Stocky (the "Service") values your privacy and complies with applicable laws. This Policy explains what information the Service collects and why, and how it is stored, used, and deleted.
1. Personal Information We Collect
The Service collects the following information when you sign up and use the Service.
- Social login account information — email address, social account display name, and profile photo (provided when you sign in with Google. Sign in with Apple provides your email and name only the first time; after that, only your Apple unique identifier is used.)
- Profile information — nickname (entered by you during sign-up onboarding) and gender (optional. You can sign up and use the Service without providing it.)
- Service usage data — your watchlist, learning and viewing history, lesson completion records, and access and usage logs
- Device and service usage analytics — device model, OS and app version, and records of key in-app activities (sign-up, starting and completing lessons, viewing briefings, tapping notifications), collected automatically for usage statistics
- Push notification token — if you agree to receive notifications, a device token used to send them
- Consent records — the date and time you agreed to the Terms of Service, this Privacy Policy, the age requirement, and marketing messages
2. Why We Collect and Use Personal Information
- To identify and authenticate members through social login
- To provide personalized learning content based on your watchlist and learning activity
- To improve service quality and develop new features through usage statistics
- To send service notices and, only if you have agreed, notifications and marketing information
3. How Long We Keep Personal Information
We keep your personal information for as long as you use the Service and delete it without delay when you delete your account.
However, to prevent abuse through repeated sign-up after account deletion, we keep a de-identified deletion record (an encrypted hash value) for up to 180 days and then delete it.
Information that must be retained under applicable laws is kept for the period required by those laws.
4. How We Delete Personal Information
When the retention period ends or the purpose of processing has been achieved, the Service deletes the relevant personal information without delay.
- Procedure — We identify the personal information to be deleted and delete it. Information that must be kept under applicable laws is stored separately and deleted when the required retention period ends.
- Method — Electronic files are deleted using technical methods that prevent recovery or reproduction. Paper documents are shredded or incinerated.
5. Sharing with Third Parties and Outsourced Processing
The Service does not provide your personal information to outside parties without your consent. However, to operate the Service reliably, we outsource the following tasks. These providers process personal information securely in accordance with their contracts and applicable laws.
- Cloud infrastructure — Amazon Web Services (data storage and server hosting. Data is stored in the Seoul region, South Korea.)
- AI processing — Google LLC (Gemini) (processing text you enter, such as chatbot questions); OpenAI (text analysis of chatbot search queries for search)
- Push notifications — Expo; Apple Push Notification service
- Usage analytics — Amplitude, Inc. (statistical analysis of key in-app activity records)
6. International Transfer of Personal Information
To generate chatbot responses, send push notifications, and analyze service usage, the Service outsources the processing of personal information to the overseas providers below. Transfers take place at the time you use each feature, over encrypted connections (TLS).
| Recipient (policy) | Country | Information transferred | When and how | Purpose and retention |
|---|---|---|---|---|
| Google LLC (policies.google.com) | USA | Chatbot questions and conversations; context of the screen you are learning from | In real time when you use the chatbot | Generating AI chatbot responses. Deleted under the provider's policy once the purpose is achieved |
| OpenAI, L.L.C. (openai.com/policies) | USA | Chatbot search queries (text you enter) | In real time when you use chatbot search | Creating text analysis (embeddings) for search. Deleted under the provider's policy once the purpose is achieved |
| Expo (650 Industries, Inc.) (expo.dev/privacy) | USA | Push notification token; nickname (shown in notification text) | In real time when a notification is sent | Delivering push notifications. Deleted under the provider's policy once delivered |
| Apple Inc. (apple.com/legal/privacy) | USA | Push notification token | In real time when a notification is sent | Delivering push notifications to iOS devices. Deleted under the provider's policy once delivered |
| Amplitude, Inc. (amplitude.com/privacy) | USA | Member number (internal identifier); key in-app activity records (sign-up, starting and completing lessons, viewing briefings, tapping notifications); device model; OS and app version | In real time while you use the app | Usage statistics and quality improvement. Deleted when you delete your account or refuse the transfer |
You may refuse the international transfer of your personal information. If you do not use the chatbot or do not agree to push notifications, that information is not transferred. For transfers for usage analytics, we will stop the transfer if you request it using the contact in Section 11. If you refuse transfers for the chatbot or push notifications, you will not be able to use those features.
7. Cookies and Similar Technologies
The Service uses cookies only for authentication, to keep you signed in. It does not use cookies for advertising or behavioral analysis. You can refuse cookies in your browser settings, but features that require sign-in may then be unavailable.
8. How We Protect Personal Information
- Encrypted storage of key personal information and encryption in transit
- Least-privilege access to personal information and access controls
- Security systems to guard against external intrusion
9. Your Rights and How to Exercise Them
You may request access to, correction of, deletion of, or suspension of processing of your personal information at any time. You can view and edit your information directly in the app's Settings, delete it by deleting your account, or email us at the contact in Section 11. We will tell you the result within 10 days of receiving your request.
You may also exercise these rights through a legal representative or an authorized agent. In that case, documents proving the authorization must be submitted. You may withdraw consent to marketing messages at any time.
10. Children's Personal Information (Under 14)
The Service is intended for users aged 14 and older and does not allow children under 14 to sign up. During sign-up, users confirm that they are 14 or older, and the date and time of that confirmation is kept as a consent record. If we learn that personal information of a child under 14 has been collected, we will delete it without delay.
11. Privacy Officer and Contact
For questions, complaints, or remedies regarding the processing of personal information, please contact:
Privacy Officer: Junhwan Seok
Email: junhwan@stocky.studio
12. Remedies for Infringement of Rights
If you need to report or seek advice about a privacy violation, you may contact the following organizations (all in South Korea):
- Personal Information Infringement Report Center — 118 (in Korea, no area code), privacy.kr
- Personal Information Dispute Mediation Committee — 1833-6972, kopico.go.kr
- Supreme Prosecutors' Office — 1301 (in Korea, no area code), spo.go.kr
- Korean National Police Agency — 182 (in Korea, no area code), ecrm.police.go.kr
13. Changes to This Policy
If this Privacy Policy is added to, removed from, or modified, we will post the changes on this page 7 days before they take effect (30 days before, for changes that significantly affect your rights).
- July 24, 2026 — Established
- July 28, 2026 — Revised to add details on deletion procedures, international transfers, cookies, and remedies
- August 5, 2026 — Revised to update collected information, outsourced processing, and international transfers following the introduction of a usage analytics tool
- August 7, 2026 — Stopped collecting date of birth; made gender optional (reduced collected information)
Supplementary Notice for Users in the United States
A. Children's Privacy (Under 13)
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Because sign-up requires users to confirm they are 14 or older (see Section 10), children under 13 cannot create an account. If you believe a child under 13 has provided us with personal information, please contact us at junhwan@stocky.studio and we will delete it.
B. Where Your Information Is Stored
The Service is operated from South Korea. Account and usage data are stored on Amazon Web Services servers in the Seoul region, South Korea. Some processing is performed by the US-based providers listed in Sections 5 and 6. By using the Service, you understand that your information will be transferred to and processed in South Korea, where data protection laws may differ from those in your state.
C. Do Not Track and Global Privacy Control
The Service does not track users across third-party apps or websites, and does not sell or share personal information for advertising, so it does not respond differently to Do Not Track or Global Privacy Control signals.