Privacy Policy

Effective and last updated: November 10, 2026

Dapple is made by One Immersion LLC ("we", "us"), a New Jersey limited liability company. This policy explains what information we handle when you use the Dapple website and flashcard app at korean.oneimmersion.com, the Dapple Chrome extension, the Dapple Android app, and related services, and the choices you have. Questions or requests: language.flipper@gmail.com.

The short version

• Your flashcards, review history, settings, the words you tap while reading and the words and sentences you save from pages are stored in your own Google Drive, in a private folder only Dapple can open. We don't receive them.
• The extension and the Android app change pages on your device. The text of the pages you read is never sent to us.
• Our server keeps only what it needs for your plan and billing: your email, Google account ID, plan and subscription details.
• No ads, no analytics or tracking tools, and we don't sell or share your personal information.
• We never ask for, receive or use your passwords, logins or cookies for other websites, and we don't connect to other services on your behalf. In the Android app's built-in browser you sign in on each site's own page, and the sign-in stays on your phone.

1. Information we handle

Information our server stores

• Account identifiers: your email address and Google account ID, from Google sign-in.
• Plan: Free or Premium, and when it last changed.
• Subscription details (if you subscribe): your Stripe customer ID and a short summary of your subscription (monthly or yearly, active or cancelled, and its renewal or end date). If you subscribe in the iPhone or Android app instead: the App Store or Google Play purchase identifier and the same kind of summary.
• Technical logs: our hosting provider records technical details of requests (such as IP address, browser type, time and the page or feature requested). Billing events are logged with your email address and the type of event.
• Support messages: if you email us, your email address and what you write.

Information that stays with you

• Study data (cards, reviews, settings, tapped words, words and sentences you save from pages): saved in Dapple's private folder in your own Google Drive. It goes directly between your browser and Google; it doesn't pass through our servers and we can't read it.
• Browser storage: the website keeps a copy of your cards (for speed), changes not yet saved to Drive, the email of the account you used, your plan and a random device ID (to tell your devices apart; your Google account is what links them for syncing) in your browser. The device ID never reaches our server. The extension keeps your settings, a copy of your known words, your email, your plan pass and daily counts in its own browser storage; the Android app keeps the same in its private storage on your phone.
• Sites you sign in to in the Android app: the app's built-in browser works like any web browser. You type your password on the site's own login page, and the site's cookies (which keep you signed in) are stored by your phone's system web view, inside the app's private storage. Dapple's code doesn't read them, they're never sent to us, and they aren't backed up or copied to other devices. Signing out of a site, clearing the app's storage or uninstalling the app removes them.
• Page text: the extension, and the Android app's built-in browser, read the text of pages you visit, on your device, to swap in Korean words you know. It is never sent anywhere, with one exception you control: when you press Save Sentence or Add card, that word, its sentence, and the page's address (without anything after a ? or #) and title are saved to your own Google Drive with your cards. The suggested meaning for a new word, and the translation of its sentence, come from your browser's built-in translator, which runs on your device; where your browser doesn't have one, you type the meaning yourself.
• Anki files and exports: Anki files you choose to import are read inside your browser, and only the cards from the deck you pick are saved to your Drive. Dapple never changes your Anki collection, doesn't connect to AnkiWeb and never asks for your AnkiWeb login. Exports are created in your browser and saved straight to your computer.

What reaches our server, in full

Only these ever reach our server: your Google sign-in (to confirm who you are), requests to check your plan, start a checkout or open billing, purchases made in the phone apps (to check them with Apple or Google), and Stripe's, Apple's and Google's notices about your subscription. Your cards, reviews, settings, tapped words, saved words and sentences, the pages you read, Anki files and exports never do.

Information we don't collect

We don't collect your name, address, phone number, location, contacts or browsing history, and we don't use analytics, advertising or tracking tools. We never see or store your full card number; Stripe handles payment details. Dapple isn't meant for sensitive information such as health or financial data.

2. How we get it

• From Google, when you sign in: your email address and account ID.
• From Stripe, when you subscribe: your customer ID, subscription status and payment results.
• From Apple or Google, when you subscribe in the phone app: the purchase identifier, which plan it is, whether it's active, renewing, cancelled or refunded, and its end date. We never receive your Apple or Google payment details.
• From you, when you email us.
• Automatically, from our hosting provider's logs when your browser contacts our server.

3. How we use it

• To provide the service: confirm your sign-in, know whether you're on Free or Premium, and unlock Premium features in the app and extension.
• To run billing: create your subscription, show its status, process renewals, cancellations and refunds, and keep your plan correct when Stripe reports a payment or change.
• To keep it secure and working: detect abuse and fraud (for example, people getting around plan limits) and fix errors, using logs.
• To help you when you contact us.
• To meet legal obligations, such as keeping tax and payment records.

We don't use your information for advertising or to build profiles, and we'll ask you before using it for any purpose not listed here.

4. Legal bases (EU and UK users)

Where the GDPR or UK GDPR applies, we rely on:

• Contract: to provide Dapple and your subscription (account, plan, billing).
• Consent: for the Google permissions you grant at sign-in. You can withdraw it at any time at myaccount.google.com/permissions.
• Legal obligation: to keep tax and payment records.
• Legitimate interests: to keep the service secure, prevent fraud and abuse, and fix problems, using logs. You can object to this; email us.

5. Google API data

We ask Google for these permissions only: your email address and basic sign-in (openid, email), and Dapple's own app folder in your Google Drive (drive.appdata), a hidden folder only Dapple can see. We cannot see, open, change or delete any other file in your Drive. Dapple's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use this data for advertising, don't sell it, don't share it with anyone, and no person at Dapple reads it (our server never receives it).

The Dapple Chrome extension processes page text only on your device to show Korean words, and doesn't send it to us or anyone else. The only page text it keeps is a word or sentence you choose to save, which goes to your own Google Drive. Its use of information adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

6. Who we share it with

We share personal information only with service providers that help us run Dapple, under contracts that limit their use of it:

• Google: sign-in, and storage in your own Google Drive.
• Netlify: hosts the website and our plan server.
• Stripe: payments and subscriptions (Stripe's privacy policy).
• Apple and Google: subscriptions bought in the phone apps (Apple's privacy policy, Google's privacy policy).

We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business (in which case this policy would continue to apply to your information). We don't sell your personal information or share it for cross-context behavioral advertising.

7. International transfers

One Immersion LLC is based in the United States, and our providers store and process information in the United States and other countries. If you're in the European Economic Area, the UK or Switzerland, your information is transferred to the US. We rely on our providers' safeguards for these transfers, such as the European Commission's Standard Contractual Clauses and, where a provider is certified, the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.

8. How long we keep it

• Plan and subscription record: while your account exists. We delete it within 30 days of your request, except for parts we must keep for billing records.
• Payment and tax records: as long as the law requires, usually up to 7 years.
• Technical and billing logs: deleted automatically, generally within 30 days.
• Sign-in checks: kept in memory for up to 10 minutes, never saved.
• Plan passes: expire after 4 days.
• Support emails: kept as long as needed to help you, and no longer than 2 years.
• Study data in your Google Drive and browser storage: kept until you delete it (see below). We don't hold a copy.

9. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and get a copy of it;
• Correct it if it's wrong;
• Delete it;
• Move your data: you can download all your cards and reviews any time under Settings → Your data;
• Restrict or object to certain uses, and withdraw consent;
• Complain to your data protection authority (EU and UK users).

To use these rights, email language.flipper@gmail.com from the email address of your Dapple account (so we can confirm it's you). We'll respond within 30 days, or sooner where the law requires. We won't treat you differently for using your rights.

Deleting your data yourself:

• Cards and reviews: Google Drive → Settings → Manage apps → Dapple → Delete hidden app data. Download a copy first under Settings → Your data if you want one.
• Google access: remove Dapple at myaccount.google.com/permissions.
• Browser storage: clear site data for korean.oneimmersion.com in your browser, and uninstall the extension.
• Android app: Settings → Apps → Dapple → Storage → Clear storage (this also signs you out of sites in its browser), or uninstall it.
• Subscription: cancel under Settings → Account, then email us to delete your plan record.

10. California residents

Since launch, we have collected these categories of personal information under the California Consumer Privacy Act (CCPA): identifiers (email address, Google account ID, Stripe customer ID, IP address), commercial information (your plan and subscription), and internet activity (technical logs of requests to our server). We collect them from you, Google, Stripe and our hosting provider, for the purposes in section 3, and disclose them only to the service providers in section 6. We do not sell or share personal information, have not done so since launch, and don't use or disclose sensitive personal information. You have the rights to know, delete and correct your personal information and not to be discriminated against for using them; you can use them yourself or through an authorized agent by emailing us. Because we don't sell or share personal information, we don't need an opt-out link; we treat Global Privacy Control signals as an opt-out request anyway.

11. Cookies and browser storage

Dapple doesn't use advertising or analytics cookies. It uses your browser's storage (local storage and IndexedDB, described in section 1) only to make the app work: remembering which account you used, keeping changes until they're saved to Drive, syncing between devices and loading quickly. Google's sign-in and Stripe's payment pages set their own cookies, which are needed for signing in and paying. You can clear all of this in your browser's settings; the app will then ask you to sign in again.

12. Audio

Korean audio uses the voices built into your device or browser, and Dapple doesn't send the words to us. Some browser voices are online voices (for example, some voices in Google Chrome); with those, your browser sends the word being spoken to its provider to create the audio, under that provider's privacy policy. You can turn off reading words aloud in Settings.

13. Security

Connections to Dapple are encrypted (HTTPS). Your study data stays in your Google account, protected by Google's security. Our server holds only the plan and billing details above, access to it is limited to us, and plan passes are signed so they can't be forged. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.

14. Children

Dapple isn't directed at children under 13, and we don't knowingly collect their personal information. If you believe a child under 13 has given us information, email us and we'll delete it.

15. Other websites

The extension and the Android app's browser work on websites run by others, and our pages link to Google and Stripe. Their own privacy policies apply to what they collect; we're not responsible for their practices.

16. Changes

If we change this policy, we'll update the date above. For material changes, we'll tell you in the app at least 30 days before they take effect, so you can review them or stop using Dapple.

17. Contact

One Immersion LLC
c/o Northwest Registered Agent LLC
971 US Highway 202N, Ste N
Branchburg, NJ 08876, USA
language.flipper@gmail.com