status, transaction IDs and refund records.
• Service use: learning progress and in-game progress.
• Technical: device, operating system and browser information, IP address, access and usage logs, and error/diagnostic information.
• Inquiries: information you provide when contacting support.

We do not collect account passwords, dates of birth or real-name verification data. Social login credentials are handled by the login provider. Payment methods are handled by our payment provider (Payple), and we do not store full payment details such as complete card numbers. If we offer voice or AI conversation features, we will add the data processed and the providers involved to this policy before processing.

Article 5 (Deletion)

When the purpose of processing is fulfilled, we delete personal information without delay. Electronic files are deleted using methods that make recovery impossible, and printed records are shredded or incinerated.

Article 6 (Security measures)

• Minimizing staff with access, managing access rights and restricting access
• Encryption in transit (HTTPS)
• No direct storage of payment method details (handled by our payment provider)

Article 7 (Cookies and similar technologies)

We use cookies and browser storage to keep you signed in and to manage subscriptions. We do not use advertising cookies. You can refuse cookies or clear stored data in your browser settings, though some features such as sign-in may stop working.

Article 8 (Privacy officer)

• Privacy officer: Yuli Kim (CEO)
• Contact: yuli@blahblahai.com

Article 9 (Access requests)

You can request access to your personal information from the privacy officer in Article 8, and we will handle it promptly.

Article 10 (Remedies)

If your rights are infringed, you can apply for dispute resolution or counseling with the Personal Information Dispute Mediation Committee (kopico.go.kr), the Personal Information Infringement Report Center (privacy.kisa.or.kr), the Supreme Prosecutors’ Office or the Korean National Police Agency.

Article 11 (Sharing and service providers)

① We do not sell your personal information or share it with third parties without your prior consent, except to the minimum extent required or permitted by law.

② We use the following service providers and require them to keep information confidential and apply appropriate technical and administrative safeguards:

• Payple Inc.: recurring payment processing and payment method management
• Google LLC (Firebase): sign-in authentication and storage of account and subscription data. Data may be transferred to data centers outside Korea, including in the United States, over the network when you use the Service, and kept until you delete your account or the contract ends.
• Amazon Web Services, Inc.: website hosting (Seoul, Republic of Korea region)

Article 12 (Changes to this policy)

① This Privacy Policy applies from October 7, 2026.

② We will post any changes on the website at least 7 days before they take effect.