Privacy Policy
In short
- When you send a recording for speaking practice, our server turns it into text, writes your feedback and does not keep the recording. The transcript and feedback are deleted automatically after 30 days.
- The confidence coach stores only the options you pick and how each task went. Notes you write stay on your phone.
- There are no ads, we do not track you across other companies’ apps or websites, and we never sell your information.
- You can delete your account at any time: Me tab → Delete account.
This policy explains what the iOS app Stand Tall (the “app”) collects and how it is used. The app is made and run by CHANG HWAN JUNG, an individual developer based in South Korea (“we”, “us”), and we handle personal information in line with Korea’s Personal Information Protection Act.
1. Why we use your information
- Your account — guest (anonymous), Google, Apple or email sign-in, telling accounts apart, your nickname, and keeping your history when you switch phones.
- The confidence coach — a goal, weekly plan and daily task based on your onboarding answers, a log of how each task went, and a weekly review.
- Feedback on your speaking — transcribing recordings, analysing how you spoke and giving feedback, example rewrites with audio, prep questions, organising your thoughts, questions to the coach, and conversation practice.
- Paid features — checking your subscription or free trial, restoring purchases, and daily limits per feature.
- Keeping the app working — usage statistics, crash reports and preventing abuse.
- Where you found us — which campaign link or Apple Search Ads campaign led to your install.
- Notifications — practice reminders and a reminder the day before a free trial ends.
- Answering your messages.
2. What we collect
| Type | Details |
|---|---|
| Account | Firebase user ID, sign-in method, sign-up and last sign-in times. If you sign in with Google, Apple or email: your email address and the name and profile picture link that account provides (with Apple’s Hide My Email, the relay address Apple creates). |
| Nickname | The nickname you choose. |
| Confidence coach | Your goal, the options you pick during onboarding (situation, recent experience, what makes it hard, the action you want to take, how much pressure you feel starting out, minutes per day), your current task and plan progress, each task’s result and what was hard (picked from a list), the length of your note, and the date. What you write yourself — your first-experience sentence and your notes — is never sent to our server. |
| Recorded speaking practice | The recording (processed only while it is analysed, never stored on our server), the transcript, the analysis and feedback, and context you attach such as a script or question. |
| Text-based features | Text you type, or speech your phone has turned into text, for organising your thoughts, asking the coach, feedback on writing or summaries, and example rewrites. Not stored after the feedback is created. |
| Conversation practice | What you said (as text from your phone), the replies of the other character, coaching results, and scenes you write yourself. |
| Subscription | Product, start and end times, whether it is a free trial, renewal status, and the App Store transaction ID (stored on our server only as a hash). |
| Usage and device | In-app events, crash logs, OS, device model, app version and language, IP address, records of each analysis step (success or error code) and daily use counts per feature. |
| Install source | utm values from campaign links and Apple Search Ads campaign and keyword IDs. |
| Older Korean-only features | Some older features available only when the app is set to Korean: recordings and scores saved on our server, practice history, weekly ranking scores, and face, gaze and posture numbers your phone calculates during mock-interview practice. |
How we handle voice and camera
- Recordings you send — only features that send a recording (speaking practice, speech analysis and meeting-reply practice) upload it. Our server does not write the recording to disk: it is transcribed with OpenAI speech recognition and then discarded. The original stays on your phone and is deleted when you delete that practice or your account.
- Speech recognition on your phone — summary and conversation practice, among others, use the speech recognition built into iOS. Depending on your device and language, Apple may process the audio under Apple’s privacy policy. We never receive that audio — only the resulting text, and only when you ask for feedback.
- Camera — used only in the Korean version’s mock-interview practice. Face detection runs entirely on your phone; we never record, upload or store video or photos. Only the resulting numbers (how often you looked at the camera, smile count, posture tilt) are sent with your transcript to create feedback.
What we do not collect
- Card or bank details — payments are handled by Apple’s App Store and never reach us.
- The advertising identifier (IDFA), contacts, location, your photo library or camera video.
3. How long we keep it
| Data | How long |
|---|---|
| Sign-in account (Firebase) | Deleted immediately when you delete your account. |
| Recordings | Our server: not stored (processed only during analysis). Your phone: until you delete the practice, your account or the app. |
| Transcripts and feedback from recorded practice | Deleted automatically after 30 days, or immediately if you delete the practice or your account first. |
| Analysis step records | Deleted after 90 days, or immediately when you delete your account. |
| Conversation practice | Until you delete it or your account. |
| Text sent to text-based features | Not stored. Example rewrites are cached in server memory for up to 6 hours in case the same request comes again. |
| Member record on our server (email, sign-in method, nickname), confidence coach records, per-feature usage counts, records from older Korean-only features (recording files saved on our server, scores, ranking, practice history) | Deleted immediately when you delete your account. |
| Subscription and payment records (including credits granted and used) | 5 years, as required for records of payment and supply under Korea’s Act on Consumer Protection in Electronic Commerce. Kept for that period even after you delete your account, identified only by a one-way hash instead of your user ID, and containing none of your practice. |
| Support emails | 3 years after the request is resolved, as required for complaint and dispute records under the same Act. |
| Server access logs (including IP address) | Up to 1 year, for security and troubleshooting. |
| Analytics and crash data (PostHog, Firebase) | Each provider’s retention period. It may remain under your user ID after you delete your account; email us and we will delete it. |
What deleting your account removes — deleting your account in the app immediately removes your sign-in account and everything our server holds about you: your member record (email, sign-in method, nickname), the transcripts, feedback and analysis step records from recorded practice, your conversation practice, your confidence coach records (the options you picked and result codes), per-feature usage counts and records from older Korean-only features (recording files saved on our server, scores, ranking, practice history), as well as the recordings and answers saved on your phone. What remains is the subscription and payment records (including credits granted and used) that the law requires us to keep for 5 years, and a marker that the deletion took place so that an analysis still in progress is not saved again. Both are identified only by a one-way hash instead of your user ID and contain none of your practice. For analytics data held by PostHog and Firebase, email [email protected] as described in the table above.
4. Sharing
We do not sell your personal information or give it to anyone else, except:
- What other users can see — if you take part in the weekly ranking in the Korean version, your nickname, score and rank are shown to other users. You can change your nickname at any time; please don’t use your real name or anything that identifies you.
- When the law requires it — for example, a lawful request from the police or a court.
5. Service providers and international transfers
| Provider (country) | What it does for us | Data involved |
|---|---|---|
| Amazon Web Services, Inc. (stored in the Seoul region) | Servers and database | Everything stored on our servers |
| OpenAI, L.L.C. (United States) | Transcribing recordings; writing feedback, example rewrites and their audio; the other character’s replies in conversation practice; safety checks on scenes you write | Recordings, transcripts and text you enter, practice context, mock-interview numbers (Korean version). No email address or user ID is sent. |
| Google LLC (United States) | Sign-in (Firebase Authentication), usage statistics (Firebase Analytics), crash reports (Firebase Crashlytics), speech recognition in older Korean-only analysis features | Account details, in-app events, crash logs, device details, recordings from older Korean-only features |
| PostHog, Inc. (United States) | Product analytics | User ID, in-app events, device details, install source |
| RevenueCat, Inc. (United States) | Managing and verifying subscriptions | A pseudonymous ID and purchase records |
- Data is sent over encrypted connections each time you use the feature concerned. Each provider keeps it under its own terms until the purpose is served or our agreement ends. (OpenAI states that it does not use data received through its API to train its models.)
- If you do not want your data transferred abroad, don’t use the feature concerned, or delete your account. Some features — feedback on recordings, sign-in and subscriptions — will then not be available.
- Apple Inc. handles app distribution, in-app purchases, Sign in with Apple, Apple Search Ads attribution and on-device speech recognition under its own policies.
6. How we delete data
- We delete data promptly when its retention period ends, when it is no longer needed, or when you ask us to.
- Electronic files are deleted so they cannot be recovered. We do not keep paper records.
- Subscription and payment records that the law requires us to keep are stored separately and deleted when the period ends.
- You can close your account yourself: Me tab → Delete account (on the older layout, the ⋮ menu at the top right → Delete account).
7. Security
- Traffic between the app and our server is encrypted with HTTPS.
- Recorded practice, conversation practice and confidence coach records are stored under a one-way hash of your user ID, not the ID itself.
- Our server logs do not contain recordings, transcripts or text you enter, except that older Korean-only analysis features may log the first few words of a transcript for troubleshooting.
- Only the developer can access the servers and database. Physical security is provided by our cloud provider, AWS.
8. Analytics, ads and notifications
- Analytics — we use Firebase Analytics and PostHog for usage statistics and Firebase Crashlytics for crash reports. There is no in-app switch to turn this off yet; email us if you would like us to stop or delete it.
- No ads or tracking — the app shows no ads. We do not collect the advertising identifier (IDFA) or link your data with other companies’ apps or websites to track you, so the app does not ask for App Tracking Transparency permission.
- Install source — we receive Apple’s Search Ads attribution (campaign and keyword IDs) and campaign-link values. No advertising identifier is used.
- Notifications — reminders are scheduled on your phone; our server does not receive a push token. You can turn them off in iOS Settings at any time.
9. Your rights
You can ask at any time to see the personal information we hold about you, to correct or delete it, or to stop us using it. Email [email protected]; once we have confirmed it is you, we will act within 10 days and let you know. Someone you authorise can also make the request for you. If you live outside Korea, you can use the rights your local law gives you through the same email address.
In the app you can:
- Change your nickname — Me tab → Change nickname
- Delete a recorded practice — from your practice history
- Delete your account — Me tab → Delete account
- Cancel your subscription — Me tab → Manage or cancel subscription, or iPhone Settings → your name → Subscriptions
10. Contact
| Role | Details |
|---|---|
| Developer and privacy officer | CHANG HWAN JUNG (individual developer) |
| [email protected] |
Send any question or complaint about how the app handles your information to the address above and we will reply promptly. You can also contact Korea’s Personal Information Dispute Mediation Committee (kopico.go.kr), the Privacy Infringement Report Center (privacy.kisa.or.kr) or the data protection authority where you live.
11. Children
The app is not meant for children under 14, and we do not knowingly collect personal information from children under 14. If we learn that we have, we will delete it promptly.
12. Changes to this policy
- This policy applies from 16 October 2026.
- If we change it, we will post the new version here and update the date. For important changes that affect your rights, we will give notice on this page and in the app at least 7 days before they take effect.
- Email us if you need an earlier version.