Privacy Policy (Listen Repeat)

Effective Date: December 22, 2025

Everyground (“Everyground”, “we”, “us”, or “our”) values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with Listen Repeat (the “Service”). This Policy is intended to support global use, with additional regional disclosures in Section 13.

1. Who We Are (Data Controller)

Company: Everyground
Address: 10, Hwangsaeul-ro 335beon-gil, Bundang-gu, Seongnam-si, Gyeonggi-do, 5F, #571
Email: dev@everyground.com

2. Scope

This Policy applies to the Service, including our mobile applications and related features. Third-party services (e.g., app stores and ad networks) may process your information under their own policies.

3. Information We Collect

We collect only the information necessary to provide and improve the Service, show ads, and comply with legal obligations.

3.1 Account Information (Email/Password)

• Email address
• Password (stored in hashed form; we do not store passwords in plain text)
• Basic profile information you choose to provide (e.g., display name)

3.2 Audio for AI Script Extraction (Transient Processing)

• Audio files you upload for transcription/script extraction.
• Temporary storage: Audio files may be stored briefly in AWS S3 (Seoul region) for upload/processing reliability (e.g., queue/retry).
• No transcript storage: We do not store transcripts as persistent records on our servers.
• Audio and transient processing artifacts are deleted promptly after transcription completes, except where temporary retention is technically necessary during processing.

3.3 Purchases / Subscriptions (In-App Purchases)

Payments are processed by Apple App Store and Google Play. We do not receive your full payment card details. We may receive and store:

• Purchase/subscription status (e.g., active/expired)
• Product ID (SKU), transaction identifiers, and/or receipt/purchase token needed to verify entitlement
• Purchase timestamps and renewal information (as provided by the platform)

3.4 Device, Log, and Usage Data

• Device information (e.g., model, OS version, app version, language, time zone)
• Log data (e.g., IP address, timestamps, crash logs, diagnostic data)
• Usage data (e.g., feature interactions, session duration, performance metrics)

3.5 Advertising Data (Google AdMob)

We use Google AdMob to display ads. AdMob (and its partners) may collect/process:

• Advertising identifiers (e.g., Google Advertising ID) and related ad interaction data (impressions/clicks)
• Device information (device type, OS), network information (IP address)
• Approximate location inferred from IP address and other signals
• App usage and ad performance data

3.6 Customer Support Communications

• If you contact us, we collect the information you provide (e.g., email address, message content, attachments) to respond.

4. How We Use Information

• Provide and operate the Service (account management, authentication, feature delivery)
• Perform AI script extraction/transcription requested by you (audio processing)
• Verify purchases/subscriptions and provide paid features
• Show ads and measure ad performance
• Improve the Service (analytics, debugging, performance monitoring, product development)
• Prevent fraud, abuse, and security incidents
• Comply with legal obligations and respond to lawful requests

5. How We Share Information

We do not sell your personal information for money. We may share information as follows:

5.1 Service Providers (Processors)

We use third-party providers to host and operate the Service and to process audio for transcription. These providers process information on our behalf under contractual safeguards.

• Amazon Web Services (AWS, Seoul region): hosting, storage (including temporary S3 storage), infrastructure operations
• OpenAI: AI processing for script extraction/transcription

5.2 Advertising Partners

We use Google AdMob to serve ads. Google and its partners may process data as described in their own policies. Depending on your region, this may involve personalized advertising and/or contextual advertising.

5.3 Legal and Safety

We may disclose information if required by law or if we believe disclosure is necessary to comply with legal process, enforce our terms, or protect the rights, property, and safety of users, the public, or us.

5.4 Business Transfers

If we are involved in a merger, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate safeguards and notices.

6. International Transfers

Our AWS infrastructure for the Service is operated in the Seoul region. However, certain third-party providers (such as Google for advertising and OpenAI for AI processing) may process information on servers located outside Korea (for example, in the United States or other countries). When international transfer requirements apply, we take steps required by applicable law (such as providing notice, obtaining consent where required, and using contractual safeguards).

7. Retention & Deletion

We retain personal information only as long as necessary for the purposes described in this Policy, unless longer retention is required or permitted by law.

Backups: Information may remain in secure backups for a limited period and will be deleted according to our backup rotation schedule.

8. Your Choices & Rights

8.1 General rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal information, and to withdraw consent where processing is based on consent.

8.2 Account deletion

If the Service provides an in-app account deletion feature, you can use it. Otherwise, email us at dev@everyground.com. We may ask you to verify identity to protect your account.

8.3 Ad choices

You can limit personalized ads by adjusting your device settings:

• Android: Google settings for Advertising ID (reset/delete ID and ad personalization controls)
• iOS: Apple privacy & advertising controls

In certain regions (e.g., EEA/UK), we also provide (or will provide) an in-app Privacy Options entry point to review or change your choices. (See Section 13.1.)

9. Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is 100% secure.

10. Children

The Service is not intended for children under the age where parental consent is required under applicable law (including under 14 in Korea). If you believe a child provided personal information without appropriate consent, contact us and we will take appropriate steps.

11. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide notice through the Service or other appropriate means.

12. Contact

Privacy Contact (Everyground)
Address: 10, Hwangsaeul-ro 335beon-gil, Bundang-gu, Seongnam-si, Gyeonggi-do, 5F, #571
Email: dev@everyground.com

13. Regional Disclosures

13.1 EEA/UK (GDPR) Additional Disclosures

This section applies if you are located in the European Economic Area (EEA) or the United Kingdom (UK). If any terms in this section conflict with the rest of this Policy, this section controls for EEA/UK users.

13.1.1 Legal bases (GDPR)

We process personal data under one or more of the following legal bases, depending on context:

• Contract (GDPR Art. 6(1)(b)): to provide the Service, authenticate your account, and deliver features you request (including transcription).
• Legitimate interests (GDPR Art. 6(1)(f)): to secure and improve the Service, prevent fraud/abuse, and maintain reliability (balanced against your rights).
• Consent (GDPR Art. 6(1)(a)): for personalized advertising where required, and for certain optional processing as presented to you.
• Legal obligation (GDPR Art. 6(1)(c)): where we must keep records or respond to lawful requests.

13.1.2 EEA/UK Ad consent (Google AdMob)

If required by law and Google policies, we request your consent for personalized ads and related storage/processing. For users in the EEA/UK (and Switzerland where applicable), Google requires publishers to use a Google-certified Consent Management Platform (CMP) integrated with the IAB Europe Transparency and Consent Framework (TCF) when serving personalized ads. We use (or will use) Google’s privacy tools such as the User Messaging Platform (UMP) SDK to present consent messages and provide a Privacy Options entry point to review/change your choices.

Privacy Options: In-app, look for a menu item such as Settings → Privacy Options (or equivalent). If you do not see it, update the app to the latest version.

13.1.3 Your GDPR rights

You may have the right to:

• Request access to and a copy of your personal data
• Request rectification or erasure
• Request restriction of processing
• Object to processing (including certain processing based on legitimate interests)
• Data portability (where applicable)
• Withdraw consent at any time for processing based on consent

To exercise rights, contact us at dev@everyground.com. You also have the right to lodge a complaint with your local supervisory authority (EEA) or the UK Information Commissioner’s Office (ICO).

13.1.4 Transfers outside the EEA/UK

If personal data is transferred outside the EEA/UK, we will use appropriate safeguards as required by law (for example, recognized transfer mechanisms such as Standard Contractual Clauses, and additional measures where appropriate).

13.1.5 EU/UK Representative

If we are required by GDPR/UK GDPR to appoint an EU/UK representative (e.g., under GDPR Art. 27), we will publish the representative’s contact details here and/or in-app.

13.2 California (CCPA/CPRA) Notice & Rights

This section applies to California residents only to the extent the California Consumer Privacy Act, as amended by the CPRA (“CCPA/CPRA”), applies to our processing.

13.2.1 Notice at Collection

At or before the time of collection, we provide notice of the categories of personal information we collect and the purposes for which we use it.

13.2.2 “Sale” / “Share” for cross-context behavioral advertising

We do not “sell” personal information for money. However, we may “share” certain identifiers and usage data with advertising partners (such as Google AdMob) for cross-context behavioral advertising as those terms may be defined under CCPA/CPRA.

13.2.3 Your California rights

Subject to legal limitations, you may have the right to:

• Know/access the personal information we collected about you
• Delete personal information
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information for cross-context behavioral advertising
• Not receive discriminatory treatment for exercising your rights

13.2.4 How to submit requests

You can submit a request by emailing: dev@everyground.com. For security, we may verify your identity for access/deletion/correction requests. We do not require you to create an account solely to submit a CCPA/CPRA request.

13.2.5 Opt-out (“Do Not Sell or Share”)

To opt out of sharing for cross-context behavioral advertising:

• Use in-app privacy controls (e.g., Settings → Privacy Options / Privacy Choices) where available, and/or
• Adjust your device advertising settings (see Section 8.3).

If you have a website for the Service, you may also publish a dedicated link labeled: “Do Not Sell or Share My Personal Information” (example: https://everyground.com/do-not-sell-or-share).

13.2.6 Authorized agents

You may use an authorized agent to submit requests on your behalf. We may require proof that the agent is authorized and may verify your identity directly.