Privacy Policy

Last updated: 22 July 2026

HanSups ("we", "us") operates the website hansups.com, the email list you can join from it, and the HanSups app at app.hansups.com. This policy explains what personal data we collect, why we collect it, how long we keep it, and who processes it. It also explains the rights you have under the Republic of Korea's Personal Information Protection Act (PIPA) and, where applicable, the EU/UK GDPR.

1. What we collect

  • Email list: the email address you submit, a coarse language preference (e.g. en, vi), which form you used, and a timestamp. If you opt out, we also keep the date you did so, precisely so we do not email you again.
  • The app (app.hansups.com): when you create an account we hold your email address and, if you sign in with Kakao, Google or Facebook, the name and email that provider returns. As you study we record your diagnostic and mock-exam attempts and their answers, your review history and level estimate, your chosen study language and exam date, and your usage of the AI tutor. This is the study record the app needs to work. It is yours, and you can ask us to delete it.
  • Free practice test: the test and your score run entirely in your browser and are not sent to us. When you choose to unlock your detailed per-question review, we send a one-time code to your email and record that the email was verified.
  • Contact: if you email us, we receive whatever you include in that message.
  • We do not collect names, payment data, precise location, or device identifiers on this site, and we run no advertising trackers.
  • Analytics: we use Plausible Analytics, a privacy-first, cookieless tool. It measures aggregate traffic and events only. It sets no cookies and stores no personal data, no IP addresses, and no cross-site identifiers. We use it to understand which parts of the site are working, never to track individuals.

2. Why we use it (purpose & legal basis)

We use it to contact you about the HanSups launch and related updates, to measure demand by region and language, and to run the practice-test email verification. Legal basis: your consent (given when you submit the form), which you may withdraw at any time. We do not sell or rent your data and do not use it for automated decision-making.

3. Processors we use

  • Supabase: database storage of the waitlist (row-level security: the public site can add an entry but cannot read the list).
  • Resend: sends the practice-test verification email.
  • Cloudflare: website hosting (Cloudflare Pages), the serverless functions that issue verification codes (Cloudflare Pages Functions), DNS, and email routing for our @hansups.com addresses.
  • Plausible Analytics: privacy-first, cookieless site analytics, hosted in the EU. Aggregate traffic and events only; no cookies, no personal data, no IP addresses.
  • YouTube (Google): the app tour video on the home page and on /watch. We use the youtube-nocookie.com player, which does not set advertising cookies, but loading the video does send your IP address and browser details to Google. The video on the home page starts automatically and muted, so this happens on every visit to that page.

These providers process data on our behalf under their own security and data-processing terms.

4. International transfer

The providers above may process data on servers outside the Republic of Korea (e.g. in the United States or the EU). Our analytics provider, Plausible, is hosted entirely in the EU. Where PIPA or the GDPR requires it, we rely on your consent and the providers' standard contractual protections for such transfers.

5. Retention

We keep email-list data for 24 months from your last contact with us, or until you ask us to delete it, or until you opt out, whichever comes first. You can opt out at any time by replying to any email from us or writing to [email protected]. We record the opt-out and stop sending. Account and study data in the app is kept while your account exists and is deleted with it. Verification codes are short-lived (they expire within minutes and are not stored in readable form).

6. Cookies & local storage

No tracking cookies. The practice page stores a few small pieces of information in your browser's localStorage: your email address (so we can prefill it on return), a note that you have unlocked your detailed review, and your most recent test results (so we can show them again when you click the verification link). These stay in your browser and are never read by any third party.

7. Your rights

Under PIPA and the GDPR you may request access to, correction of, deletion of, or a copy of your personal data, and you may withdraw consent or object to processing. To exercise any right, email [email protected]. We respond without undue delay. You may also lodge a complaint with the Korea Personal Information Protection Commission (PIPC) or your local supervisory authority.

8. Children

The site is not directed to children under 14. We do not knowingly collect their data. Contact us if you believe we have.

9. Contact & changes

Privacy contact: [email protected]. We will update this page as the product develops. The "last updated" date will change.

This policy is provided in good faith and is not legal advice. A qualified lawyer will review it and expand it to cover things like payments and in-app data before paid launch.