Privacy Policy
Effective October 9, 2026 · Last revised October 8, 2026
This is a translation of the Korean original (개인정보 처리방침). In case of any discrepancy, the Korean version governs.
Beyond Korean (hereinafter the “Company”) establishes and discloses this Privacy Policy for the Beyond Korean service (hereinafter the “Service”) under Article 30 of the Personal Information Protection Act, in order to protect information subjects’ personal data and to handle related complaints promptly and smoothly.
Notice of Privacy Policy changes (effective October 15, 2026)
The beta waitlist changes below apply from October 15, 2026.
- Articles 1–3: adds the purpose, items (email required; target level, planned exam and native language optional) and retention period (destroyed when the beta ends or on request) for the beta waitlist
- Article 5: adds beta waitlist emails to the tasks entrusted to Resend
Article 1 Purposes of Processing Personal Information
The Company processes personal information for the following purposes. Processed personal information is not used for any purpose other than the following, and if the purpose of use changes, the Company carries out necessary measures such as obtaining separate consent under Article 18 of the Personal Information Protection Act.
- Confirming sign-up intent, identity verification, maintaining and managing membership, and preventing fraudulent use of the Service
- Providing the TOPIK II reading practice service (question solving, mock exams, answer grading)
- Providing AI-based step-by-step hint conversations
- Managing study credits
- Receiving and handling reports, and question quality management
- Emailing requested materials to resource-page applicants
- Providing convenience features such as saving language (locale) settings
- Providing the non-member trial (/try) and limiting the number of trials (preventing misuse)
Article 2 Categories of Personal Information Processed
The Company processes the following categories of personal information.
Required items
- Email address — member identification, authentication, contact
- Password (stored encrypted) — account security
Optional items
There are currently no optional items collected separately at sign-up.
Automatically collected items
During use of the Service, question-solving records (correctness, time spent), AI hint conversation content, writing submissions and feedback records, typing-practice records, connection IP, and language-setting cookies may be automatically generated and collected.
When a non-member uses the trial (/try), a SHA-256 hash of the connection IP combined with a secret value, together with the trial progress record (questions attempted and number of wrong answers), is stored to limit the number of trials. The original IP address is not stored.
The Company does not collect sensitive information or unique identifying information (e.g., resident registration numbers).
Article 3 Processing and Retention Periods
The Company processes and retains personal information within the retention and use period prescribed by law or agreed upon with the information subject at the time of collection.
| Processing task | Retention period |
|---|---|
| Member information (email, password) | Until membership withdrawal |
| Study records (question solving, AI hint conversations, writing submissions/feedback, typing practice) | Until withdrawal (destroyed without delay after withdrawal) |
| Report submissions | 1 year from receipt |
| Resource-request emails (including non-members) | After materials are sent; destroyed without delay upon deletion request |
| Non-member trial IP hash and trial progress record | 7 days from creation (destroyed without delay thereafter) |
Article 4 Provision of Personal Information to Third Parties
The Company processes information subjects’ personal information only within the scope specified in Article 1 (Purposes of Processing), and provides it to third parties only in cases corresponding to Articles 17 and 18 of the Personal Information Protection Act, such as with the information subject’s consent or other special provisions of law.
Article 5 Entrusted Processing
To provide the Service smoothly, the Company entrusts personal information processing as follows.
| Processor | Entrusted task | Country |
|---|---|---|
| Supabase, Inc. | Member authentication, database and file storage | Overseas (per region) |
| Ollama Cloud | AI hint conversations, writing feedback, and practice question generation | Overseas |
| TypeSafe AI, Inc. | Quality judgment of AI hint-conversation replies, writing-feedback text, and the excerpt of a writing submission that feedback refers to (recorded for service improvement) | Overseas |
| Resend | Emailing resource-request applicants | United States |
| Vercel Inc. | Service hosting, connection IP and request log processing | Overseas |
When concluding entrustment contracts, the Company specifies in documents such as contracts the matters concerning the prohibition of processing personal information beyond the entrusted purpose, technical and administrative protective measures, restrictions on re-entrustment, management and supervision of the processor, and liability for damages under Article 26 of the Personal Information Protection Act, and supervises whether processors handle personal information securely. The above processors are located overseas due to the nature of the Service, so personal information may be transferred abroad for the performance of processing tasks.
Article 6 Destruction Procedure and Method
When personal information becomes unnecessary — the retention period has elapsed or the processing purpose has been achieved — the Company destroys it without delay. Personal information in electronic file form is permanently deleted in a way that makes recovery and regeneration impossible. Where preservation is required by law, the personal information is moved to a separate database or stored in a different location.
Article 7 Rights and Obligations of Information Subjects and Legal Representatives, and How to Exercise Them
The information subject may exercise the rights to access, correct, delete, and suspend the processing of personal information with the Company at any time. Rights may be exercised in writing, by email, etc. under Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company takes action without delay. Where the requirements of applicable law are met, the right to demand transmission of personal information may also be exercised; please contact the address below for details and procedures.
How to exercise: email admin@beyondkorean.com
Article 8 Installation, Operation, and Refusal of Automatic Collection Devices
The Company uses minimal cookies for user convenience such as language settings. These cookies are not used for advertising or user tracking. You may refuse cookie storage in your browser settings (e.g., Chrome > Privacy and security > Cookies and other site data); refusal may cause some inconvenience, such as language settings not being retained.
While a non-member trial is in progress, a trial identification cookie (valid for 24 hours) is used to keep its progress. If this cookie is refused, the trial cannot be continued.
Article 9 Measures to Secure the Safety of Personal Information
The Company takes the following measures to secure the safety of personal information. Passwords are stored encrypted; per-member data is separated with row-level access control (RLS) so that other members cannot access it; all communications are encrypted with HTTPS; administrators with personal information processing authority are restricted to the minimum.
Article 10 Personal Information Protection Officer
The Company has designated the personal information protection officer below to take overall responsibility for personal information processing and to handle complaints and remedy damages related to personal information processing.
Name Kang Byung Jun · Contact admin@beyondkorean.com
Article 11 Personal Information of Children Under 14
The Company does not accept sign-ups from children under 14 years of age and does not process their personal information.
Article 12 AI-Generated Learning Content
The Service uses AI to generate practice questions, hint conversations, and writing feedback. Answer grading compares the user’s selection against a predetermined answer — simple processing that does not constitute an automated decision producing legal effects or significantly affecting the information subject. Content entered into AI hint conversations and writing submissions is sent to the entrusted processor (Ollama Cloud) to generate hint responses and writing feedback. In addition, AI hint-conversation replies and the excerpt of a writing submission that feedback refers to are sent to a separate processor (TypeSafe AI, Inc.) to measure hint and feedback quality; TypeSafe’s judgments are recorded without the learner’s entered text (hint replies are stored only as probability scores, and the writing excerpt is not stored).
Remedies for Rights Infringement
The information subject may apply to the following agencies for dispute resolution or counseling to obtain remedies for personal information infringement.
- Personal Information Dispute Mediation Committee — 1833-6972 (no area code) (www.kopico.go.kr)
- Personal Information Infringement Report Center — 118 (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office — 1301 (www.spo.go.kr)
- National Police Agency — 182 (ecrm.police.go.kr)
Changes to the Privacy Policy
This Privacy Policy takes effect on the implementation date; additions, deletions, and corrections under changes in law and policy will be announced through notices at least 7 days before implementation (30 days for changes unfavorable to users).
This Privacy Policy is effective from October 9, 2026.