Privacy policy

1. Purpose

This notice explains what personal data Samling (the "company") handles while providing Samling Football English, and how.

2. What is collected

• When the app is first opened — device identifier, app version, operating system, time zone, language
• When an account is linked — email address, name or nickname, the social provider's identifier
• At the age check — birth year
• For a user under 14 — the guardian's email address and the time consent was given
• While learning — lesson progress, right and wrong answers, time spent, streak, experience points
• When you contact us — your message and the contact details needed to answer it
• Through the website's enquiry forms (team enquiry, contact us) — name, email address, academy or club name, number of players, your message, and whether you want news

Korean resident registration numbers are never collected.

3. Why it is used

• To store progress so learning can continue where it stopped
• To identify an account so progress follows you to another device
• To confirm a guardian's consent for a user under 14
• To find faults and improve quality
• To answer enquiries
• To send news and notices to users who have agreed to receive them

4. How long it is kept

• Account data: until the account is deleted, and destroyed within 48 hours of the request.
• Learning records: on deletion they are made unidentifiable and kept for statistics only.
• Guardian consent records: 5 years from the date of consent, as Korean law requires.
• Enquiries: 1 year, then destroyed without delay.

5. Users under 14

Personal data of a user under 14 is processed only after a legal guardian has consented. The guardian may withdraw consent at any time and ask to see, correct or delete the child's data.

6. Sharing and processors

The company does not sell personal data or give it to third parties. It is passed only to the processors the service needs:

• Google Cloud (Google LLC) — servers, the database and file storage, kept in Korea (the Seoul region).
• Firebase (Google LLC) — sign-in and account identification (Firebase Authentication) and learning reminders (Firebase Cloud Messaging).
• Google Analytics (Google LLC) — usage statistics for the app and the website: in the app only if you agreed to receive marketing information, on the website only if you accepted the cookie notice.
• Sentry (Functional Software, Inc.) — error reporting for the app and the servers.
• Resend (Resend, Inc.) — email delivery (the guardian consent email and service notices).
• Kakao and Google — confirming a sign-in with a Kakao or Google account.

7. Transfers outside Korea

The processors below handle personal data outside Korea. Data is sent over an encrypted connection (HTTPS) while the service is used, and none of them may use it beyond the purpose given.

• Firebase (Google LLC, United States) — account identifier, email address, Kakao or Google account identifier, sign-in times, the device token for notifications. Purpose: sign-in, account identification, notifications. Kept until the account is deleted.
• Google Analytics (Google LLC, United States) — app and website usage, device information, a pseudonymous identifier. Purpose: usage statistics. Kept for 14 months (the retention setting). Not collected without your agreement.
• Sentry (Functional Software, Inc., United States) — error details, device model, operating system, app version, a pseudonymous identifier. Purpose: fixing faults. Kept for 90 days (depends on the plan).
• Resend (Resend, Inc., United States) — the recipient's email address (a guardian's included) and the message. Purpose: sending email. Kept for 30 days after sending (depends on the plan).

If you do not want your data transferred abroad, you can leave the account unlinked or delete it. Sign-in and the guardian consent email cannot be provided without these processors.

8. Your rights

You and, for a child, the legal guardian may ask at any time to see, correct or delete personal data, or to stop its processing — from the app's settings screen or at the address below.

9. Destruction

Personal data is destroyed without delay once its retention period ends or its purpose is over. Electronic files are deleted so that they cannot be recovered.

10. Data protection officer

support@samling.ai