Effective date: [2026-07-20] · Notice date: [2026-07-20]
Oing Lab (the "Company") establishes and discloses this Privacy Policy pursuant to Article 30 of the Personal Information Protection Act (PIPA) in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly. The Company complies with PIPA, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and other applicable laws and regulations. kopcast is one of the Company's Linked Services, operated under a single O!ng Account (see Article 6).
Article 1 (Purposes of Processing and Legal Basis)
① The Company processes personal information for the following purposes. The legal basis for each item collected is established pursuant to Article 15(1) of PIPA as set out below.
| Information collected | Purpose of processing | Legal basis |
|---|---|---|
| Email, name (via Google login), Google account identifier (sub), O!ng member identifier | Account registration and management; O!ng Integrated Account; service provision | Performance of contract (Art. 15(1)(4)) or consent (Art. 15(1)(1)) |
| Service usage and learning records (videos viewed, dual-subtitle use, saved grammar and vocabulary, review history) | Service provision and personalized learning | Performance of contract (Art. 15(1)(4)) |
| Device and browser information, access IP, cookies, access logs, advertising and content impression and click records | Service improvement and statistics, prevention of unauthorized use, and ad display | Legitimate interests (Art. 15(1)(6)) or consent (Art. 15(1)(1)) |
| Email (for marketing) | Sending marketing and promotional information (Pathfinder, the O!ng podcast, events) by email | Consent — optional (Art. 15(1)(1)) |
② Where the Company processes personal information on the basis of legitimate interests, such processing is limited to the extent that those interests clearly outweigh the rights of the data subject.
Article 2 (Items of Personal Information Collected)
(Required) Email, name, and Google account identifier (sub) received via Google login; O!ng member identifier. (Automatically collected) Device and browser information, access IP, cookies, access logs, service usage and learning records, and advertising and content impression and click records (measured on the Company's own servers). (Optional) Consent to receive marketing information by email.
Article 3 (Google Login and Items Received from Google)
When a user registers or signs in with Google, Google processes the user's information and provides the following items to the Company: ① the Google account identifier (sub); ② email address (and email-verified status); and ③ name and profile image. Consent to provision by Google is obtained by Google; separate consent to the Company's collection and use is obtained by the Company at the time of sign-up.
Article 4 (Retention Period)
① The Company destroys personal information without delay once the purpose of processing has been achieved or upon withdrawal of membership. However, the following information is retained for the period required by applicable law.
| Records | Retention period | Legal basis |
|---|---|---|
| Website and service access logs | 3 months or more | Protection of Communications Secrets Act; Security Measures Standards |
② Personal information that must be retained after account deletion pursuant to a legal obligation is stored separately from other personal information and is not used for any purpose beyond that prescribed by law. When paid services (e.g., subscriptions) are introduced, retention items for contracts and payments under the Act on Consumer Protection in Electronic Commerce will be added.
Article 5 (Personal Information of Users Under 18 and Children)
① The Service is available to users aged 18 or older; the Company restricts registration by users under 18 through date-of-birth verification at sign-up.
② Pursuant to Article 22-2 of PIPA, the Company does not, as a general rule, collect personal information from children under 14, and obtains the consent of a legal representative where such collection is unavoidable. If the Company becomes aware that a child under 14 has registered without the consent of a legal representative, it destroys the relevant information without delay.
Article 6 (O!ng Integrated Account and Linked Services)
The Company operates several services — the O!ng Lab website, O!Korean, kopcast, and Pathfinder (the "Linked Services") — as a single business operator (the Company; business registration no. 179-45-01005) using one integrated account (the "O!ng Account"). Creating an O!ng Account is a prerequisite for using the Service; when a user registers through kopcast, a single O!ng Account is created, and the personal information is processed by the Company as one and the same personal information controller. Because all Linked Services are operated by the same controller, the use of personal information across the Linked Services does not constitute provision to a third party under Article 17 of PIPA and is limited to the purposes set out in Article 1. The Linked Services currently are: the O!ng Lab website, O!Korean, kopcast, and Pathfinder (this list is updated through this Policy).