Privacy Policy

1. Who We Are

Levly ("we", "our", or "us") operates the Levly Korean study application at levly.app. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Personal Information Protection Act of Korea (PIPA, 개인정보 보호법) and other applicable laws.

Privacy Officer (개인정보 보호책임자): N. Fajardo · hello@levly.app
As required under Article 31 of PIPA, a Privacy Officer has been formally designated and is responsible for overseeing all personal data processing activities.

2. Information We Collect and Why

We collect only the information necessary to provide the Service. The table below describes each category, its purpose, legal basis, and how long we keep it.

We do not collect sensitive personal information (민감정보) as defined under PIPA Article 23.

3. Consent and How to Withdraw It

When you create an account, we ask for your explicit consent to collect and use your personal information for the purposes listed above. Consent is given by ticking the consent checkbox during sign-up. It is never pre-checked.

You may withdraw your consent at any time by deleting your account or contacting us at hello@levly.app. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Where we are legally required to retain certain data (e.g. payment records for tax purposes), we will retain only that data for the minimum required period.

4. How We Use Your Information

We use your information only for the purposes stated at collection: (a) to provide and personalise the Service; (b) to save and display your study progress; (c) to process purchases and grant access to paid content; and (d) to send transactional communications such as account confirmations.

We do not sell your personal information. We do not use your data for advertising or profiling purposes.

5. Cross-Border Data Transfers

Your data is processed using the following third-party services, which may store or process data outside of Korea. By creating an account, you consent to these transfers.

Transfers to the United States are made under standard contractual clauses or equivalent safeguards as recognised by the Personal Information Protection Commission (PIPC).

6. Cookies and Automatic Collection Tools

Levly uses session cookies solely to keep you logged in during an active session. These cookies expire when you close your browser.

We also use Vercel Analytics, a privacy-respecting analytics tool, to collect aggregated page view data. This helps us understand which parts of Levly are being used so we can improve the product. Vercel Analytics does not track you across other websites, does not build individual user profiles, and does not share data with advertisers.

We do not use advertising cookies, cross-site tracking cookies, or third-party analytics that profile you individually. You can disable cookies in your browser settings at any time; doing so may prevent you from staying logged in to the Service.

7. Your Rights Under PIPA

As a data subject under PIPA, you have the following rights, which you may exercise at any time by contacting us at hello@levly.app:

We will respond to all rights requests within 10 days. Account deletion requests will be processed within 30 days, after which your data will be permanently destroyed except where retention is legally required.

8. Data Security and Breach Notification

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. Access to personal data is restricted to the Privacy Officer and authorised service providers listed in Section 5.

In the event of a data breach, we will notify affected users within 72 hours of becoming aware of the breach, in accordance with PIPA Article 34. If the breach involves 1,000 or more data subjects, or results from unauthorised external access, we will also notify the PIPC within the same 72-hour window.

9. Children's Privacy

The Service is not directed at persons under the age of 14. Under PIPA, the collection of personal information from persons under 14 requires the consent of a legal guardian. We do not knowingly collect personal information from anyone under 14. If you believe a child under 14 has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending an email notification. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.