# Kalima 개인정보 처리방침

> 계정, 동기화, 가져오기, 구독을 포함한 Kalima 웹사이트 및 iOS 앱 개인정보 처리방침입니다.

- Canonical URL: https://kalimaapp.com/ko/privacy
- Markdown URL: https://kalimaapp.com/ko/privacy/index.html.md
- Language: ko

> 이 법률 문서는 현재 영어로 제공됩니다. 내비게이션과 사이트 컨트롤은 편의를 위해 현지화되어 있습니다.

Effective date: July 12, 2026

This Privacy Policy explains how Kalima handles information when you use the Kalima iOS app, cloud services, AI-assisted language and voice features, subscriptions, support channels, and related services. "Kalima," "we," "us," and "our" refer to the operator of the Kalima app. For privacy questions or requests, contact us at [support@kalimaapp.com](mailto:support@kalimaapp.com).

This Policy should be read together with the Kalima Terms of Service at [https://kalimaapp.com/terms](https://kalimaapp.com/terms).

## 1\. Scope

Kalima is a reading, vocabulary, and language-learning app. The app can import books and documents, extract text from scans and URLs, show public-domain books from Discovery, save vocabulary and study progress, sync eligible data to the cloud, provide subscriptions, and provide AI-assisted language and voice features.

This Policy applies to information handled by Kalima. It does not replace the privacy policies of Apple, Google, Firebase, RevenueCat, AI voice providers, Gutendex, Project Gutenberg, websites you import from, or other third-party services.

## 2\. Information We Collect

We collect and process information needed to provide, secure, support, and improve Kalima.

### Account and authentication information

Kalima requires a real, non-anonymous account for normal app use. When you sign in, we may receive and store:

-   Firebase user ID.
-   Email address.
-   Display name, if provided by your sign-in provider.
-   Sign-in provider information, such as Apple or Google.
-   Account creation and last sign-in timestamps.
-   Authentication tokens needed to keep you signed in and protect cloud services.

If you use Sign in with Apple or Google Sign-In, those providers process information under their own policies.

### Onboarding, profile, and preferences

Kalima may store information you provide or configure in the app, including:

-   Learning language, native language, target language, and reading level.
-   Motivations, estimated vocabulary level, goals, selected interests, and onboarding choices.
-   Reminder settings, notification preferences, reader preferences, voice preferences, appearance settings, and recent Discovery searches.
-   Reading and study activity, including minutes read or studied.

### Library, imported content, and reading activity

When you import or create reading material, Kalima may store:

-   Book and document files.
-   File metadata such as title, author, publisher, language, media type, file size, import date, cover data, and table of contents data.
-   Extracted text, scans, URLs, selected text context, highlights, and related metadata.
-   Reading progress, reader location, last opened time, and whether an item is a Quick Read or library book.
-   Public-domain catalog identifiers when imported from Discovery.

Kalima normalizes supported non-EPUB formats to EPUB during import so they can be opened in the reader. Imported content is primarily stored on your device. If cloud sync is available and enabled for your account, book metadata and book files may be stored in Firebase Firestore and Firebase Storage.

### Vocabulary and study information

Kalima may store vocabulary and study data, including:

-   Saved words, translations, lemmas, parts of speech, pronunciation, examples, and source context.
-   Source book, title, chapter, language, and related reading metadata.
-   FSRS scheduling data, review state, due dates, stability, difficulty, repetitions, lapses, and review history.
-   Review events, ratings, timestamps, device ID, app build, and sync state.

### Camera, OCR, microphone, speech, and notifications

If you grant permission, Kalima may use:

-   Camera access to capture images for scan import.
-   Apple Vision OCR to extract text from images. Image recognition is intended to run on device, and extracted text can become a saved Quick Read.
-   Microphone access and Apple Speech Recognition for pronunciation practice and transcription.
-   Local notifications for reminders and weekly digests.
-   Files and Photos access, when applicable, to import documents or images you choose.

You can control these permissions in iOS Settings. Features that require a permission may not work if that permission is denied, but Kalima does not require unrelated permissions for unrelated features.

### URL imports and Discovery

When you import text from a URL, Kalima sends a request to the URL you provide and extracts readable text. The website you choose may receive information such as your IP address, device or network metadata, and the requested URL.

When you search or browse Discovery, Kalima sends catalog requests to Gutendex and may download files, covers, or metadata from Gutendex-provided sources, including Project Gutenberg.

### AI language, translation, and voice features

When you use AI-assisted features, Kalima may process:

-   Selected words, selected text, full sentences, or sentence queues.
-   Source and target language codes.
-   Translation, lookup, pronunciation, or vocabulary prompts and generated responses.
-   Voice ID, language, playback rate, playback mode, request intent, sentence IDs, and related request metadata.
-   Authentication and App Check tokens used to protect the service.
-   AI voice billing and usage metadata, such as character counts, billing sessions, plan status, and trace IDs.

Kalima uses Firebase AI / Google AI for reader language features such as translation and word lookup. Kalima uses a Google Cloud Run relay for AI voice requests and may relay text to one or more AI voice providers for text-to-speech generation. The active AI voice provider, voices, models, and provider configuration may change over time.

Kalima asks for your consent before sending selected text, audio, or related request data to cloud AI or voice providers. Do not submit sensitive personal information, confidential information, regulated data, or content you do not want processed by AI providers.

### Subscription and purchase information

Kalima uses Apple in-app purchases and RevenueCat to manage subscriptions and entitlements. We may receive:

-   RevenueCat app user ID linked to your Kalima account.
-   Product identifiers, entitlement status, purchase state, expiration or renewal information, restore status, and related subscription metadata.
-   AI voice access and billing state needed to provide paid features.

Kalima does not receive your full payment card number from Apple.

### Analytics, diagnostics, and security information

Kalima uses Firebase Analytics for product analytics and Firebase Crashlytics for reliability diagnostics. These systems are pseudonymous per app installation and are not linked to your Kalima account, Firebase user ID, email address, RevenueCat identity, imported content, book identifiers, titles, words, definitions, URLs, queries, transaction identifiers, or other content identifiers.

-   An app-instance device identifier, coarse location, product interaction, and other usage data used to understand onboarding, imports, reading, vocabulary study, paywall, purchase, sync, and text-to-speech feature performance.
-   Automatic StoreKit purchase history reported by Firebase Analytics, used for analytics and not joined to your Kalima or RevenueCat account identity.
-   Crash data, performance data, other diagnostics, nonfatal error types, OS version, and app version used to diagnose reliability.
-   App Check, App Attest, DeviceCheck, and related security tokens used to prevent abuse and protect backend services.

Analytics and Crashlytics do not receive a custom user identifier. Signing out or deleting an account does not reset the anonymous Analytics installation identifier because no account mapping exists. Historical anonymous analytics therefore cannot be located or deleted by account ID.

Kalima does not use session replay, advertising SDKs, AdMob, IDFA, App Tracking Transparency tracking, cross-app advertising tracking, Google Signals, advertising personalization, or user-provided data collection for analytics.

### Support communications

If you contact us, we may process your email address, message contents, attachments, and other information you choose to provide.

## 3\. How We Use Information

We use information to:

-   Create, authenticate, secure, and manage your account.
-   Provide reading, importing, OCR, vocabulary, study, sync, AI, voice, Discovery, and subscription features.
-   Save your library, reading progress, vocabulary progress, goals, preferences, and reminders.
-   Sync eligible data across devices for premium accounts.
-   Process purchases, restores, entitlements, and AI voice access.
-   Detect, prevent, and investigate abuse, fraud, service misuse, and security issues.
-   Analyze app reliability, diagnose crashes, improve performance, and understand feature usage.
-   Respond to support requests and legal requests.
-   Comply with legal obligations and enforce our Terms of Service.

## 4\. Cloud Sync and Storage

Cloud sync is local-first and premium-gated. A real non-anonymous account and an active premium entitlement are required before Kalima syncs eligible data to Firestore or transfers book files through Firebase Storage.

Cloud data is scoped under your Firebase user ID. It may include vocabulary, books, reading progress, sync state, review events, billing state, and uploaded book files. Storage rules are intended to allow only the account owner to access their own files.

Signing out resets local app data on the device, but it does not delete cloud data. Account deletion is required to delete cloud account data.

## 5\. Sharing and Service Providers

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

We share information with service providers only as needed to operate Kalima, provide features, process subscriptions, secure the service, comply with law, or protect rights and safety. We require service providers that process personal information for Kalima to provide the same or equal level of protection described in this Policy and required by applicable law.

These providers may include:

-   Apple, for Sign in with Apple, App Store purchases, device permissions, Apple Speech Recognition, Apple Vision, Apple text-to-speech, and iOS services.
-   Google and Firebase, for authentication, Firestore, Storage, Cloud Functions, Cloud Run, App Check, Remote Config, Analytics, Crashlytics, Google Sign-In, and Firebase AI / Google AI.
-   RevenueCat, for subscription products, receipts, customer information, entitlements, restores, and billing state.
-   AI voice providers, for text-to-speech processing when AI voice features are used.
-   Gutendex and Project Gutenberg, for public-domain catalog search, book download, and related cover or metadata requests.
-   Websites you choose to import from, when you enter a URL for extraction.

We may also disclose information if required by law, to respond to valid legal process, to protect users or the service, or in connection with a merger, acquisition, financing, or sale of assets.

## 6\. AI Processing and Consent

Kalima may ask for your consent before sending selected text, sentence context, audio, transcripts, or related metadata to cloud AI or voice providers. You can decline optional cloud AI processing. Features that inherently require cloud AI or voice processing may not work without the text, audio, or metadata needed for that request.

Kalima does not use imported reading content to train its own advertising models. Third-party AI, speech, and cloud providers may process requests according to their own terms and privacy commitments.

## 7\. Retention and Deletion

We keep information for as long as needed to provide Kalima, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and operate backups and security systems.

Local app data remains on your device until you delete it, sign out, delete your account, uninstall the app, or the app removes it through normal cache cleanup. Some local settings, device identifiers, recent searches, reader or profile preferences, and audio cache files may remain until separately cleared by the app, iOS, or uninstall.

For normal in-app deletion of books or vocabulary, Kalima may keep deletion markers for a limited period, generally about 30 days, so deletions can sync across devices. Book files in Firebase Storage may remain until related cleanup or account deletion cleanup completes.

When you delete your Kalima account, Kalima attempts to delete your Firebase Auth account, Firestore subcollections, billing and sync documents, Storage files under your user path, and local app data. Some deletion operations, provider logs, backups, security records, or legal records may take additional time or may be retained where required or permitted by law.

Deleting your Kalima account does not cancel an Apple App Store subscription. You must cancel or manage subscriptions through Apple App Store settings or Apple's subscription management tools.

Staging Analytics, Crashlytics, and aggregate reporting data are retained for up to 30 days. Production raw Analytics and Crashlytics exports are retained for up to 426 days. Anonymous aggregate reports may be retained indefinitely because they do not contain account or app-instance identifiers.

Account deletion removes account-linked data controlled by Kalima as described above. It does not reset the installation-level Analytics identifier, and anonymous historical analytics cannot be mapped back to your account.

## 8\. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. You may also have the right to withdraw consent where processing is based on consent, and to appeal certain privacy decisions.

You can:

-   Delete your account in the app.
-   Sign out to reset local account data on the device without deleting cloud data.
-   Delete books, Quick Reads, and vocabulary items in the app.
-   Manage camera, microphone, speech recognition, photo, file, and notification permissions in iOS Settings.
-   Cancel or manage subscriptions through Apple App Store settings.

Contact [support@kalimaapp.com](mailto:support@kalimaapp.com) to request access, correction, deletion, export, or other privacy assistance.

We may need to verify your identity before completing privacy requests.

## 9\. Legal Bases for EEA, UK, and Similar Regions

Where a legal basis is required, we process information under one or more of the following bases:

-   Contract, to provide Kalima and features you request.
-   Consent, for permissions or optional features where consent is required.
-   Legitimate interests, such as securing the app, preventing abuse, improving reliability, understanding feature usage, and providing support.
-   Legal obligations, to comply with applicable law, tax, accounting, consumer, security, and legal-process requirements.

## 10\. International Transfers

Kalima and its service providers may process information in the United States and other countries. These countries may have privacy laws that differ from those where you live. Where required, we use appropriate safeguards for international transfers.

## 11\. Security

We use reasonable technical and organizational measures designed to protect information, including Firebase security rules, account authentication, App Check, encrypted network transport, and owner-scoped cloud paths. No app, network, or storage system can be guaranteed completely secure.

You are responsible for keeping your device, Apple ID, Google account, and Kalima sign-in method secure.

## 12\. Children

Kalima is not directed to children under 13 or to anyone below the age required to use online services in their country without parental consent. We do not knowingly collect personal information from children without required consent. If you believe a child provided personal information to Kalima, contact us at [support@kalimaapp.com](mailto:support@kalimaapp.com).

## 13\. Third-Party Links and Content

Kalima may let you access public-domain catalogs, imported websites, books, documents, and external services. Third-party services and content are governed by their own terms and privacy policies. We are not responsible for third-party privacy practices.

Third-party policies that may apply to related services include:

-   Apple Privacy Policy: [https://www.apple.com/legal/privacy/](https://www.apple.com/legal/privacy/)
-   Google Privacy Policy: [https://policies.google.com/privacy](https://policies.google.com/privacy)
-   Firebase Privacy and Security: [https://firebase.google.com/support/privacy](https://firebase.google.com/support/privacy)
-   RevenueCat Privacy Policy: [https://www.revenuecat.com/privacy/](https://www.revenuecat.com/privacy/)
-   Project Gutenberg Privacy Policy: [https://www.gutenberg.org/policy/privacy\_policy.html](https://www.gutenberg.org/policy/privacy_policy.html)

## 14\. Changes

We may update this Privacy Policy from time to time. When we do, we will update the effective date and, where required, provide additional notice.

## 15\. Contact

Kalima privacy requests and questions: [support@kalimaapp.com](mailto:support@kalimaapp.com)