Privacy Policy
1. What this policy covers
This Privacy Policy explains how MALHAGI ("MALHAGI", "we", "us") handles information when you use the MALHAGI Korean-language learning website and its account features.
MALHAGI can be used without signing in. Signing in is optional and is used to unlock account features and synchronize learning progress across devices.
2. Information we handle
Guest use. When you use MALHAGI without signing in, some learning preferences, completion marks, difficult-item marks, and similar practice state may be stored in your browser using local browser storage. This information stays associated with that browser unless you clear it.
Signed-in identity. If you choose Google or Kakao sign-in, the selected provider sends MALHAGI the account information needed to establish your identity. Depending on the provider and your consent, this may include your email address, name, profile image, provider account identifier, and whether the provider considers the email verified. If you choose email sign-in, MALHAGI processes the personal or work email address you provide and sends a one-time code to verify that you control that address.
Learning and profile information. For signed-in users, MALHAGI may store information you choose to save and learning state such as your display name, first and last name, preferred learning level, selected narration voice, completed scenarios, study position, and items or phrase pairs you mark as difficult.
Microphone and voice recordings. If you use the speaking-recording feature, your browser asks for microphone permission. MALHAGI creates the recording locally in your browser for playback. The current MALHAGI service does not upload or store those voice recordings on its server.
Product analytics. MALHAGI uses limited first-party product analytics to understand whether learners are finding the service useful. The analytics system records a pseudonymous actor identifier, coarse session duration, learning-feature categories, and numeric learning counts such as items studied or scenarios completed. For signed-in learners, the analytics identifier is derived from MALHAGI's internal Better Auth user ID rather than the learner's email address. For guests, MALHAGI stores a randomly generated first-party pseudonymous identifier in browser storage. Product analytics does not include your email address, name, exact location, typed answers, voice recordings, OAuth tokens, or the Korean/English learning text you study. You can disable this product analytics on your device at any time using the Usage analytics control in the site footer.
Technical information. Hosting, security, authentication, and analytics infrastructure may automatically process technical information needed to deliver and protect the service, such as IP address, browser or device information, request timestamps, and security-related request data. MALHAGI does not intentionally add IP addresses or full user-agent strings to its product-analytics events.
3. How we use information
We use information to authenticate users who choose to sign in; unlock signed-in features and synchronize learning progress and settings; evaluate aggregate product usage and retention; operate, secure, troubleshoot, and improve MALHAGI; prevent abuse, fraud, unauthorized access, and technical attacks; and comply with applicable legal obligations.
MALHAGI does not sell personal information and does not use account or learning-profile information for targeted advertising.
4. Cookies and local storage
MALHAGI uses essential authentication cookies for signed-in sessions. These cookies keep you signed in securely and are not advertising cookies. Google or Kakao may use their own cookies when you choose their sign-in services, subject to their own policies.
Guest-mode progress and certain interface preferences may be stored in your browser's local storage. If product analytics is enabled, MALHAGI also stores a random guest analytics identifier and your on-device analytics preference in local storage. This identifier is not derived from your email address, IP address, or device fingerprint.
5. Service providers and sharing
MALHAGI relies on service providers to operate the website. These currently include Cloudflare for hosting, networking, security, and database infrastructure, and Better Auth components for authentication within the MALHAGI Worker. If you choose social sign-in, Google or Kakao also processes information as the identity provider you selected. If you choose email-code sign-in, MALHAGI's transactional email provider processes your destination email address and delivery metadata only as needed to deliver the authentication code.
We may disclose information when reasonably necessary to comply with law, enforce our terms, protect users or the service, or respond to valid legal process. We do not disclose personal information to data brokers.
6. Data retention and deletion
Signed-in account and learning data may be retained while your account remains in use and for a reasonable period needed for service operation, security, backup, or legal obligations. Guest data remains in your browser until it is cleared by you or by the browser. Raw product analytics is intended for short-horizon product evaluation; long-term product history should be retained only in aggregate form without learner identifiers.
You may sign out at any time. You may request deletion of MALHAGI account/profile and synchronized learning data by contacting arxdma@gmail.com. We may need to verify the request before deleting account-linked data.
7. International processing
MALHAGI and its service providers may process information in countries other than the country where you live. Where applicable, we rely on our providers' security and data-protection mechanisms for those processing activities.
8. Security
We use reasonable technical measures designed to protect account data, including encrypted HTTPS connections, signed authentication sessions, access controls, and managed infrastructure. No internet service can guarantee absolute security.
9. Children's privacy
MALHAGI is a general language-learning service and is not designed to knowingly collect personal information from a child who cannot legally consent to the service on their own. If you are not legally able to agree to this policy, please use MALHAGI only with the involvement of a parent or legal guardian.
10. Changes to this policy
We may update this policy when MALHAGI's features, providers, or legal obligations change. We will post the updated policy on this page and revise the effective date when appropriate.
11. Contact
For privacy questions or data-deletion requests, contact arxdma@gmail.com.