This Privacy Policy explains how Uncle J's English ("we", "us", "our") collects, uses, shares, and protects your personal information when you use our website and online English tutoring service (the "Service") at unclejesl.fun. We aim to comply with the EU/UK GDPR and the Republic of Korea Personal Information Protection Act (PIPA). By using the Service or checking the consent box at sign-up, you agree to this Policy.
1. Who we are (Data Controller)
Uncle J's English operates the Service and is the controller of your personal information. For any privacy request or question, contact hello@unclejesl.fun. Where required by PIPA, the operator serves as the Chief Privacy Officer.
2. Information we collect
- Account information — name, email, password (stored only as a salted hash by our auth provider), preferred language, public handle, profile bio, and avatar if you add one.
- Lesson & learning data — bookings, schedules, goals and progress, teacher feedback, notebook entries, stamps and rewards.
- Payment information — handled by Stripe. We do not store your full card number; we receive only a transaction reference and purchase details.
- Communications — support/lesson-chat messages and emails.
- AI practice content — text (and any images) you submit to our assistant "Stella" or roleplay, sent to our AI providers to generate a response.
- Video sessions — run through Daily.co; we do not record classes unless we tell you in advance and obtain consent.
- Technical data — essential login/session cookies and basic device/usage info needed to operate and secure the Service.
3. How we use your information
- To create your account and provide the Service.
- To process payments and manage lesson credits.
- To communicate with you (confirmations, reminders, support).
- To power AI features and daily learning content.
- To keep the Service secure, prevent abuse, and meet legal obligations.
- To improve the Service. We do not sell your personal information.
4. Legal basis & consent
Under GDPR we rely on consent, performance of our contract, legitimate interests, and legal obligations. Under PIPA we rely on your opt-in consent and providing the service you request. You may withdraw consent at any time (Section 7).
5. Service providers (sub-processors)
We share the minimum personal information needed with:
- Supabase — database and file storage (US) — the full range of your account, lesson, and learning data.
- Vercel — website hosting and request logs (US).
- Stripe — payment processing (US) — your email and purchase metadata.
- Resend — transactional email (US) — your name and email.
- Daily.co — live video classroom (US) — your display name during the call.
- OpenRouter & Anthropic — power our AI assistant "Stella" and roleplay (US). Only the text (and any attachments) you submit is sent — your name and email address are never included in an AI prompt. (Context such as your CEFR level and current page may be included.)
- Slack — routes support and Stella escalations to our team (US) — receives your name, email address, and an excerpt of the relevant conversation.
- Calendly — trial/booking scheduling.
6. International data transfers
Our providers — including Supabase, Vercel, Stripe, Resend, Daily.co, OpenRouter/Anthropic, Slack, and Calendly — store and process data in the United States. If you are in Korea, the EU, or elsewhere, your information may be transferred to and processed by these recipients in the US. By using the Service and providing consent, you acknowledge this; we take reasonable measures to protect it.
7. Your rights
Subject to your jurisdiction (GDPR/PIPA and others) you may:
- Access and obtain a copy of your information.
- Correct inaccurate information.
- Delete your account and personal information.
- Withdraw consent or object to/restrict processing.
- Request portability of your data.
8. How to exercise your rights
Email hello@unclejesl.fun. You may also complain to the Korea Personal Information Protection Commission (PIPC) or your local authority.
9. Data retention
We keep your information while your account is active and as needed to provide the Service, then delete or anonymize it within a reasonable period, unless longer retention is required by law (e.g., tax/payment records). You can request deletion at any time.
AI practice content — your messages to our assistant "Stella" and your roleplay conversations, together with the AI's replies and any attachments you send — is stored in our database and linked to your account. This content is retained while your account is active; we do not currently run an automated process to delete it, and we are working toward a defined retention policy for this data. Attachments you send to our support team (for example, screenshots) are stored in the same way.
10. Children
The Service is intended for adult learners. We do not knowingly collect information from children below the local-law age (e.g., under 14 in Korea) without verifiable guardian consent.
11. Cookies
We use only essential cookies for login/session and security. We do not use third-party advertising cookies.
12. Security
We use industry-standard measures (encryption in transit, access controls, database row-level security). No method is 100% secure, but we work to safeguard your data and will notify users/authorities of a material breach as required by law.
13. Changes to this Policy
We may update this Policy. We will post the new effective date and, for material changes, notify you. Continued use means acceptance.
14. Contact
Questions or requests: hello@unclejesl.fun. See also our Terms of Service.
This document is provided for transparency and is not legal advice. Before scaling, a qualified attorney should review it.