Privacy Policy

Effective Date: 2026-05-14

RiceCake (operated by Moncoco, business registration number 108-34-07302, hereafter "the Company") respects user privacy and complies with the Personal Information Protection Act (PIPA), the Act on Promotion of Information and Communications Network Utilization and Information Protection, and other applicable Korean laws. This Privacy Policy explains what personal information we collect and how we use, retain, and protect it.

Article 1. Personal Information We Collect

We collect the following personal information when you use our service:

  • Account: email address, password (hashed), display name, and optional phone number.
  • Student profile: learning preferences, location preferences, and a visitor cookie identifier.
  • Teacher profile: real name, profile photo, bio, languages, teaching specialties, hourly rate, availability, and identity verification documents (photo ID and verification video).
  • Lessons and messages: booking records and conversation history.
  • Payment: transaction records (transaction ID, amount, status). Card numbers and authentication details are handled directly by the payment provider and are not stored by us.
  • Automatic: IP address, browser user agent, access logs, and cookies.

Article 2. Purpose of Collection and Use

We use personal information to provide and improve the service, manage member accounts and authentication, facilitate teacher-student matching and lesson bookings, process payments and refunds, prevent fraud and abuse, deliver service notifications, respond to customer inquiries, and comply with legal obligations.

Article 3. Retention Period

We retain personal information only as long as necessary for the stated purposes. Account information is retained until the account is deleted. Records of contracts and subscription withdrawals are retained for 5 years under the Act on Consumer Protection in Electronic Commerce. Records of customer complaints and dispute resolution are retained for 3 years. Login records are retained for 3 months.

Article 4. Third-Party Provision

We do not provide personal information to third parties for marketing or commercial purposes. We may disclose personal information when required by law or by a legitimate request from a competent authority.

Article 5. Outsourcing of Personal Information Processing

We outsource the following processing activities to the listed providers:

  • Toss Payments Inc.: payment processing and refunds.
  • Hosting infrastructure provider: data hosting and storage.
  • Email delivery provider (SMTP): transactional email delivery.

Article 6. Overseas Transfer

Some service providers may store data outside Korea. We require these providers to maintain equivalent security measures and only transfer the minimum information necessary for the contracted service.

Article 7. User Rights

You may at any time access, correct, delete, or request suspension of processing of your personal information, withdraw consent, and delete your account. You can do so through the Manage Account page or by contacting the Privacy Officer listed below.

Article 8. Destruction Procedure

When personal information is no longer needed, we destroy it without delay. Electronic files are deleted using methods that prevent recovery. Paper documents are shredded or incinerated.

Article 9. Security Measures

We protect personal information using HTTPS encryption in transit, password hashing at rest, administrator access controls, and regular security review of code and infrastructure.

Article 10. Cookies

We use cookies for authentication, language preference, anonymous visitor identification, and anonymized analytics. You can refuse or delete cookies through your browser settings. Refusing essential authentication cookies will prevent you from signing in.

Article 11. Privacy Officer

Privacy Officer: BERGESEN NICHOLAS FREDERICK. Contact: [email protected]. Please contact the Privacy Officer for any inquiries, complaints, or requests related to the handling of personal information.

Article 12. Amendments

This policy may be updated to reflect changes in our service or applicable law. We will post any material changes on the website at least 7 days before they take effect.