Legal ยท Version 1.0
Privacy Policy
About this policy
This is our first published Privacy Policy (version 1.0). It describes what we collect, why we collect it, and the choices you have. We keep the language plain on purpose.
The Service includes our website, web app, and (as they roll out) the browser extension. We use sign-in providers such as Google and Discord, and we host infrastructure with Hetzner. We do not name a payment processor because we are not running paid billing yet.
This Policy is not legal advice. We aim to be consistent with laws such as the Republic of Korea’s Personal Information Protection Act (PIPA). If you want a Korean-language copy, email privacy@withlemming.com and we will try to provide one. Our Terms of Use apply alongside this Policy.
This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use Korean with Lemming (the “Service”). It also describes your privacy rights and how laws may protect you.
We use personal data to run and improve the Service. By using the Service, you agree to the practices described here. If you do not agree, please stop using the Service.
Interpretation
Capitalised terms have the meanings given below. Those meanings apply whether the term appears in the singular or plural.
Definitions
- Account means the registered profile that lets you access parts of the Service that require sign-in.
- Company (“we”, “us”, “our”) means the party that operates Korean with Lemming and the Service.
- Cookies means small files or similar technologies placed on a Device for authentication, preferences, security, or analytics where we use them.
- Device means any phone, tablet, computer, or other device that can access the Service.
- Extension means the Korean with Lemming browser extension when it is available; it works with pages you choose to analyse and may sync with your Account.
- Personal Data means information relating to an identified or identifiable person.
- Reader means the in-product experience for reading and analysing Korean text (including morphology, dictionary, and related tools).
- Service means the Website, the web application at our app domain, the Extension, and related APIs and features we offer under the Korean with Lemming name.
- Third-Party Social Login means Google, Discord, or any other provider we enable for OAuth sign-in.
- Usage Data means data collected automatically about how the Service is used or how our infrastructure behaves (for example technical logs, approximate quantities processed, or Device metadata).
- Website means https://korean.withlemming.com/ and our other marketing or static pages we control.
- You means the person using the Service, or the organisation on whose behalf that person uses it, as applicable.
Collecting and using Personal Data
Types of data we collect
Account and profile. When you create an Account, we may process:
- Email address
- Display name
- Language or locale preference
- Identifiers from your Third-Party Social Login (provider name and provider-side account id)
If you connect a Third-Party Social Login, we receive whatever profile details that flow allows (commonly name, email, and avatar URL). Extra details you choose to share are processed under this Policy.
Authentication and sessions. We issue session and refresh credentials. Refresh tokens are stored in hashed form; we may store an optional device label.
Reader, vocabulary, and learning data. To provide sync and learning features, we may store:
- Vocabulary entries (for example Korean surface forms and your knowledge state)
- Short excerpts of text related to a lookup or analysis event, and sometimes the page URL or title when a feature records that context
- Content you save through tools such as “mining” or similar features, including source sentences and optional URLs
- Optional client device identifiers used only to support sync
Usage Data. We may automatically collect Usage Data such as IP address, browser type and version, pages or screens viewed, timestamps, diagnostic data, and rough measures of how much text is processed (for example character counts) for reliability and product improvement. Mobile-specific fields may apply if you use a mobile browser.
We do not rely on affiliate coupon codes or paid ad click identifiers in this Policy because we do not describe those practices here. If we add marketing attribution later, we will update this page.
Korean text sent to our systems
When you use the Reader or analysis features, Korean text you select or that the Extension processes may be sent to our servers to return morphology, definitions, or related output. Some requests are handled only for the moment of the request; other interactions create the learning and history records described above so your Account can stay in sync. We design the Service to avoid collecting more text than we need for those purposes.
How we use Personal Data
We may use Personal Data to:
- Provide the Service, including authentication, the Reader, vocabulary sync, and customer support
- Operate and secure our systems, detect abuse, and troubleshoot
- Communicate with you about the Service, security, or legal matters
- Comply with law and enforce our terms
- Improve features and understand aggregate usage patterns
Processors and international processing
We work with vendors for hosting, authentication, email, and analytics (if any). They may process Personal Data on our instructions and only as needed to provide their services.
| Function | Examples |
|---|---|
| Servers, cloud hosting, and databases | Hetzner Online GmbH (Hetzner) |
| Social login | Google LLC, Discord Inc. |
Our own operations and our vendors may be located outside your country, including outside the Republic of Korea. Where required, we use safeguards such as contracts or consent. Using the Service and submitting Personal Data may involve that kind of transfer. Contact us if you need more detail about transfers that affect you.
Retention and deletion
We keep Personal Data only as long as needed for the purposes above or as required by law. When data is no longer needed, we delete or anonymise it, except where a statute requires a longer retention period (for example certain transaction or tax records).
You may request deletion of Personal Data we hold about you by contacting us. We will help, subject to legal exceptions. In-product account deletion, if offered, is another way to ask for removal.
Disclosure of Personal Data
Business transactions. If we are involved in a merger, acquisition, or asset sale, Personal Data may be transferred. We will give notice before it is governed by a different privacy policy.
Law enforcement. We may disclose Personal Data when required by law or by a valid request from public authorities.
Other legal needs. We may disclose Personal Data when we reasonably believe it is necessary to:
- Fulfil a legal obligation
- Protect our rights or property
- Investigate misconduct related to the Service
- Protect users or the public
- Reduce legal risk
We do not sell your Personal Data as a product.
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or export Personal Data, or to object to certain processing. You may also have the right to lodge a complaint with a regulator. To exercise rights, contact us using the details at the end of this Policy.
In Korea, you may contact the Personal Information Infringement Report Center (118), the Personal Information Dispute Mediation Committee, or visit the Personal Information Protection Commission portal.
Security
We protect Personal Data with administrative, technical, and organisational measures suited to the risks involved, including access controls, encryption in transit, and careful handling of credentials and backups.
Children
The Service is not directed at children under 13, and we do not knowingly collect Personal Data from anyone under 13. If you believe a child has given us Personal Data, contact us and we will take steps to delete it.
Cookies
We use Cookies and similar technologies where needed for sign-in, preferences, and security. You can adjust your browser; disabling Cookies may break some features.
Links to other sites
The Service may link to third-party websites. We do not control those sites and are not responsible for their content or policies. Review their privacy policies before you share information with them.
Changes to this Privacy Policy
We may update this Policy from time to time. We will post the new version on this page and change the “Last updated” date. For material changes, we may also email you or show a notice in the Service before the change takes effect. Continued use after the effective date means you accept the updated Policy.
Contact
For questions about this Privacy Policy, data rights requests, or other inquiries related to how we handle information, contact us at privacy@withlemming.com.