PiFl Labs Co., Ltd. ("Company", "we", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and disclose information when you use the mobile application PiPi Words — a Korean-Japanese vocabulary learning app ("App"). For matters not covered here, our general Privacy Policy applies.
1. Purpose of Processing
- App functionality: Vocabulary learning, progress tracking, statistics, notifications, and user preferences
- Advertising: Ad serving via Google AdMob (non-personalized)
- In-app purchases: Premium feature purchases and receipt validation
- App improvement: Soliciting user reviews via native store prompts
- Customer support: Receiving and responding to email inquiries
2. Information We Collect
The App does not require account registration. Depending on your device, region, and consent choices, the App and its included services may process the following information:
| Category | Items | Collection Method |
|---|---|---|
| Advertising and SDK data | Device identifiers (including an advertising ID where available), coarse location inferred from IP address, device info (OS, model, language), ad interactions, and diagnostic data | May be processed by the Google AdMob SDK for advertising; the App requests non-personalized ads |
| In-App Purchases | Purchase receipt, transaction ID | Apple App Store / Google Play billing |
| App Usage Data | Vocabulary study history, learning statistics, preferences, bookmarks | Stored locally on device (no external transmission) |
| Email Inquiries | Email address, name (optional), inquiry content | Direct email submission |
3. Retention Period
- Advertising identifier and ad data: As per Google AdMob policy
- In-app purchase receipts: 5 years (Korean Act on Consumer Protection in Electronic Commerce)
- Local app data: Until the user deletes the App or resets the data
- Email inquiry records: 3 years after resolution
4. Disclosure to Third Parties
Information may be processed by the service providers named in Section 5 for advertising and purchase processing. Other third-party disclosure requires your consent or a legal basis.
5. Processing Entrustment
| Processor | Purpose | Retention |
|---|---|---|
| Google LLC (AdMob) | Mobile ad serving and advertising/SDK data processing described in Section 2 | As described in Google AdMob policy |
| Apple Inc. | iOS in-app purchase processing and review prompts | Until contract termination |
| Google LLC (Google Play) | Android in-app purchase processing and review prompts | Until contract termination |
6. Advertising
The App requests non-personalized ads from Google AdMob. Even non-personalized ads may use device identifiers for frequency capping and aggregated reporting. The SDK may process the advertising and device data described in Section 2.
- iOS users: On iOS, the App asks for App Tracking Transparency (ATT) permission before ads start. If you allow it, the Google AdMob SDK may use your device's advertising identifier (IDFA) for frequency capping, ad measurement and fraud prevention; if you don't, Google says the IDFA is not sent in ad requests. Either way the App requests only non-personalized ads, and you can change your choice at any time in iOS Settings > Privacy & Security > Tracking. Other device identifiers and SDK data may still be processed.
- Android users: You can reset or delete your advertising ID in your device's privacy or ads settings. Menu names may vary by Android version.
For details on Google AdMob's data processing, see the Google Privacy Policy.
7. App Permissions
The App may request the following permissions. Each can be denied, though doing so may limit related functionality.
- Notifications: Daily study reminders and learning streak notifications
- Text-to-Speech: Uses the device's built-in speech synthesis to pronounce vocabulary. No audio data is collected or transmitted.
8. Data Destruction
- Procedure: Unnecessary personal data is destroyed after approval by the Data Protection Officer.
- Method: Electronic files are permanently deleted using non-recoverable methods. Local app data is removed when the user uninstalls the App.
9. Your Rights
- Right to be informed about the processing of your personal data
- Right to consent to and determine the scope of processing
- Right to access and request information about your personal data
- Right to request correction, deletion, suspension, or destruction
- Right to seek redress for damages caused by processing
To exercise these rights, contact us at privacy (at) pifl-labs.com.
10. Security Measures
- Access control and permission management
- SSL/TLS encryption for data in transit
- App data stored locally using platform-native preference storage (no sensitive credentials collected or stored)
- Apple Privacy Manifest (PrivacyInfo.xcprivacy) compliance
11. Children's Privacy
The App is not directed at children under 14. We do not knowingly collect personal data from children under 14. If we become aware of such collection, we will delete it immediately. Parents may request deletion at privacy (at) pifl-labs.com.
12. International Data Transfers
| Recipient | Country | Purpose | Items |
|---|---|---|---|
| Google LLC | United States | Mobile ad serving | Device identifiers, coarse location inferred from IP, device and ad interaction data, diagnostics |
| Apple Inc. | United States | iOS in-app purchases | Purchase receipt, transaction ID |
| Google LLC | United States | Android in-app purchases | Purchase receipt, transaction ID |
13. Data Protection Officer
- Company: PiFl Labs Co., Ltd.
- Email: privacy (at) pifl-labs.com
14. GDPR (European Economic Area)
If you are located in the EEA, you have additional rights under the General Data Protection Regulation, including the right to access, rectify, erase, restrict processing, data portability, and object to processing. Contact us at privacy (at) pifl-labs.com.
15. Changes to this Policy
This Privacy Policy is effective as of April 17, 2026. Any changes will be announced on this page.