PRIVACY · LESSON BOOKINGS

Your information, explained.

Effective October 10, 2026. Goguma Korean is operated by 오운굿즈랩 in South Korea. For privacy questions, access, correction, or deletion requests, email goguma.korean.ac@gmail.com.

What is available now

You can browse lessons, download materials, sign in with Google, and reserve a live Zoom lesson. We use your information to manage your account, verify payments, deliver lesson access, and handle support and refunds. See our booking terms.

Google sign-in

With your permission, Google supplies your account identifier, verified email address, and basic profile information. We store your identifier, email address, and profile name to create your account, recognize you on later visits, and apply teacher access permissions. We do not store your Google profile photo. We do not request access to Gmail, Google Drive, contacts, or Google Calendar, and we never receive your Google password.

Google access tokens are used during sign-in to retrieve your profile and are not stored in our account database. We do not sell Google user data, use it for advertising, or use it to train AI models. Our use of Google user data follows the Google API Services User Data Policy, including its Limited Use requirements.

Bookings and payments

We store your chosen lesson time, time zone, track, booking reference, accepted terms, payment provider, amount, currency, transaction identifiers, payment status, Zoom meeting link, and email delivery status. We do not store your full card number, card security code, or payment-account password. PayPal or Toss Payments collects payment information in its checkout and returns transaction information for verification. Booking details are available to your teacher.

Cookies and security

Essential cookies protect the sign-in process and keep you signed in. Sign-in state expires after 10 minutes; your website session expires after 7 days or when you sign out. Expired sign-in states and sessions are removed by scheduled cleanup. We use HTTPS, secure HTTP-only cookies, hashed session tokens, and server-side access checks. This site does not use advertising or analytics cookies.

Storage and service providers

Cloudflare hosts the website and account database and processes technical request information, such as IP addresses and security or error logs, to deliver and protect the service. Google handles account authentication. Provider infrastructure may process information outside your country, including outside South Korea. Access to account information is limited to the operator and service providers where necessary to operate, support, and secure the service. Information may also be disclosed where legally required.

See the Cloudflare Privacy Policy and Google Privacy Policy for their processing. PayPal and Toss Payments process payments for the method you select. Zoom creates and hosts the lesson meeting and processes information when you join, including your display name, device information, and live audio/video. We do not enable automatic recording. Resend receives your email address, booking details, and Zoom link to deliver booking emails and calendar attachments. Email open and click tracking are disabled. See the PayPal privacy statement, Toss Payments privacy policy, Zoom privacy statement, and Resend privacy policy. These providers may process data internationally, including in the United States; Resend sending infrastructure for this service is configured in Tokyo, Japan. Transfers occur over the network when you sign in, pay, or when we deliver your lesson and notifications. Each provider applies its own retention and security practices. You can decline these services by not making a booking; contact us with questions before paying.

Retention and your choices

We keep your account identifier, email address, and profile name while you maintain an account. You can request a copy, correction, or deletion by emailing the contact above from your registered address. After verifying the request, we delete account information that is no longer needed and revoke active website sessions. We retain legally required contract, withdrawal, payment, and service-supply records for 5 years, and consumer complaint or dispute records for 3 years, where Korean e-commerce recordkeeping rules apply. These retained records are used for those legal and dispute-handling purposes. See Article 6 of the Enforcement Decree of the Act on Consumer Protection in Electronic Commerce. Deletion from provider backups and technical logs follows the provider's retention processes; we do not promise immediate erasure of every backup.

You can also remove Goguma Korean's Google access in your Google account connections. Removing Google access does not itself delete the account data already stored by this website; contact us for deletion. You can browse and download materials without signing in.

Changes

We will update the effective date and this notice when our data practices change. New uses requiring your consent will be explained before you use the relevant feature.