Back to VocaDict

Privacy Policy

Last updated: October 19, 2026

VocaDict (vocadict.com, operated by Dotprod; "we") processes personal information as described below, in accordance with the Personal Information Protection Act of the Republic of Korea. This policy applies from October 19, 2026.

1. Purposes of processing

  • Sign-up, sign-in and account management
  • Providing the service (storing and syncing vocabulary cards and study records, providing AI features, etc.)
  • Providing paid services, and managing payments and usage limits
  • Responding to inquiries and delivering notices
  • Analysing usage to improve the service and develop new features
  • Preventing misuse, maintaining security and fixing errors
  • Preventing re-registration by users whose agreement was terminated for a violation, or who deleted their account while their use was restricted
  • Meeting obligations under applicable law

2. Personal information we process

  • Account information: email address, the record of your acceptance of the Terms of Service (the version accepted and when)
  • Service use information: information you create or enter while using the service (vocabulary cards, study records, settings, words, example sentences and requests you submit to AI features, etc.), and service usage records
  • Payment information: records of payments and subscriptions for paid services
  • Automatically collected information: IP address, access logs, cookies, device and browser information
  • Re-registration prevention information: an irreversibly transformed value of the email address of a user whose agreement was terminated under the Restriction of Use section of the Terms of Service, or who deleted their account while their use was restricted

3. Retention

We keep personal information until you leave the service (account deletion). Information that must be preserved under applicable law is kept for the period that law sets, and access logs are kept for up to 3 months.

Re-registration prevention information is kept for 3 years from the date the agreement was terminated, or from the date the account was deleted while its use was restricted, and then destroyed. We process it on the basis of our legitimate interest in preventing a restriction or termination from being evaded by deleting the account and registering again (Article 15(1)(6) of the Personal Information Protection Act); the email address itself is not kept.

4. Destruction

Personal information whose retention period has ended or whose purpose has been achieved is destroyed without delay. Electronic files are deleted in a way that cannot be restored, and copies remaining in backups are deleted according to the backup cycle (within 7 months at most).

5. Processors and transfers abroad

To provide the service, we entrust the processing of personal information as shown below. The processors are located outside the Republic of Korea, so personal information is transferred abroad (Personal Information Protection Act, Article 28-8(1)3). Personal information is sent over the network when you use the feature concerned, and each processor keeps it until the purpose of the entrustment is achieved or the entrustment contract ends.

Processor (country)TaskInformation transferredContact
Anthropic, PBC (United States)Providing AI featuresWords, example sentences and requests you submit to AI features[email protected]
Google LLC (United States)Sign-in, usage analysisEmail address, automatically collected informationGoogle Privacy Policy contact form
Paddle.com Market Ltd. (United Kingdom)Payment processing (payments, recurring-payment management, refunds, receipts)Account identifier[email protected]

If you do not want your information transferred abroad, you can stop using the feature concerned; that feature is then unavailable.

6. Your rights and how to exercise them

You can at any time request access to, correction or deletion of your personal information, suspension of its processing, and withdrawal of consent, by emailing the privacy officer below. You can also delete your account yourself in Settings; your personal information is then handled under the retention and destruction sections above. Requests can also be made through a legal guardian or an authorized representative. Only people aged 14 or older can sign up. Processing the personal information of a child under 14 requires a legal guardian's consent, so we do not accept sign-ups from children under 14.

7. Security measures

To process personal information safely, we apply technical and administrative safeguards such as access control and encryption in transit.

8. Cookies and similar technologies

We use cookies to keep you signed in and to analyse usage (Google Analytics). You can refuse cookies in your browser settings, and in regions where the consent banner is shown you can also refuse them with the banner and with the Analytics cookies setting in Settings. Refusing the sign-in cookies means you cannot stay signed in.

9. Privacy officer

  • Department handling privacy matters and complaints: VocaDict Operations Team
  • Email: [email protected]

10. Changes to this policy

When we change this policy, we post it on this page together with its effective date.