Privacy policy
KPop Hangeul is provided by Denden Software. This policy describes local app data, online catalog use, artist requests and the services used by the app.
Last updated: 5 November 2026
1. Your collection stays on your device
Collection titles, relationships, personal photos, lyrics you enter (My Lyrics), settings and learning progress are stored on your device. We do not upload your personal collection, photos, lyrics or learning records to our server. Removing cards or using Settings → Reset data deletes the selected local data. Purchases and app settings are preserved when you reset collection data.
2. Catalog search and artist selection statistics
Search sends the typed query and the artist, album or track identifiers needed to retrieve results to our API. The server processes your connection IP to respond and apply security limits. When you deliberately select an artist, the app sends the artist ID and a random event ID. The server estimates a country locally from the connection IP. Statistics store UTC date, country code, artist ID and selection count, not raw IPs, accounts or device IDs. Event IDs prevent duplicate counting and are retained for up to three days; daily aggregates for up to 401 days. These are approximate counts, not unique-user counts. Search queries are not saved in the statistics database.
3. Artist addition requests
If you choose to request an artist, we receive the name you enter, app language, a random request ID and receipt time. We store these separately from catalog data to consider additions; review time and an internal reviewer identifier may also be recorded. Please enter only an artist or group name, without personal information. Requests are not public and are not linked to an app account or persistent device ID. They remain in our private review database until removed after they are no longer needed; automatic expiry is not currently implemented. A request does not guarantee an addition or reply.
4. Security and hosting
Our catalog and request services use a rented Vultr server administered with Ploi. Administrators require restricted access, login and two-factor authentication. API security limits temporarily use a keyed hash of the connection IP. Routine API access logging is disabled; diagnostic and infrastructure error logs may contain connection details. Application error logs rotate after 14 days; infrastructure log retention is subject to server configuration. Providers may process data outside your country. No advertising tracker is installed on this website.
5. Speech and translation
Korean speech uses device voices. Title translation runs on the device with Google ML Kit; model downloads require a connection. The text being translated is processed locally. For diagnostics, usage analytics and service operation, the SDK can send installation identifiers, device and app information, feature events, translation languages, input/output sizes, performance and error data to Google. On Android, its Firebase Remote Config and Firebase Installations dependencies also process installation identifiers and configuration information such as country code, language, time zone, operating system and app version. SDK data and requests to our API are encrypted in transit using HTTPS. This does not upload your personal collection or lyrics to our server. External translation or music links open services with their own policies.
6. Purchases and backups
Apple handles iOS payments and Google Play handles Android payments. The app checks purchase entitlement using StoreKit or Google Play Billing. We do not ask for or store payment-card details. Restore purchases uses the account and store used for the original purchase; it does not transfer a purchase between Apple and Google Play. Personal backup files can contain cards, photos, your entered lyrics and learning progress. They are not password-encrypted by this app. Keep them private: someone who obtains the file may be able to read it or restore it in a compatible app. If you save a file with a cloud provider, its controls and policy apply. Restore purchases restores paid access, not your collection; use your backup file to restore collection data.
7. Your choices and contact
No app account is required. To delete local data, open Settings → Reset data and choose all collection data, a selected artist and related data, or learning records only. Deleting collection data removes the corresponding cards, photos, lyrics and learning records; purchase entitlement and app settings remain. Exported backup files are separate: delete them yourself from Files or your chosen storage provider, including any copies. To request access, correction or deletion of an artist request, email support@dendensoft.com with the subject “KPop Hangeul data request”, the artist name submitted and the approximate submission date. Do not send passwords, payment details or a whole backup. We will review the request and may ask for information needed to identify the record. We cannot link anonymous selection aggregates to a person; these follow the retention periods above. Artist requests have no automatic expiry and are removed when no longer needed or when an applicable deletion request can be fulfilled. Data processed by Google or Apple is also subject to their policies and available privacy controls. We do not sell personal information or use it for cross-app advertising tracking. For other privacy rights or information submitted by a child, contact the same address.
8. Changes
We will update this page when our practices change and show the revision date. A later website account or cloud-sync service is not part of the current app and would require updated information.
Google ML Kit (iOS) · Google ML Kit (Android) · Firebase (Android) · Google Privacy Policy · IP Geolocation by DB-IP (CC BY 4.0) · Vultr · Ploi
← Back to KPop Hangeul