Privacy Policy
Effective 2026-10-16
Who operates pium
pium is operated by Eunice Jung in Hong Kong. Contact the operator about privacy or your data at builtbyeunice@gmail.com. This policy applies to the current adult-only beta at pium.chat. Effective date: October 16, 2026.
Information we use
We use your account identifier, email and authentication information to provide sign-in. Google sign-in supplies identity information from your Google account. Your optional nickname and bio, Korean level, learning preferences, messages, corrections, saved words, reports and feed activity support your learning experience. Account information is needed for cloud saving; a guest trial does not require an account. Avoid submitting sensitive information or information about other people.
Learning data and AI
Guest learning history stays on your browser or device. Signed-in learning history is stored in Supabase. When you request an AI reply or writing review, your profile, level and recent conversation are sent to Google Gemini for generation and safety checks. Voice recordings you submit are sent to Gemini for transcription. Text requested for spoken playback is sent to HeyGen; enabling voice mode also sends new character replies automatically for audio preparation. AI features cannot work without this processing. Starting a live voice call sends microphone audio, your nickname, Korean level and recent chat to OpenAI for real-time speech and transcription. You can mute or end the call at any time. The displayed transcript is saved with your conversation; the application does not save raw call recordings. Live voice is AI-generated and may be inaccurate.
Service providers and international processing
Cloudflare hosts the site and backend; Supabase provides authentication and cloud learning storage; Google Gemini provides AI and transcription; HeyGen provides Listen audio; OpenAI provides live voice conversations; Google provides optional Google sign-in and the Gmail support mailbox. These providers may process information outside Hong Kong or your country. Provider handling also depends on the applicable service plan and contracts. Google may use unpaid-service inputs and outputs for improvement and human review; its paid API terms exclude product-improvement use of prompts and responses but allow limited safety retention. We do not promise zero retention or that provider data stays in one country. Read the linked provider policies below and do not send confidential information.
Necessary storage and cookies
We store login sessions, preferences and learning history on your device. A signed age-confirmation cookie lasts up to 30 days. A trial identifier cookie lasts up to one year. These support authentication, eligibility and usage limits. We do not request your birth date or identity document for the age declaration. Clearing device storage may remove guest progress and sign you out. No advertising trackers are configured in this version.
Usage, security and payments
Cloudflare processes network details including IP addresses to deliver requests. The application keeps feature counts, errors and timing totals under daily hashed identifiers for limits and service operation; these identifiers are pseudonymous, not anonymous. It does not put conversation text or audio into the usage ledger. Rows older than 30 days are pruned during service activity. Public purchasing is disabled. Payment-related records, if any, are stored separately from learning history.
Reports and human access
Optional quality-review copies and support drafts remain on this device. Review copies are limited in number and expire after 30 days; turning optional review off removes its copies. A report opens your email app with the excerpt you choose and is sent only when you send the email. The operator then receives the content and sender address at builtbyeunice@gmail.com. Authorised operators can access cloud records when necessary for support, safety, security or service operation; every conversation is not automatically forwarded to an inbox.
Retention and deletion
Learning records are kept while your account is active, subject to storage limits, until you reset progress or delete your account. Account deletion removes the Supabase account and linked learning record and clears account-specific local review/support data where possible. It does not automatically erase copies on other devices, downloads, emails already sent, older test-payment records or provider logs and backups. Trial and technical records are kept for usage enforcement and security; ask us to review remaining records when you close an account. Support correspondence is kept only as needed to resolve the matter, handle disputes or meet legal requirements. Generated audio may remain with the provider after local history is removed. We assess deletion requests and seek provider assistance where needed; we cannot promise immediate deletion from independent provider systems or backups.
Your choices and rights
Settings lets you edit your profile, disable voice preparation and optional review, export loaded learning data, reset progress and delete your account after signing in again. You can request access to or correction of your personal data from Eunice Jung at builtbyeunice@gmail.com. You may request deletion and other rights available under the law that applies to you. We may verify your identity and respond within applicable legal time limits. You can raise a complaint with Hong Kong’s Privacy Commissioner for Personal Data or your relevant authority.
Adults only and policy changes
pium is for people aged 18 and over. Do not use it or submit personal data if you are under 18. Contact us if you believe a minor’s information has been submitted. We will update this policy when processing changes and provide notice or seek consent where required. International access remains subject to provider-supported regions and applicable law.