Privacy Policy
This explains how the operator handles your personal information.
- Effective date
- 2026-10-18
- Version
- 1.0
- Operator
- 가나다라마박사
- Contact
- hellomrma@gmail.com
This English version is a translation for reference. If it differs from the Korean version, the Korean version prevails.
1. General
가나다라마박사 (the "Operator") operates the Neonadeuli service (the "Service"), handles users' personal information with care, and complies with the Personal Information Protection Act of Korea and other applicable laws.
This policy applies to the introduction site and the Service, including the screens after login, watch-along links and translated-chat links. The Operator explains the purposes and methods of processing in this policy and announces any change on this page.
2. Personal information processed and purposes
There is no sign-up: users log in with an account issued by the Operator, and the other person joins through a link without logging in. Only what is needed to provide the Service is processed.
| Category | Items processed | Purpose | How it is collected |
|---|---|---|---|
| Login account | ID, password (kept only as an irreversible hash), login session data (hash of the session value, account type, expiry time). The ID and password hash are kept in the service settings (environment configuration); the database stores only login session data | Identifying users and keeping them logged in | The Operator issues the account; the user enters it at login |
| Interpretation records | Original and translated text of the conversation, conversation details (languages, start and end times, translation usage) | Showing results, providing and downloading records | Generated automatically while using the Service |
| Translated chat | Original and translated messages, sent time, room name (a note of the other person's name) | Providing translated chat | Entered by the user |
| Request-limit records | Hash of the access IP or of the login session (the raw IP is not stored), request counts | Preventing abuse of login attempts, link views, sending messages, sending inquiries and interpretation connections | Generated automatically while using the Service |
| Voice | Audio captured during interpretation (not stored) | Speech recognition | Sent when the user starts interpreting |
| Inquiries | Name, email address, inquiry topic, message, language of the inquiry, time received, and the policy version agreed to | Replying to the inquiry | When the user fills in the contact form or sends an email |
| Introduction site visits | Address of the page viewed, time of visit, referrer, browser and device type, approximate location (country and city) and a cookie identifier. Not collected on the login screen or the interpretation, records and chat screens | Visit statistics and improving the introduction site | Collected automatically by Google Analytics when the introduction site (/ko, /ja, /en) is opened |
3. Retention periods
| Category | Retention period | Notes |
|---|---|---|
| Login account | Until the Operator deletes the account | — |
| Login session records | 30 days after they expire or are revoked | Cleaned up automatically |
| Interpretation records and translated chat | Until the user deletes them | The owner account can delete them directly on the records screen; the other person can ask for deletion by contacting the Operator |
| Request-limit records | 7 days after they are created | Cleaned up automatically (cleanup may be delayed in periods with few requests) |
| Voice | Not stored | — |
| Inquiries | 180 days after the inquiry is handled (until it is handled, before that) | Cleaned up automatically (cleanup may be delayed in periods with few requests). Inquiries received by email are kept until the reply is finished, unless they must be kept, for example in a dispute |
| Introduction site visit records | Under the Google Analytics data retention setting (up to 14 months) | The operator does not separately download or keep them in a form that identifies individuals |
4. Destruction of personal information
When the retention period ends or the purpose is achieved, the information is destroyed without delay.
Electronic files are deleted from the database, and no printed copies are made. Backups may disappear a while later, following the backup cycle of the service provider.
- When a deletion request is received, the information is deleted without delay after verification.
- Items that are cleaned up automatically (login session records, request-limit records and handled inquiries) are deleted by the Service on a regular basis.
5. Provision to third parties
The Operator does not provide users' personal information to third parties, except where the law requires it or an investigative authority requests it through a lawful procedure.
6. Outsourced processing
To run the Service reliably, the Operator entrusts the processing of personal information to the companies below. They process it only within the entrusted purpose.
| Processor | Entrusted task | Items | Storage / processing location |
|---|---|---|---|
| Supabase Inc. | Database hosting | Login session records, interpretation records, translated chat, request-limit records, inquiries | Republic of Korea (Seoul region) |
| Vercel Inc. | Hosting of the service (web application) | Items passed to the server while the Service is used, except voice (transmission path) | Functions run in the Republic of Korea (Seoul region) |
7. Transfer of personal information abroad
To provide the Service's features, personal information is sent abroad and processed as shown below. If you do not want the transfer, see "How to refuse and what happens" below.
| Recipient (contact) | Country | Items transferred | Purpose | When and how | Retention |
|---|---|---|---|---|---|
| OpenAI, L.L.C. (contact: see the privacy policy at openai.com/policies) | United States | Voice (during interpretation), recognized text (for translation) and translated-chat messages | Speech recognition and translation | Sent over the network during interpretation and when a translated-chat message is sent | May be kept after processing under that company's policy |
| Google LLC (contact: see policies.google.com/privacy) | United States and other countries where Google has data centers | Recognized text and translated-chat messages | Translation | Sent over the network each time translation is needed | May be kept after processing under that company's policy |
| Google LLC — Google Analytics (contact: see policies.google.com/privacy) | United States and other countries where Google has data centers | Introduction site visit records (see the table in section 2) | Visit statistics | Sent over the network when the introduction site is opened | Kept, then deleted, under the Google Analytics data retention setting (up to 14 months) |
- If you do not want the transfer, simply do not use interpretation and translated chat. Other features, such as logging in and viewing records, are not affected.
- If you refuse the transfer, live subtitles, two-way interpretation and the translation in translated chat are not available.
- You can refuse the transfer of introduction-site visit records by blocking cookies in your browser or installing the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout). Refusing does not affect your use of the Service.
8. Your rights and how to exercise them
You may at any time ask to view, correct, delete or stop the processing of your personal information.
- Send your request to the contact in this policy. After verifying your identity, the Operator will act within 10 days of receiving the request or tell you why it cannot.
- The owner account can view, download and delete conversation records directly on the records screen.
- The other person (partner account, or user of a watch-along or translated-chat link) can ask by email to view or delete records about themselves.
10. Security measures
- Passwords are kept only as irreversible hashes.
- All communication with the Service is encrypted (TLS).
- The browser never talks to the database directly; every request is checked for login and origin on the server.
- Secret keys for outside services stay on the server, and the browser receives only a connection key that works for a short time (60 seconds by default).
- Watch-along and chat links are signed so they cannot be guessed or forged, and a watch-along link closes automatically one hour after the conversation ends.
- Logins, link views, sending messages and sending inquiries are protected by request limits.
- Logs do not contain conversation content, passwords, tokens or raw IP addresses.
11. Privacy officer and complaints
The Operator acts as the privacy officer, oversees the handling of personal information, and responds to users' questions and complaints.
- Privacy officer: 가나다라마박사
- Contact: hellomrma@gmail.com
12. Remedies for infringement
If you need help with an infringement of your personal information, you can consult or report to the Korean agencies below. The contact details are as of writing and may change.
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center (KISA): dial 118 without an area code (privacy.kisa.or.kr)
- Supreme Prosecutors' Office Cyber Investigation Division: dial 1301 without an area code (www.spo.go.kr)
- National Police Agency Cyber Crime Reporting System: dial 182 without an area code (ecrm.police.go.kr)
13. Children under 14
The Service is not aimed at children under 14, and the Operator does not knowingly collect their personal information. If it comes to light, it is deleted without delay.
14. Changes to this policy
If this policy changes, it is announced on this page 7 days before the effective date, or 30 days before for changes that are unfavorable to users.
Earlier versions can be found in the revision history below.
Revision history
| Version | Effective date | Changes |
|---|---|---|
| 1.0 | 2026-10-18 | First release |