Privacy Policy
Last updated: June 30, 2026
This document is a draft, and legal review before publication is recommended.
This policy explains the categories of personal information processed by Preek AI inc. (the “Company”) in connection with SUDA, a voice-based English and Korean conversation-practice application (the “Service”), along with the purposes of use, processing methods, and users’ rights. This document is provided for general information and does not constitute legal advice.
① Categories of Information We Collect
a. Account and Identification Information
- An internal user ID used for identification
- Email address — optionally received from a social login provider (Google, Apple, Kakao)
- Social login provider identifier, and a value distinguishing anonymous/authenticated status
b. Profile and Learning Preferences
- Nickname, avatar color
- Learning language and base (UI) language
- AI coach settings (grammar difficulty, speaking speed, beginner mode, pronunciation feedback, expression suggestions, grammar correction, and similar)
c. Scheduled Calls and Time Zone
- Call schedule information (time, day of week, call type, whether enabled, and similar)
- Time zone (IANA) setting
The Company does not include precise location information such as GPS among its collected items. However, the time zone value set by a user may indirectly suggest the region (country or metropolitan area) the user is in.
d. Social Relationships
- Friend relationship information (request, acceptance, blocked status)
- Group invitation and group membership information
e. Call Records and Transcripts (Text)
- Call session metadata (mode, scenario, call duration, number of utterances, number of participants, timestamps, and similar)
- Call transcript text — the English and Korean conversation exchanged during a call, together with pronunciation and grammar feedback, is recorded in text form.
Because a call transcript includes what a user freely says during a call, personal details that the user themselves mentions may be contained in the text. Original voice (audio) files are not included among items stored (see ⑥ below).
f. Vocabulary and Learning Records
- Review items (word, meaning, example sentence, source, scheduled review date, and similar)
g. Subscription and Payment Information
- Subscription status and purchase history (whether a free trial or subscription is active, and similar) — processed through a subscription-management processor and app store in-app purchases.
- Payment method (card, etc.) information is handled by payment providers such as the Apple App Store / Google Play, and the Company does not include the payment method itself among items it stores.
h. Device and Push Information
- Push token for incoming calls and push token for general notifications
- Platform (iOS/Android) and environment identifier
i. Consent and Age Information
- Whether required consents have been given (terms of service, personal information processing, AI voice processing)
- Whether age verification was passed — the entered date of birth itself is not included among stored items; the device retains only whether the age threshold was passed.
j. Internal Information for Service Operation
- Call/quota/cooldown-related records for managing call connection and notification frequency (server-side operational data not shown directly to users)
- Real-time call room session information
k. Information Stored Locally on the Device
Some settings and usage-support information (whether a free call was used, call cache, review/learning notes, speaking time, daily vocabulary, settings cache, age-pass flag, and similar) is stored only on the user’s device without synchronization.
Information Not Among Collected Items
The Service currently does not include the following among its collected items.
- Original voice (audio) files
- Separate analysis features such as acoustic or emotional characteristics extracted from voice
- The original date-of-birth value
- IP address or precise location information (although the time zone setting may suggest a region)
- Contacts/address book, photos, or profile images
- Data via third-party analytics, tracking, or advertising SDKs
- Health information, behavioral tracking telemetry
② How We Collect Information
- Information a user directly enters or selects during sign-up, login, profile setup, and learning settings
- Standard login information received from social login providers (Google, Apple, Kakao)
- Information generated through use of the Service (calls, learning, schedule settings, subscriptions, and similar)
- Device tokens issued to deliver push notifications
③ Purposes of Use
- Member identification and account management, login and account recovery
- Providing conversation-practice call functionality and scheduling/connecting calls
- Providing learning features that convert speech to text (STT), play synthesized speech (TTS), and assess pronunciation
- Providing review and learning-support features based on call transcripts and learning records
- Providing social features such as friend and group calls
- Managing subscription and payment status and providing paid features
- Sending push notifications (incoming calls, friend requests, and similar)
- Service operation, quality improvement, error diagnosis, and security maintenance
- Confirming whether the age threshold is met and managing consents
④ Third-Party Processing and Cross-Border Transfers
To provide the Service, the Company uses external processors in the categories below. The Company does not sell users’ personal information and is not currently party to arrangements configured to provide personal information for cross-context behavioral advertising purposes. Information is passed to processors to the extent needed to provide the Service.
| Processing Category / Purpose | Information Passed (examples) | Processing Region |
|---|
| Cloud infrastructure (database, authentication, real-time, server functions) | Service data such as profile, call session, transcript, schedule, relationships, tokens | Primarily the U.S. |
| Conversational language model and some speech recognition (dialogue generation, vocabulary extraction, expression correction, learning summaries, some-language STT) | Conversation history, transcript-based vocabulary, learner voice (for processing), context for summaries | U.S. |
| Speech synthesis (generating AI coach / partner voices) | Text to synthesize, language tag, speed, voice identifier | U.S. |
| Real-time speech recognition (English calls) | English voice stream, short-lived authentication token | U.S. |
| Pronunciation assessment (word scores, fluency, pronunciation criteria) | Voice (for processing), reference text, pronunciation criteria settings | Outside the country (depending on regional configuration) |
| Real-time call connection (WebRTC) | Internal user identifier, room identifier, audio tracks, participant metadata | Depending on configuration |
| Subscription and payment management | Subscription status, purchase history, app store transaction identifier | U.S. |
| Push notification delivery | Device token, notification payload (call identification, caller-display information, and similar), environment identifier | U.S. |
| Social login | Standard profile information passed by the provider (email, name, identifier, and similar) | U.S. / Korea |
Some of the above processing may run on external cloud infrastructure. Each processor’s own operational records are handled according to that provider’s terms and service configuration. Processing regions may vary depending on the service configuration, and changes will be reflected in this policy.
Cross-Border Transfer Notice
For users residing in Korea or Japan, because the processors used by the Company are located primarily in the U.S., personal information may be transferred outside the country. The processor list above also serves as the cross-border transfer notice: the categories and purposes of the transferred information are as shown in the table above, and the recipients are the processors corresponding to those processing categories. Retention periods follow the standards in ⑥ below.
⑤ Voice and Audio Data Processing
- Microphone-input voice during a call is streamed to speech-recognition and pronunciation-assessment processors for real-time processing, and after processing the original voice data is not included among retained items and is discarded.
- What is retained after a call ends is the text transcript converted from speech; original voice files are not included among items stored.
- Synthesized speech (AI coach / partner voices) is generated for real-time playback and is not separately stored.
- The Company uses voice features for speech recognition (STT), speech synthesis (TTS), and pronunciation assessment for learning (conversation and pronunciation practice) purposes. It does not include acoustic or emotional features extracted from voice as a separate stored item.
- The Company has not designed voice processing to identify speakers, to identify based on voice characteristics, or to clone a user’s voice. The speaker labels in transcripts indicate conversation structure rather than analysis of voice characteristics.
⑥ Retention and Deletion
- The Company retains personal information while an account remains active, and deletes the relevant information when a related event occurs such as account deletion, when a deletion request is verified, or when consent is withdrawn such that the relevant feature can no longer be operated.
- Upon account deletion, linked information such as profile, learning settings, schedules, friend/group relationships, call sessions and transcripts, call room sessions, and push tokens is deleted together.
- Because original voice files are not included among items stored, a separate retention-period concept does not apply to them.
- Local data stored only on the device is removed from the device when the app is deleted, and some local data may be cleared upon logout.
- Information that must be retained under applicable laws may be kept for the period specified by those laws.
⑦ Users’ Rights and How to Exercise Them
Users may exercise the following rights regarding their personal information.
- Access and correction
- Requests for deletion and suspension of processing
- Withdrawal of consent
- Account deletion
Profile, learning settings, and similar can be reviewed and edited directly within the app, and account deletion can be requested through the in-app settings feature. Other rights can be exercised by contacting the point of contact in ⑪ below, and the Company processes such requests after an identity-verification procedure.
⑧ Children (Age Threshold)
The Service is intended for users who meet the age threshold (at least 14 years old). An age-verification step is provided during sign-up; the entered date of birth is not included among stored items, and only whether the age threshold is met is confirmed. Users who do not meet the threshold are restricted from using the Service.
⑨ Security Measures
The Company applies reasonable safeguards to protect personal information. These include access-permission controls, protection of data in transit, and management of authentication information.
⑩ Cookies, Tracking Technologies, and De-identified / Aggregate Information
The Service currently does not use third-party analytics, tracking, or advertising SDKs, and does not operate separate behavioral tracking telemetry. If an error-diagnosis tool is introduced, it will be operated based on user consent and reflected in this policy.
The Company may generate and use de-identified, aggregate information in a form that cannot identify individuals, for service-quality improvement and statistical purposes. Such de-identified, aggregate information may be retained or used even after personal information is deleted.
⑪ Country / Region-Specific Notices
The Service provides notice of the rights users may have (access, correction, deletion, withdrawal of consent, and similar) under the applicable laws of their region of residence. The cross-border transfer notice in ④ above may apply to users residing in Korea and Japan.
U.S. Residents (U.S. State Privacy Rights)
Depending on your state of residence (for example, California and certain other U.S. states), you may have the right to access or know the personal information the Company holds about you, to request its deletion or correction, to obtain a copy in a portable format, and to opt out of any “sale” or “sharing” of personal information. The Company does not sell personal information and does not share it for cross-context behavioral advertising, and does not use personal information for targeted advertising or for profiling that produces legal or similarly significant effects. You will not receive discriminatory treatment for exercising these rights. To submit a request, use the in-app options or contact support@preekai.com; requests are verified before they are acted on, and an authorized agent may be used where permitted by applicable law.
EEA / UK and Certain Regions
The current launch scope of this Service does not include the European Economic Area (EEA) / UK, or certain countries with a higher digital-consent age threshold. If the Service is expanded to those regions, related notices and procedures — such as the legal basis for processing, user rights, and safeguards for cross-border transfers — will be reflected in this policy.
Japan Paid Subscriptions
For business information and transaction conditions regarding paid subscriptions in Japan, please refer to the Notation Based on the Specified Commercial Transactions Act.
This notice describes current product availability and processing status, and is not intended as a legal conclusion about any specific law.
⑫ Change Notices and Inquiries
If the content of this policy changes, the Company will give notice of the changes within the Service or by a method the Company designates, and for significant changes it may provide separate notice by an appropriate method.