BeepoTalkBeepoTalk Privacy Policy
1. Who we are
BeepoTalk ("the app") is operated by Mediaville Co., Ltd. (미디어빌 주식회사), publishing as HedgieLabs ("we", "us"), business registration number 377-81-01591 (mail-order sales registration 2025-서울서초-3911), 302, 41-5 Dongsan-ro 6-gil, Seocho-gu, Seoul 06595, Republic of Korea. Contact: support@hedgielabs.com.
This policy follows the Korean Personal Information Protection Act (PIPA) and explains what we collect, why, who receives it, how long we keep it, and your rights.
2. Information we collect
You give us
- Account: the identifier and email address supplied by Sign in with Apple (this may be a private relay address) or Google Sign-In.
- Profile (required): display name, date of birth (to confirm you are 18 or older; never shown to others), gender, country, native and learning languages, at least one profile photo, time zone.
- Profile (optional): bio, tagline, interests, personality type (MBTI), what you are looking for, additional photos.
- Content: chat messages, corrections, voice notes, chat photos, reactions, saved phrases, Moments posts, photos and comments, likes.
- Verification (optional): a selfie showing a requested gesture, reviewed by a person and deleted within one day after review.
- Safety: reports you file (reason, optional details) and blocks.
- Support: emails you send us.
Created as you use the app
- Connect and skip choices, conversations started, follows, profile views (who-viewed-me only if you turn it on), activity notifications, practice streaks, last-active time, daily counts of translation and correction use, and simple feature-usage events (for example "voice note replayed"; never message content).
- Your consent record for translation and correction.
- Device: push notification token, platform (iOS/Android), an install identifier.
- Subscription status: product, purchase and expiry dates, and store transaction identifier, received from Apple through RevenueCat. We never receive card or payment details.
- Server logs kept by our hosting provider, including IP address, for security and troubleshooting.
Collected by our advertising partner
- For users who see ads (not Pro), Google AdMob collects the device advertising identifier (only if you allow tracking in the iOS prompt), IP address (used to estimate an approximate location), device information, the ads shown and your interactions with them, and crash and performance data about the ad software. See section 6.
We do not collect precise location, contacts, health data or browsing history.
3. Why we use it
- Create and secure your account; confirm you are 18 or older.
- Show your profile to language partners and rank discovery by complementary languages.
- Deliver messages, voice notes, photos, corrections and notifications.
- Translation and grammar correction when you ask for them (section 5).
- Safety: filter harmful text, review reports and verification selfies, block and ban abusive users.
- Provide and manage the Pro subscription.
- Show ads that keep the free version free, and measure them (section 6).
- Keep the service working: fraud and abuse prevention, fair-use limits, troubleshooting, and understanding which features are used.
- Answer support requests and meet legal obligations.
4. How long we keep it, and how we destroy it
| Information | Kept | On account deletion |
|---|---|---|
| Profile, photos, languages, interests, preferences, streaks, follows, activity, profile views, consent records, usage counts and events, push tokens, subscription records in our database | While your account exists | Erased immediately; photo files are removed by a daily cleanup within about 24 hours. |
| Your chat messages, voice notes and chat photos | While your account exists | Replaced immediately with an empty "removed" marker in your partners' chats; quotes of your words inside corrections are cleared; media files removed by the daily cleanup. |
| Moments posts, photos, comments and likes | Until you delete them or your account | Erased immediately. |
| Verification selfie | Until reviewed | Deleted within one day after the review. |
| Reports and blocks involving you, including a snapshot of reported content | Kept after deletion to protect other users and handle disputes, for 1 year after the report is resolved | Retained for that period, then destroyed. |
| Sign-in identity | While your account exists | Linked Apple/Google identities and sessions removed within about an hour; the sign-in record is scrubbed. |
| Hosting server logs | About 1 day | Expire on the provider's schedule. |
| Records we must keep by law (for example login records under the Protection of Communications Secrets Act, 3 months) | For the legally required period | Kept separately for that period only. |
Electronic files are deleted in a way that cannot be restored. We do not keep paper records. A deleted account leaves only a content-free placeholder so your partners' chat history stays consistent; it contains no name, photo, birth date or other profile data.
5. Service providers and transfers outside Korea
We use the following providers to run the app. They process information on our instructions (outsourced processing) unless noted. Several are located outside Korea, so using the app involves transferring information abroad. Transfers happen over encrypted connections (HTTPS/TLS) at the time the feature is used.
| Recipient (country) | Information | Purpose | When and how | Retention by recipient |
|---|---|---|---|---|
| Supabase, Inc. (USA); data stored on Amazon Web Services, Seoul region (Korea) | All account, profile, content and service data listed in section 2 | Database, file storage, server functions, sign-in | Continuously while you use the app | Until deleted under section 4 |
| Microsoft Corporation, Azure AI Translator (processed in the USA). Contact: aka.ms/privacyresponse | The text of a message or post you choose to translate | Translation | Each time you tap Translate | Not stored by Microsoft after the translation is returned |
| Anthropic, PBC (USA). Contact: privacy@anthropic.com | The text you ask to correct | Grammar correction | Each time you tap Correct | Not used to train models; may be kept up to 30 days for abuse monitoring, then deleted. Grammar correction is not offered at launch; this row applies only once it is turned on |
| RevenueCat, Inc. (USA). Contact: privacy@revenuecat.com | Your BeepoTalk user ID, subscription product, purchase and expiry dates, store transaction ID, country/currency | Subscription management and restore | When you open the Pro screen, buy or restore, and when Apple reports a renewal | While the subscription record is needed, under RevenueCat's terms |
| 650 Industries, Inc. (Expo) (USA) | Push token and a generic notification with no message content | Delivering push notifications through Apple (APNs) or Google (FCM) | When you receive a notification | Transient delivery only |
| Apple Inc. (USA) | Sign in with Apple identity; push delivery; in-app purchase | Sign-in, notifications, payments | When you sign in, receive a notification or buy | Under Apple's privacy policy (Apple acts as an independent controller for App Store payments) |
| Google LLC (USA) | Google Sign-In identity | Sign-in | When you sign in with Google | Under Google's privacy policy |
Translation and correction are optional. We ask for your consent once (at sign-up, or the first time you use the feature). If you do not consent, or you withdraw consent by emailing us, translation and correction are not available to you, and your messages will not be translated for your partners; everything else in the app keeps working. For a private message, both the person asking and the person who wrote it must have consented.
6. Advertising and the advertising identifier
Free users see ads labeled "Sponsored", served by Google AdMob (Google LLC, USA). Pro users see no ads and the ad software is not loaded for them.
- Information: advertising identifier (IDFA) only if you allow tracking, IP address and approximate location derived from it, device information, ads shown and interactions, ad software crash and performance data.
- Purpose: choosing and measuring ads, preventing ad fraud.
- Recipient: Google LLC, which uses it under its own policies: policies.google.com/technologies/ads.
- Your choices: iOS asks whether BeepoTalk may track you before any ad is requested. If you choose "Ask App Not to Track", the identifier is not shared and you see non-personalized ads. You can change this anytime in iPhone Settings, Privacy & Security, Tracking. Pro removes ads entirely.
We do not sell personal information and do not share it with data brokers.
7. Your rights
You can ask to access, correct, delete or suspend processing of your personal information, and withdraw consent, at any time:
- Edit your profile and photos in the app (Me tab).
- Delete your account in the app (Me, Delete account). See Support if you cannot open the app.
- Request a copy of your data: Me, Support & legal, Request a copy of my data, or email support@hedgielabs.com.
We respond within 10 days. We may need to confirm it is you. A legal representative may act for you with a power of attorney. Some requests may be limited where the law requires us to keep information or where another person's rights would be harmed.
8. Automated processing
Discovery ordering and the text filter run automatically. They do not make decisions with legal or similarly significant effects; account bans are decided by a person. You can ask us to explain or review any decision by emailing us.
9. Security
Encryption in transit; row-level access controls on every table; private storage for voice notes, chat photos and selfies; sign-in tokens stored in the device's secure storage; access to production data limited to authorized staff; names masked and message content excluded from logs.
10. Children
BeepoTalk is for adults 18 and over. We check age at sign-up and do not knowingly collect information from anyone under 18. If we learn an account belongs to someone under 18, we delete it. Report a suspected minor with the in-app report (reason "underage") or by email.
11. Privacy officer
Privacy officer (개인정보 보호책임자): Kyungse Park, CEO, email support@hedgielabs.com, phone +82-70-4513-2980.
For help beyond us: Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), Supreme Prosecutors' Office Cyber Investigation (spo.go.kr, 1301), Korean National Police Agency Cyber Bureau (ecrm.police.go.kr, 182).
12. Changes
We will announce changes on this page and in the app at least 7 days before they take effect (30 days for changes that reduce your rights).