soritok
Privacy Policy
This policy explains what Soritok ("we", "us") collects when you use the Soritok iOS app or this website, why, and what you can do about it. Soritok is operated by its founder, Sam Kirby, from Australia. Contact: samexperiments247@gmail.com.
What we collect
- Account details. Your email address, first name and a password hash, or the identity token from Sign in with Apple or Google if you use those. Sign in with Apple may give us a private relay address instead of your real email.
- Onboarding answers. Your Korean level, goals, daily time target and similar preferences you enter when you set up the app.
- Learning data. Words you save, review results, clips you watch and bookmark, daily activity and achievements. This is the core of the product and is stored so it syncs across your devices.
- Purchase status. Whether you have an active Soritok Pro subscription, the plan, and anonymous transaction identifiers. We never see your card details; Apple handles all billing.
- Usage analytics. Which screens you open, buttons you tap and features you use, with a device model, iOS version, app version and a random identifier. We do not collect precise location, contacts, photos or advertising identifiers.
- Feedback and reports. Anything you send us through the in-app feedback screen, and anything you send when you report a clip. Feedback messages are private between you and us.
- Session recordings. To see where people get stuck, we record a small sample of app sessions as an anonymised wireframe: the shape and position of what was on screen, and where you tapped and scrolled. Text is masked before the recording leaves your device, so anything you type — your email, your password, the words you save — is never readable in a recording, and images and system screens such as Apple's payment sheet are never captured. Recordings are tied to the same random identifier as the rest of our analytics, not to your name.
The waitlist on soritokapp.com
If you give us your email address on this website before the app launches, we store that address, the page it came from, and your browser's user-agent string, so we can tell you once when Soritok is on the App Store. We do not use it for anything else, we do not sell or share it, and we do not add you to a newsletter. Email samexperiments247@gmail.com and we will delete your address, no questions asked. Every waitlist address is deleted once the app has launched and the launch email has gone out.
Why we collect it
- To run the app: keep your account, sync your saved words and progress, and unlock Pro features you have paid for.
- To improve the app: analytics and masked session recordings tell us which features are used and where people get stuck.
- To answer you when you contact us.
We do not sell your data and do not show third-party advertising.
Services we use
- Supabase hosts our database and authentication. Your account and learning data live there.
- RevenueCat processes subscription status from Apple's App Store on our behalf.
- PostHog stores usage analytics and the masked session recordings described above.
- Apple handles payment and, if you choose it, Sign in with Apple.
- Google handles Sign in with Google if you choose it. Video clips are played with YouTube's embedded player, which is subject to Google's privacy policy. When a video plays, YouTube receives your IP address and standard player data as it would on any website embedding a video.
- AI explanations. When you ask for an in-context explanation of a word, the sentence and word are sent to an AI language model provider to generate the explanation. No account details are included in that request.
Each of these providers processes data under its own privacy policy and may store it outside Australia, including in the United States.
How long we keep it
Account and learning data are kept while your account exists. Analytics events are kept for up to two years. When you delete your account, your account and learning data are removed from our database immediately; backups are overwritten within 30 days.
Your choices
- Delete your account at any time in the app: Profile → Settings → Delete account. Or email us.
- Export your words from Profile → Settings → Export.
- Access or correct your data by emailing us. We reply within 30 days.
- You can stop all collection by deleting the app and your account.
Children
Soritok is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will delete it.
Security
Data is sent over encrypted connections and stored with row-level access control so that only your own account can read your data. No system is perfectly secure; if we learn of a breach affecting you, we will tell you.
Changes
If this policy changes materially we will show a notice in the app. The date at the top always reflects the current version.