Privacy Policy

This policy applies to all users of the EncorePlay web and mobile services.

At sign-up (required)

• Email address
• Name
• Password (stored using one-way hashing)

At sign-up (optional)

• Profile image
• Instrument and category preferences

At payment (Pro subscription)

Payment information (e.g., card number) is processed directly by Stripe, our payment processor. The Company stores only the customer identifier.

Automatically collected during use

• IP address, browser type, access timestamp, User-Agent
• Cookies (session, language preference, etc.)

User-generated content

• Class, lesson, homework, feedback, and message data
• Uploaded files (audio, images)

• Direct input by the user during sign-up
• Automatic generation during service use
• Information provided by OAuth identity providers (social sign-in)

• Service delivery and operation (class, lesson, homework management, notifications)
• Member identification and authentication
• Pro subscription billing and processing
• Security, fraud detection, and abuse prevention
• Customer support and inquiries
• Statistical analysis for service improvement (in non-identifiable form)

Upon account deletion, personal information is deleted immediately. The following information is retained for limited periods as required by law:

• Payment and transaction records: 5 years (E-Commerce Act)
• Records of fraudulent use: 1 year
• Service log records: 3 months (Communications Privacy Act)

The Company does not provide your personal information to third parties without your consent, except as required by law (e.g., warrants from law enforcement).

The Company delegates the processing of personal information to the following providers in order to operate the Service:

• Stripe, Inc.
  Payment processing and subscription management
• Resend
  Email delivery (verification, invitations, notifications)
• Sentry (Functional Software, Inc.)
  Error monitoring and incident response
• Cloudflare, Inc.
  CDN, DNS, DDoS protection, static file storage (R2)
• Neon
  Database hosting

Some of the providers above operate servers outside Korea, which means your personal information may be transferred internationally:

• Stripe, Resend, Sentry: United States
• Cloudflare: Globally distributed
• Neon: Singapore

By agreeing to this policy, you consent to the international transfer of your personal information described above.

You may exercise the following rights regarding your personal information at any time:

• Access your information (in-app Profile page)
• Correction and deletion (in-app Profile page or account deletion)
• Suspension of processing and withdrawal of consent (handled automatically upon account deletion)
• Objection (via the in-app feedback channel)

The Company uses the following cookies:

• NEXT_LOCALE: stores your language preference (1 year)
• better-auth.session_token: maintains your session (7 days)
• Analytics cookies: for service improvement (separate notice will be provided when introduced)

You may disable cookies in your browser settings. Doing so may limit certain Service features.

• End-to-end HTTPS encryption
• Passwords stored with one-way hashing
• Principle of least privilege and access separation
• Intrusion monitoring and audit logging

Name

Eunsol Lee

Role

Representative (concurrent)

Contact

In-app feedback channel (Profile → Help/Contact)

This policy may be revised due to changes in law or the Service. Material changes will be announced in-app or by email at least 7 days before they take effect.

Business Name

(To be filled before official launch)

Representative

Eunsol Lee

Address

(To be filled before official launch)

Email

(To be filled before official launch)

Business Registration Number

(If applicable)