Privacy Policy

Operator

Englisys (the “app”) is operated by sinzjang@gmail.com. Send access, correction, deletion, restriction, and other privacy requests to that address. Include the email you use to sign in so we can match the account.

This website introduces the app and hosts these policies. It has no accounts, sign-in, payments, advertising, or analytics.

Account information

You can sign in with email, Google, or Apple. The same email belongs to one account. If you do not sign in, study records stay on that device.

• Shared: an account ID the app assigns, email, display name, sign-in method (email, Google, or Apple), and plan (Free, Pro, or AI Plus)
• Email sign-in: the password is stored only on the device as a hash and salt. The password and the hash are not uploaded.
• Google sign-in: the Google account identifier (sub), email, display name, and profile image URL that Google provides
• Apple sign-in: the Apple account identifier. Email and name may arrive only on the first consent. That identifier is stored on the device.

We use this to tell accounts apart, attach study records, check subscription access, and match a deletion request to a person. We do not build advertising profiles.

Study records

Wordbook and level choice, the review schedule (days 1, 2, 4, 7, and 14), word progress, review history, study alarms, and app settings are stored first in a local database on the device.

Where sync is available, the account profile (ID, email, display name, sign-in method, Google identifier, profile image URL), study settings, and review sessions may be uploaded to Supabase. If cloud sync fails, the device record remains. Password hashes and Apple identifiers are not part of that sync.

We use these records to continue the review schedule, restore study after a reinstall or on another device, and run the study features.

Microphone, voice, and conversation

Speaking, shadowing, pronunciation practice, and AI conversation need the microphone. A recording is made only to run that feature. We do not use it for advertising or sell it. You can turn the permission off in system settings.

• Speech to text: the recording is sent to OpenAI (Whisper) with a request to transcribe English.
• Spoken AI conversation: microphone audio is sent to the OpenAI Realtime API so the app can listen and reply.
• Read-aloud: the text to be spoken is sent to the OpenAI speech API. Your account email is not attached.
• AI conversation, sentences, listen-and-summarize, and study feedback: the text of what you said, text you typed, and study context are sent to Anthropic.
• Topic research: a topic or briefing category you choose may be sent to Perplexity or OpenAI. Your account email is not attached.
• Pronunciation scoring, only when that feature is on: the recording and the reference sentence are sent to Speechace. When the feature is off, nothing is sent to Speechace.

Transcripts, pronunciation scores, and listening or speaking results may remain on the device. We do not keep a separate archive of raw conversation audio. How long an AI provider keeps a request is governed by that provider’s policy.

Word images

If you search for a picture on a word card, a query built from the word and its meaning may be sent to Unsplash or Pixabay. If you generate a picture, the word and meaning may be sent to the OpenAI image API. Your account email is not attached. The picture you pick is used on that device’s study screen.

Subscriptions and payments

• Englisys Pro, product ID pro_monthly. Auto-renews monthly.
• AI Plus, product ID ai_plus_monthly. Auto-renews monthly.
• Apple App Store or Google Play charges the payment. The app never receives or stores card numbers or bank accounts.
• RevenueCat receives store purchase status and the app account ID to tell Free, Pro, and AI Plus apart.

Price, renewal, cancel, and restore are described in Subscriptions. If you do not cancel at least 24 hours before the current period ends, the next period renews and is charged.

Notifications and device permissions

• Microphone: speaking, shadowing, pronunciation, and spoken AI conversation. iOS and Android ask before use.
• Notifications: study alarms are scheduled on the device. We do not collect remote push tokens and we do not send marketing pushes. Android may ask for notification permission.
• Background audio: listening and shadowing can keep playing after the screen locks. Location is not used.

We do not collect precise location, contacts, your photo library, advertising identifiers (IDFA or Android advertising ID), or cross-app tracking. The app does not include a third-party analytics SDK or an advertising SDK.

Third parties and transfers abroad

The providers below receive only what the feature you use needs. We do not sell personal information and we do not pass it to ad networks. Servers may be outside the Republic of Korea. Transfers use an encrypted connection (HTTPS or WSS).

• Apple and Google: sign-in, App Store and Google Play payments, and subscription status, under each store’s account terms.
• RevenueCat, Inc.: app account ID and subscription status, to check access.
• Supabase: account profile, study settings, and review sessions, for sync and storage.
• OpenAI, L.L.C.: transcription, spoken conversation, speech synthesis, and — only when you ask — topic research and word-image generation.
• Anthropic, PBC: text needed for AI conversation, sentences, listen-and-summarize, and study feedback.
• Perplexity AI: a conversation topic or briefing category you choose.
• Speechace: recording and reference sentence, only while pronunciation scoring is on.
• Unsplash and Pixabay: the search query, only while you look for a word image.

Retention and deletion

The account and study records on a device stay there until you delete the account or uninstall the app. Uninstalling the app deletes that device’s local database.

1. Sign in, then choose Leave on the profile screen.
2. After you confirm, that device deletes the signed-in account, the password hash, and that account’s review sessions, word progress, review history, and app settings.
3. Only email, Google, and Apple accounts can be deleted. The built-in admin session used when nobody is signed in is not a user account and cannot be deleted in the app.
4. Other practice results left on the device, such as speaking or listening logs, are removed from the device when you uninstall the app.

Leaving in the app may not delete the account and study records already stored in Supabase. To delete the cloud copy, email sinzjang@gmail.com from the address on the account with the subject “Englisys account deletion”. After we confirm the request, we delete the cloud copy we hold without undue delay and within 30 days. A provider backup may remain until that backup cycle overwrites it.

Deleting the account does not cancel an App Store or Google Play subscription. Cancel in the store’s subscription settings to stop renewal. Transaction records the store or RevenueCat must keep for payment or tax reasons follow that provider’s retention rules.

The same steps and the data that can remain are written on Delete account.

Security

Passwords are not stored in plain text. Traffic between the app and servers uses an encrypted connection. The default store for study records is your device. Features that need the network (sync, speech conversion, AI conversation, subscription checks) run only while connected.

Children

The app is not directed at children under 14, and we do not knowingly collect their personal information. If we learn that a child under 14 has an account, we delete it. A parent can write to the email above.

Your rights

Under the Personal Information Protection Act of the Republic of Korea you may request access, correction, deletion, or suspension of processing. Users outside Korea may use the same email to request access, correction, deletion, or restriction. If we cannot delete something a store must keep, such as a payment record, we say so in the reply.

Disputes about this policy and the app’s handling of personal information are governed by the law of the Republic of Korea.

Changes

If the data we process or the third parties change, we update the effective date on this page. If we start using information for a purpose that does not match this policy, we say so in the app or on this page.

Subscription terms are also in Subscriptions and Terms of Use.