Privacy Policy

1. Who we are

OROT ("오롯", the "App") is a graded Korean-reading application operated by Aliaksei Krauchanka ("we", "us", the "data controller"). This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it.

If you have any question about this policy or your data, contact us at outsidenessx@gmail.com.

2. What data we collect

We collect only the data needed to run the App and improve it:

• Email address — the address attached to your Apple ID, received from Sign in with Apple if you choose to sign in that way. If you use Apple's Hide My Email, we receive a private relay address instead of your real one.
• Account identifier — a unique id for your account, created the first time you open the App. If you continue without signing in, this is an anonymous id that is not linked to any email address or to your identity.
• Learning data — your reading progress, saved vocabulary and profile settings.
• Usage and device data — product-analytics events and basic technical information about your device (such as device type, operating-system version and app version).
• Subscription status — whether you hold an active subscription.
• Feedback — the content of any feedback or support message you choose to send us.

3. Why we use your data and legal bases

We process your personal data for the following purposes and on the following legal bases:

• To create and operate your account and provide the core reading features — necessary to perform our contract with you.
• To sync your progress and saved vocabulary across sessions and devices — performance of our contract.
• To process subscriptions and payments — performance of our contract and compliance with legal obligations.
• To understand how the App is used and improve it — based on your consent or our legitimate interest in improving the product.
• To respond to your feedback and support requests — our legitimate interest in supporting users.
• To keep the App secure and prevent abuse — our legitimate interest in the security of the service.

4. Third-party services we use

We rely on the following service providers (processors). Each receives only the data needed for its function. Because these providers operate global infrastructure, your data may be stored and processed on servers located outside your country of residence (see International data transfers below).

• Supabase — authentication (Sign in with Apple and anonymous sessions) and storage of your profile, progress and database records.
• Apple — Sign in with Apple, app distribution, and payment processing for subscriptions and one-time purchases through the App Store.
• Cloudflare — delivery of the App's audio files through a content-delivery network. Cloudflare receives your device's IP address when audio is downloaded; no account or learning data is sent to it.
• PostHog — product analytics (a minimal set of usage events), hosted in the European Union.

5. International data transfers

OROT is operated from Belarus, and the providers listed above may process data in other countries, including outside your own. This means your personal data may be subject to cross-border transfer. Where such transfers involve personal data of users in the European Economic Area or the United Kingdom, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses — offered by these providers. Analytics data is held in the European Union, on PostHog's EU-hosted infrastructure.

6. AI-generated audio

The Korean audio in the App is not recorded by human speakers. It was generated ahead of time, in our own production process, using AI text-to-speech technology from ElevenLabs, and ships as ready-made audio files. The App itself never contacts ElevenLabs: no text you read and no data about you leaves the App for speech synthesis.

7. How long we keep your data

• Account and learning data — for as long as your account exists. When you delete your account, this data is deleted or anonymised.
• Analytics data — retained only as long as needed for product analysis, in aggregated or pseudonymised form where possible.
• Feedback and support messages — kept for as long as needed to handle your request and for a reasonable period afterwards.
• Subscription records — retained as required for billing and legal or accounting obligations.

8. Your rights

Depending on where you live — and in particular if you are in the European Economic Area or the United Kingdom under the GDPR — you have the following rights:

• Access — to know what personal data we hold about you.
• Rectification — to correct inaccurate or incomplete data.
• Erasure — to have your personal data deleted ("right to be forgotten").
• Restriction and objection — to limit or object to certain processing.
• Withdrawal of consent — to withdraw consent at any time, without affecting processing carried out beforehand.
• Data portability — to receive your data in a portable, machine-readable format.
• Complaint — to lodge a complaint with your local data-protection supervisory authority.

To exercise any of these rights, contact us at outsidenessx@gmail.com.

9. Deleting your account and data

You can delete your account and the personal data associated with it directly from within the App: open Settings, scroll to the bottom of the page, tap Delete Account and confirm. Deleting your account permanently removes your profile, progress and saved vocabulary, except where we are required to retain certain records by law.

If you cannot access the App, you can also request deletion by emailing outsidenessx@gmail.com from the email address associated with your account, and we will process your request.

10. Children

OROT is intended for users aged 16 and older and is not directed to children under 16. We do not knowingly collect personal data from children under this age. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Cookies and tracking on this website

This website (the OROT landing page) does not use analytics, advertising or other non-essential cookies, and does not track visitors. Only strictly necessary technology required to serve the page is used. If we introduce analytics on the website in the future, we will ask for your consent first where required and update this policy.

12. Contact for privacy requests

For any question about this Privacy Policy or about how your personal data is handled, contact the data controller, Aliaksei Krauchanka, by email at outsidenessx@gmail.com or by post at Pushkina 58, 220073 Minsk, Belarus.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you in the App. Continued use of the App after an update constitutes acceptance of the revised policy.