Privacy Policy
Effective date: September 26, 2026
My Ganada ("the app") is a Hangul (Korean alphabet) learning app for first-time Hangul learners, published by Sandpia ("we," "our," or "us"). We designed the app so that anyone, including children, can learn without giving us any personal information.
This Privacy Policy explains what information the app processes, why, and how parents and legal guardians can exercise their rights. It is prepared in accordance with Article 30 of the Korean Personal Information Protection Act (PIPA), including its rules for children under 14, and also takes into account children's privacy laws in other countries, such as the U.S. Children's Online Privacy Protection Act (COPPA) and the EU/UK GDPR.
1. Our Approach to Children's Privacy
Because young children may use the app, we follow these principles:
- No account or login. The app has no sign-up, and there is no place to type a name, email address, phone number, or age.
- No camera, microphone, photo library, location, or contacts access. The app does not request these permissions.
- No analytics or crash-reporting tools. The app does not include tools that track how it is used or collect crash reports.
- No chat, social features, or public sharing. Children cannot contact other users or post anything.
- A grown-up gate (a simple multiplication check) protects purchases and reminder settings.
We do not collect personal information from children that would require the consent of a legal guardian. If we ever need to, we will first update this policy and obtain verifiable consent from the legal guardian before collecting it, as required by Article 22-2 of PIPA and by COPPA.
2. Information the App Processes
Learning data (stored only on the device)
The following data is created while your child uses the app and is saved only on the device. It is never sent to us.
- Lesson history: learning sessions, answers (including wrong answers), and time spent on each activity
- Progress: letters and characters collected, garden and house decorations, in-app seeds and water drops, and items obtained in the in-app shop (these are play rewards, not purchased with money)
- Praise messages a grown-up chooses from a preset list for the in-app mailbox
- Settings: learning stage, sound, reminder time, language, and theme
- Drawings from Coloring and Picture Diary (saved as stroke data)
Handwriting
Tracing is checked on the device by the app itself. For "Write what you hear," the app uses Google ML Kit Digital Ink Recognition, which also runs on the device. Handwriting is never sent to us or to Google. The first time this activity is opened, the app downloads a Korean recognition model from Google; like any download, Google receives the IP address and basic technical information of the request.
Storybooks and coloring pages
Storybooks and coloring pages are downloaded from our content server over the internet. These requests do not include your child's name, learning data, or any identifier linked to your child or device. As with any internet connection, the server can see the device's IP address, but we do not store it.
Advertising
The app includes the Google Mobile Ads SDK (Google AdMob) and may show ads to users who do not have a Ganada Plus subscription. We configure every ad request for children:
- Tagged for child-directed treatment and as under the age of consent, which turns off personalized (interest-based) advertising and remarketing and limits Google's data processing
- Maximum ad content rating: G (suitable for general audiences)
- On iOS, the app does not ask for tracking permission (App Tracking Transparency). On Android, access to the Advertising ID has been removed from the app. The advertising identifier is therefore not made available.
- Where the law requires it (for example, in the EEA, UK, and Switzerland), a consent form is shown through Google's consent tool.
- Ads are not requested for Ganada Plus subscribers.
To show ads, limit how often they appear, measure them, and prevent fraud, Google may process the IP address, device and operating system information, and ad interaction information. We do not provide Google with any learning data.
In-app purchases (Ganada Plus)
Subscriptions are processed entirely by the Apple App Store or Google Play. We never receive payment card details, names, email addresses, or billing addresses. The app checks the subscription with the store on the device and saves only the result on the device: the time of the last check, whether a purchase has been made, and the transaction identifiers it has already handled. This information is not sent to us. Purchases that are waiting for a parent's approval (for example, Ask to Buy or Family Link) are not applied until they are approved.
Reminders
Reminders are local notifications scheduled on the device. We do not operate a push notification server. Turning reminders on requires the grown-up gate and the operating system's permission.
When you contact us
If you email us, we receive your email address and whatever you choose to write. We use it only to respond to you.
This web page
This page (sandpia.com/my-ganada) remembers your language choice in your browser's local storage. Sandpia.com uses analytics cookies (Firebase Analytics) only if you agree to them in the site's cookie banner.
3. Why We Process Information
We use the information described above only for the following purposes and for no other purpose:
- Learning data: to save your child's progress, adapt lessons to their stage, and show the parent report
- Handwriting: to check tracing and dictation answers on the device
- Content requests: to deliver storybooks and coloring pages and protect the server from abuse
- Advertising (non-subscribers only): to show age-appropriate, non-personalized ads, limit their frequency, and prevent ad fraud
- Purchase status: to apply Ganada Plus benefits and restore purchases
- Reminders: to show the learning reminder at the time a grown-up chose
- Inquiries: to answer questions and handle requests from parents
If the purposes change, we will take the necessary steps, such as obtaining separate consent under Article 18 of PIPA.
4. Retention and Deletion
| Information | Where it is kept | How long |
|---|---|---|
| Learning data, drawings, settings | Only on the device | Until the app is deleted |
| Subscription status | Only on the device | Until the app is deleted |
| IP address in content requests | Not stored | Used only to deliver content |
| Ad-related information | Under Google's own policy | |
| Payment records | Apple / Google | Under each store's policy and applicable law |
| Emails you send us | Our mailbox | Deleted without delay once the inquiry is resolved; records of consumer complaints or disputes are kept for 3 years as required by the Korean Act on Consumer Protection in Electronic Commerce |
How to delete: the app does not have an in-app reset, to prevent children from erasing their progress by accident. Deleting the app removes all of its data from the device. On Android, app data is excluded from device backups. On iOS, app data may be included in an iCloud or computer backup managed by your Apple account; deleting that backup removes it as well.
How we destroy information: we do not keep personal information on our servers. Emails that are no longer needed are permanently deleted so that they cannot be recovered.
5. Sharing with Third Parties
We do not sell, rent, or provide personal information to third parties, except where required by law (Articles 17 and 18 of PIPA). The services below receive information directly from the device when the app uses them, under their own privacy policies: Google (advertising and the handwriting model download) and Apple and Google (app store purchases).
6. Service Providers and International Transfers
The following providers, located outside Korea, process information when the related feature is used over the internet (Article 28-8 of PIPA):
| Recipient (country) | Information | When and how | Purpose | Retention |
|---|---|---|---|---|
| Cloudflare, Inc. (United States) | IP address, request information | Sent over the network when storybooks or coloring pages are downloaded | Content delivery and security | Under Cloudflare's policy (cloudflare.com/privacypolicy) |
| Google LLC (United States) | IP address, device and OS information, ad interactions | Sent over the network when ads are requested (non-subscribers) or the handwriting model is downloaded | Ad delivery and measurement; model download | Under Google's policy (policies.google.com/privacy) |
How to refuse: you can turn off the device's internet connection. Most lessons are included in the app and work offline, but storybooks, coloring pages, and the handwriting model need an internet connection. Subscribing to Ganada Plus stops ad requests.
7. Automatic Collection Tools
The app does not use cookies and does not access the advertising identifier. We do not process behavioral information for personalized advertising, and ads in the app are not personalized. For this web page, see "This web page" in Section 2.
8. How We Keep Information Safe
- Data minimization: we keep learning data on the device and do not store personal information on our servers.
- On-device protection: app data is stored in the app's private storage, isolated by the operating system.
- Secure transmission: all network communication is encrypted.
- Server protection: our servers do not store personal information and deliver content only to the app.
- Access control: inquiry emails are accessed only by the privacy officer.
9. Rights of Children and Parents
Your child and you, as the legal guardian, may request access to, correction, deletion, or suspension of processing of personal information, and may withdraw consent at any time. For children under 14, the legal guardian exercises these rights on the child's behalf. You may also request the transfer of personal information (Article 35-2 of PIPA); however, because learning data stays on the device, we generally do not hold any data that can be transferred.
To make a request, email [email protected]. You may also make a request through a representative with a power of attorney. We may ask for minimal information to confirm that the request comes from the child's legal guardian, and we will respond within 10 days. Most data can be managed directly on the device, and deleting the app deletes everything.
10. Automated Decisions
The app does not make automated decisions that have legal or similarly significant effects on children (Article 37-2 of PIPA). Checking answers during lessons only affects in-app practice and rewards.
11. Privacy Officer
We do not have a separate privacy department. Under Article 31 of PIPA, the representative of Sandpia serves as the privacy officer, overseeing the handling of personal information and handling complaints, requests for remedies, and requests to access personal information.
- Privacy Officer: Representative of Sandpia
- Email: [email protected]
12. Remedies for Privacy Infringement
If you need help with a privacy issue, you may contact the following Korean organizations:
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center (KISA): 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
If you live outside Korea, you may also contact your local data protection authority.
13. Additional Information for Some Regions
United States (COPPA)
We do not knowingly collect personal information from children. Ads are served under Google's child-directed treatment. Parents may contact us at any time to ask questions or make requests about their child's information.
EEA, United Kingdom, and Switzerland
We process information to provide the app you requested (content delivery) and, where required, show ads based on consent collected through Google's consent tool. You may lodge a complaint with your local supervisory authority.
California
We do not sell or share personal information for cross-context behavioral advertising.
14. Changes to This Policy
If we change this policy, we will post the changes on this page at least 7 days before they take effect, or at least 30 days before if the changes significantly affect your rights.
Revision history
- September 26, 2026: Initial version
15. Contact Us
My Ganada is published by Sandpia, which is responsible for the information processed as described in this policy. If you have any questions, please contact us at: