Privacy Policy
This Privacy Policy describes how XooPark LLC ("XooPark", "we", "us", or "our") collects, uses, and shares information when you use the PineNutty: Drama English mobile application, website, browser extension, and related services (collectively, the "Service").
1. Information We Collect
Information you provide:
- Account information — email address, display name, and authentication credentials when you create an account or sign in with a third-party provider (such as Apple or Google).
- Learning preferences — your native language, target language level, selected word books, exam track (e.g., TOEFL, IELTS, GRE), and voice/picture preferences.
- Support communications — messages you send us, such as support requests or feedback.
Information collected automatically:
- Activity in the Service — your activity while using the Service, such as words you save or review, quiz answers, drama and story viewing progress, streak data, content you create or interact with, and comparable activity from other features we offer now or may add in the future. This is core to how the Service works (e.g., the AI algorithm needs your review history).
- Search history — the terms you search for inside the Service, such as words you look up and dramas or stories you search for.
- Words you translate — if you use the PineNutty browser extension, the words you double-click to translate are sent to our servers, together with the surrounding text of the words they appear in and the URL of the page, so that you can review them in context. They are saved to your review feed when you are signed in. We do not send or store the full text of the pages you visit.
- Identifiers — a user ID for your account, and device identifiers such as an app installation ID and push notification token, used to keep you signed in, sync your progress across devices, and attribute analytics and crash reports.
- Device and usage data — device type, operating system, app version, language settings, IP address, and usage analytics used to operate and improve the Service.
- Approximate location — a coarse, city- or region-level location inferred from your IP address, used for analytics, regional content and pricing, and security. We do not request or collect precise (GPS) location.
- Diagnostics — crash reports, performance data such as launch times, hangs, and error rates, and other diagnostic logs.
Payment information: Purchases made through the Apple App Store or Google Play Store are processed by Apple or Google; we do not receive your card details. Web purchases are processed by Stripe, which handles your payment details under its own privacy policy. We receive only transaction confirmations and your purchase history — which subscriptions or products you bought, and when they renewed, lapsed, or were refunded.
Some of this information is linked to your account (for example, your email address, user ID, saved words, and subscription status). Some of it we receive or keep only in aggregated or de-identified form that is not linked to you, such as crash and performance statistics reported at the app level.
How this maps to our App Store privacy labels. The data types we declare to Apple are: contact info (email address), identifiers (user ID, device ID), usage data (product interaction, search history), purchases (purchase history), location (coarse location), and diagnostics (crash data, performance data, other diagnostic data). We declare that we use them for app functionality, analytics, product personalization, and our own marketing — and that none of them are used to track you (see Tracking and advertising).
2. How We Use Information
- To provide and personalize the Service — including generating your word feed, scheduling AI algorithm reviews, and recommending dramas and stories at your level;
- To generate learning content — vocabulary you are studying may be used as input to AI services that generate personalized stories, illustrations, and audio;
- To process subscriptions and verify purchases;
- To monitor, debug, and improve the Service, including analyzing aggregated usage patterns;
- To communicate with you about the Service, including service announcements and support responses;
- To market and promote our own products — sending you news, offers, learning tips, and promotions about PineNutty, measuring how our own marketing and campaigns perform, and deciding which of our features to tell you about. You can opt out of promotional messages at any time (see Your rights and choices);
- To protect the security and integrity of the Service and comply with legal obligations.
3. How We Share Information
We do not sell your personal information. We share information only with:
- Service providers — partners who process data on our behalf, under contractual terms that limit them to our instructions. These include Google LLC, whose Firebase services (Google Analytics for Firebase, Crashlytics, Cloud Messaging, and In-App Messaging) we use for usage analytics, crash and performance diagnostics, push notifications, and our own in-app announcements — see Google’s Privacy Policy; and Stripe, Inc., which processes payments for purchases made on the web — see Stripe’s Privacy Policy. We use cloud hosting, AI content generation, and text-to-speech providers in the same capacity;
- Platform providers — Apple and Google, for in-app purchase processing and sign-in, as applicable;
- Legal authorities — when required by law, legal process, or to protect the rights, safety, and property of XooPark, our users, or others;
- Business transfers — in connection with a merger, acquisition, or sale of assets, in which case this Policy will continue to apply to your information.
4. Tracking and Advertising
We do not track you across other companies' apps and websites. We do not link the data we collect with data from third parties for advertising purposes, we do not share it with data brokers, and we do not use the advertising identifier (IDFA). We do not sell or share your personal information for cross-context behavioral advertising, and the Service does not display third-party advertising.
The only advertising and marketing we do with your information is our own — telling you about PineNutty features, content, and offers, and measuring how those campaigns perform.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. You may delete your account at any time from within the app, or by emailing [email protected]; upon deletion we remove or anonymize your personal information in our own systems within 30 days, except where retention is required by law (e.g., transaction records). See Deleting your account for what is deleted and what is retained.
Analytics and diagnostics data held by our analytics and crash reporting providers follows their own retention schedules and is not always erased on that same 30-day timeline. Event-level and user-level analytics records are retained for up to 2 months from your last activity in the Service, after which they expire automatically. This data is used only for the purposes described in this Policy, and never to advertise to you (see Tracking and advertising).
6. Your Rights and Choices
- Access and portability — you may request a copy of the personal information we hold about you;
- Correction — you may update your account information in the app or ask us to correct inaccuracies;
- Deletion — you may delete your account and associated data;
- Opting out of marketing — you may opt out of promotional emails using the unsubscribe link in any such message, and turn off promotional push notifications in your device settings or in the app. You will still receive essential service messages, such as security, billing, and support responses;
- Objection and restriction — where applicable law provides, you may object to or ask us to restrict certain processing.
Depending on where you live (for example, the EU/EEA, UK, or California), you may have additional statutory rights. To exercise any right, contact us at [email protected]. We will respond within the timeframe required by applicable law.
7. Children's and Minors' Privacy
The Service is intended for adults 18 and older. It is not directed to minors, and we do not knowingly collect personal information from anyone under 18.
If you believe someone under 18 — and in particular a child under 13 — is using the Service or has provided us personal information, please report it to us at [email protected] with any details that help us identify the account. We will review the report, may contact you or the account holder for more information, and will take the action we consider appropriate under applicable law, which may include restricting or closing the account and removing the associated information.
8. Security
We use administrative, technical, and physical safeguards appropriate to the nature of the data, including encryption in transit, access controls, and managed cloud infrastructure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. International Transfers
Your information may be processed and stored in countries other than your own, including the United States. Where we transfer personal information out of the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (SCCs) — together with the UK International Data Transfer Addendum where the UK GDPR applies — as the legal safeguard for that transfer, and our service providers are engaged under data processing terms that incorporate those clauses. You may request further information about these safeguards by contacting us at [email protected].
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other reasonable means before the changes take effect. The "Effective date" above reflects the latest revision.
11. Contact Us
For privacy questions or requests, contact XooPark LLC at [email protected].