Malitda
Malitda Privacy Policy
In accordance with the Personal Information Protection Act, Malitda (the "Service") has this Privacy Policy to protect users' personal information and to promptly handle related complaints.
1. Personal information we process and why
| Type | Items | Purpose | When collected |
|---|---|---|---|
| Required | Anonymous user identifier (random ID), authentication token (only a converted value is stored on the server) | Distinguishing users, linking training records | First launch of the app |
| Required | Training records: practiced sentences, the characters recognized from what was spoken, pronunciation scores, training time, the voice you speak during training (original recording), and attempts that were not scored | Pronunciation feedback, choosing the next practice sentences, showing streak days and records | When training |
| Required | Onboarding answers: the situations you want to speak in, how comfortable speaking is, what makes speaking hardest for you (including the history of your answers) | Choosing the starting level and the situations of practice sentences, and suggesting a way of speaking | First use |
| Required | Login and account-linking records: time of the attempt, login method (Kakao, Google, or Apple), result, app version | Troubleshooting login problems and checking for misuse | When signing in or linking an account |
| Optional | Social login identifier (unique ID of a Kakao, Google, or Apple account), token for disconnecting Apple login | Keeping records, transferring records when changing devices | When signing up |
| Optional | Notification time, device notification token (push) | Sending daily practice reminders and service notifications | When allowing notifications |
| Optional | Contents of feedback you send | Improving the service | When sending feedback |
| Automatic | App usage records (screen views, feature use), device type and OS version | Improving the service through usage statistics | While using the app |
| Automatic | App error (crash) records: error details, device type and OS version. Not linked to the user identifier | Finding the cause of app errors and improving stability | When an error occurs in the app |
| Automatic | Website (malitda.junghaebom.com) visit records: pages visited, time and duration of the visit, browser, device and OS information, approximate location of access, and a random identifier stored in the browser to tell visitors apart (Google Analytics cookies _ga, _ga_*) | Improving the service through website visit statistics | When visiting the website |
- The voice you speak during training is saved as the original recording. It is also passed to the processor (Section 4 below) for pronunciation scoring, and is kept in the training records together with the recognized characters and scores.
- Voice, pronunciation status, and what makes speaking hard for you can be regarded as health-related information, so we handle them in line with sensitive information.
- The Service does not diagnose or treat, and does not use collected information to determine illness.
- Usage statistics from the app and the website are collected in the same Google Analytics property. App usage records carry the anonymous user identifier (User-ID), which ties records of the same user together; website visit records do not carry it.
- We do not collect advertising identifiers (IDFA, advertising ID), and we do not track you across other companies' apps or websites.
2. Retention period and destruction
| Item | Retention period |
|---|---|
| Information of registered users | On withdrawal, the login method (authentication token and social account link) is deleted immediately, and the remaining information such as training records, recordings, onboarding answer history, and login records is destroyed 30 days after withdrawal |
| Information of users who did not sign up (anonymous) | Destroyed one year after the last day of use |
| Contents of feedback you send | One year after processing is complete |
- Electronic files are deleted by a method that cannot be recovered.
- Copies remaining in server backups are deleted on a rolling basis after 30 days.
3. Provision to third parties
The Service does not provide users' personal information to third parties. If we later offer a feature that connects you with a rehabilitation therapist, we will tell you the recipient, items, and purpose and obtain separate consent when you request the connection.
4. Processing outsourcing and overseas transfer
| Processor | Outsourced task | Items passed | Where processed |
|---|---|---|---|
| Microsoft (Azure AI Speech) | Pronunciation scoring, generating model pronunciation audio | Voice during training (sent for scoring), practice sentences | Korea Central (koreacentral) region |
| Anthropic (Claude) | Generating the training summary sentence | Practice sentences, recognized characters, scores; user identifiers are not sent | United States (overseas transfer) |
| Google (Firebase) | Sending app notifications, app and website usage analytics, app error (crash) records (Crashlytics) | Device notification token, app usage records, website visit records, app error records (excluding user identifiers) | United States and others (overseas transfer) |
| Kakao, Google, Apple | Social login | Login request (each company returns a unique ID) | According to each company's policy |
Overseas transfer details
| Recipient | Country | Date, time, and method | Items | Purpose | Retention period |
|---|---|---|---|---|---|
| Anthropic, PBC (anthropic.com/legal/privacy) | United States | Sent over the network when training ends and the summary is generated | Practice sentences, recognized characters, scores (excluding user identifiers) | Generating the training summary | For the period under that company's policy after processing |
| Google LLC (policies.google.com/privacy) | United States and others | Sent over the network from time to time while using the app, visiting the website, or when an app error occurs | Device notification token, app usage records, website visit records, app error records (excluding user identifiers) | Sending notifications, usage statistics, finding the cause of app errors | For the period under that company's policy |
- If you do not want overseas transfer, you can turn off notifications in your device settings, and you can stop using the Service and withdraw. No information that could identify you is sent for generating the summary.
- Website visit statistics are not collected if you block or delete cookies in your browser settings or install the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout). Opting out does not affect use of the website.
5. Your rights and how to exercise them
You may at any time request access to, correction of, deletion of, or suspension of processing of your personal information.
- You can withdraw through "My Info > Settings > Delete account" (내 정보 > 설정 > 계정 삭제) in the app. On withdrawal, your login method is deleted immediately, and the remaining information such as training records is completely destroyed after 30 days. A withdrawn account and its records cannot be restored.
- For any other request, contact the privacy officer below and we will handle it without delay.
- Children under 14 are not eligible to use the Service (it is a service for adults).
6. Security measures
- We do not store the original authentication token, only a converted value (SHA-256).
- Data in transit is encrypted (HTTPS, WSS).
7. Privacy officer
- Name: Seonwoo Jung (정선우)
- Contact: contact@junghaebom.com
8. Remedies for infringement of rights
You can seek advice or file a report with the Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118 without an area code), the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), the Supreme Prosecutors' Office Cyber Investigation Division (dial 1301 without an area code), or the National Police Agency Cyber Bureau (ecrm.police.go.kr, dial 182 without an area code).
9. Changes
This policy applies from November 8, 2026. If it changes, we will notify you in the app and on this page starting 7 days before it takes effect (30 days before for important changes to your rights).