Privacy Policy
Last updated: May 3, 2026
ActuallyWorks ("we," "our," or "us") is committed to protecting the privacy of users of the EllieTalk service ("the Service"). This Privacy Policy explains what information we collect, how we use it, how long we retain it, and your rights regarding your personal information.
1. Information We Collect
1-1. Account Registration & Social Login
We create accounts via the following social login providers:
- LINE: display name, email address (optional), profile photo (optional), LINE user ID
- Kakao: nickname, email address (optional), Kakao account ID
- Google: full name, email address, Google account ID
- Apple: email address (first sign-in only), Apple account ID
1-2. Information Generated During Use
- Uploaded textbook or book images (processed for AI dialogue extraction)
- AI-extracted dialogue text and speaker information
- Roleplay session history (progress, playback duration)
- Language preferences (UI language, learning language)
1-3. Payment & Subscription Information
- Subscription plan, status, and expiry date
- Purchase tokens (issued by Google Play / App Store, used for receipt verification)
- Payment methods such as credit card numbers are handled directly by each store (Google Play, App Store). We do not store them.
We also collect your date of birth (self-declared) when you use the service (at login) and when you start a paid subscription, for age verification. It is storedencrypted (Google Cloud KMS) in a separate secured store apart from your main account data, and is used only to determine eligibility and minor status and to confirm guardian consent.
Children's privacy: EllieTalk is not directed to children under 13 and we do not knowingly collect personal information from children under 13. Age verification at login restricts registration and use by anyone under 13, and if we learn that a user is under 13 we delete their account and related information without undue delay.
Device identifier: When you use AI extraction without signing in, we collect a device identifier (device ID) to prevent duplicate or abusive free usage and cost abuse. The device ID is not stored in its raw form — it is converted into an irreversible hash and used only to enforce a daily usage limit. It is never used for advertising or tracking.
1-4. Device Permissions
| Permission | Purpose | Required |
|---|---|---|
| Camera | Capture textbook photos for AI dialogue extraction | Optional (image upload available as alternative) |
| Microphone | Record user speech during roleplay | Optional (recording feature limited if denied) |
| Notifications | Send learning reminders | Optional |
2. How We Use Your Information
- Providing the Service and authenticating users
- Operating AI dialogue extraction and roleplay features
- Processing and managing subscription payments
- Improving service quality and developing new features
- Responding to customer inquiries
- Fulfilling legal obligations
3. Data Retention & Deletion
- Account deletion: Personal information is deleted promptly upon account deletion.
- Transaction records: Retained for the period required by applicable law.
- Textbook images: Original images are automatically deleted within 30 days of AI extraction.
- Voice recordings: Recordings are automatically deleted once your plan's retention period elapses (Lite 7 days, Standard 30 days). You can also delete individual practice sessions immediately from your library.
4. Third-Party Services
The Service uses the following third-party services. Each service's own privacy policy applies to information shared with them.
| Service | Purpose | Data Shared |
|---|---|---|
| OpenAI | Textbook OCR, AI voice generation | Textbook images, dialogue text |
| Google Firebase | Push notifications | Device token |
| Google Play | Subscription billing & receipt verification | Purchase token |
| App Store | Subscription billing & receipt verification | Transaction ID |
| Google Cloud (Cloud SQL) | Database hosting | Account and usage data |
We do not share your personal information with any other third parties without your consent.
5. Your Rights
You have the right to:
- Request access to your personal information
- Request correction or deletion of your personal information
- Request restriction of processing
- Delete your account directly within the app (immediate deletion)
To exercise these rights, use the in-app settings or contact us by email. We will respond within 5 business days.
6. Data Controller
- Company: ActuallyWorks
- Email: privacy@actuallyworks.net
7. Changes to This Policy
If we make changes to this policy, we will notify you via an in-app notice or email at least 7 days before the changes take effect.