Privacy Policy
1. What this policy covers
This Privacy Policy explains how MALHAGI ("MALHAGI", "we", "us") handles information when you use the MALHAGI Korean-language learning website and its account features.
MALHAGI can be used without signing in. Signing in is optional and is used to unlock account features and synchronize learning progress across devices.
2. Information we handle
Guest use. When you use MALHAGI without signing in, some learning preferences, completion marks, difficult-item marks, and similar practice state may be stored in your browser using local browser storage. This information stays associated with that browser unless you clear it.
Signed-in identity. If you choose Google or Kakao sign-in, the selected provider sends MALHAGI the account information needed to establish your identity. Depending on the provider and your consent, this may include your email address, name, profile image, provider account identifier, and whether the provider considers the email verified.
Learning and profile information. For signed-in users, MALHAGI may store information you choose to save and learning state such as your display name, first and last name, preferred learning level, selected narration voice, completed scenarios, study position, and items or phrase pairs you mark as difficult.
Microphone and voice recordings. If you use the speaking-recording feature, your browser asks for microphone permission. MALHAGI creates the recording locally in your browser for playback. The current MALHAGI service does not upload or store those voice recordings on its server.
Technical information. Hosting, security, and authentication providers may automatically process technical information needed to deliver and protect the service, such as IP address, browser or device information, request timestamps, and security-related request data.
3. How we use information
We use information to authenticate users who choose to sign in; unlock signed-in features and synchronize learning progress and settings; operate, secure, troubleshoot, and improve MALHAGI; prevent abuse, fraud, unauthorized access, and technical attacks; and comply with applicable legal obligations.
MALHAGI does not sell personal information and does not use account or learning-profile information for targeted advertising.
4. Cookies and local storage
MALHAGI uses essential authentication cookies for signed-in sessions. These cookies keep you signed in securely and are not advertising cookies. Google or Kakao may use their own cookies when you choose their sign-in services, subject to their own policies.
Guest-mode progress and certain interface preferences may be stored in your browser's local storage.
5. Service providers and sharing
MALHAGI relies on service providers to operate the website. These currently include Cloudflare for hosting, networking, security, and database infrastructure, and Better Auth components for authentication within the MALHAGI Worker. If you choose social sign-in, Google or Kakao also processes information as the identity provider you selected.
We may disclose information when reasonably necessary to comply with law, enforce our terms, protect users or the service, or respond to valid legal process. We do not disclose personal information to data brokers.
6. Data retention and deletion
Signed-in account and learning data may be retained while your account remains in use and for a reasonable period needed for service operation, security, backup, or legal obligations. Guest data remains in your browser until it is cleared by you or by the browser.
You may sign out at any time. You may request deletion of MALHAGI account/profile and synchronized learning data by contacting arxdma@gmail.com. We may need to verify the request before deleting account-linked data.
7. International processing
MALHAGI and its service providers may process information in countries other than the country where you live. Where applicable, we rely on our providers' security and data-protection mechanisms for those processing activities.
8. Security
We use reasonable technical measures designed to protect account data, including encrypted HTTPS connections, signed authentication sessions, access controls, and managed infrastructure. No internet service can guarantee absolute security.
9. Children's privacy
MALHAGI is a general language-learning service and is not designed to knowingly collect personal information from a child who cannot legally consent to the service on their own. If you are not legally able to agree to this policy, please use MALHAGI only with the involvement of a parent or legal guardian.
10. Changes to this policy
We may update this policy when MALHAGI's features, providers, or legal obligations change. We will post the updated policy on this page and revise the effective date when appropriate.
11. Contact
For privacy questions or data-deletion requests, contact arxdma@gmail.com.