Privacy Policy

Effective date: October 24, 2026 · Last updated: October 24, 2026 (clarified device and environment information stored with in-app inquiries, internal notification fields, and inquiry retention: one year after receipt)

October 15, 2026 revision: stated the requirement to be aged 14 or older, and confirmation at first launch. October 13, 2026 revision: changed the AI processors to Anthropic, PBC and OpenRouter, Inc. (including connected language model providers). Processing purposes and transferred information remain unchanged.

Bulgyeong (불경, the "App") lets users read original Buddhist scriptures, translations and commentary, and exchange scripture-based answers with AI. SangLimSoft (상림소프트, the "Company") complies with the Personal Information Protection Act and other applicable laws. This policy applies to the App and the Bulgyeong website (bulgyeong.sanglimsoft.com).

1. Registration and Anonymous Accounts

The App provides no registration or login feature. At first launch, an anonymous account is automatically issued to distinguish users. The Company does not collect directly identifying information such as email address, name, phone number, date of birth or profile photo, and does not use social login.

The anonymous account is maintained only on that device. It cannot be recovered after uninstalling the App or changing devices, and the Company has no means to link that account to a user on another device.

2. Information Processed

A. Information entered or generated by users
- Questions: questions entered in the App or website and the immediately preceding exchange
- Answers: answers generated in response to questions
- Bookmarks: answers saved by the user
- Reports: reports of inappropriate answers

B. Information recorded automatically
- Anonymous account identifier
- Last-use time
- Usage environment: device type (iOS or Android), device model, app version, installation source, country setting and language setting
- Usage records for calculating the daily allowance of free questions

The App does not include IP addresses in usage environment information sent. Usage statistics and error information are described separately in Section 6. The App does not obtain a terms acceptance number from a server or provide a way to view one in Settings, and does not attach a terms acceptance number to in-app inquiries.

C. In-app inquiries
When you use Contact us in the App settings, the message, optional reply email, app name, app version (including build number), device model, operating system and its version, device language setting, platform (such as iOS or Android), IP address, and receipt time are stored in the company’s inquiry database (Supabase, Inc., stored in South Korea). If an account identifier is available, it is appended to the end of the message. Before sending, you can review the app version, device model, operating system, language, and account identifier under “Information sent with your inquiry”. They are used to answer inquiries, investigate errors using the app version and device environment, handle requests to exercise your rights, and prevent abuse (IP address). Records stored in the inquiry database through the App or the website support form are automatically deleted one year after receipt. A notice (app name, platform, inquiry type ("inquiry" for in-app inquiries), app version, receipt time, reply email, and the first 300 characters of the message (including the appended account identifier if it falls within those 300 characters)) is sent to the Company’s internal Slack (Section 5).

3. Voice Information

The microphone is activated only while you press the microphone button in the input field. Recorded audio is passed to the operating system’s speech recognition feature and converted into text.

Recognition may take place on the device or on the operating system manufacturer’s (Apple or Google) speech recognition servers. The device and operating system settings determine how it is processed; the App does not choose. Processing on the manufacturer’s servers is governed by that manufacturer’s privacy policy.

The converted text appears in the input field. It is not transmitted externally until you send it, after which it is processed in the same way as a question described above.

The Company does not store the audio itself or send it to its servers. You may withdraw microphone permission at any time in your device’s app permission settings. You can still ask questions by typing.

4. Purposes of Processing

- Generating answers to questions
- Storing and restoring conversations and bookmarks
- Receiving and reviewing reports of inappropriate answers
- Managing the daily allowance of free questions
- Identifying and removing accounts created through automation
- Improving the service through error analysis and answer quality checks

Stored conversations are used only for these purposes and are not used to train language models.

In-app inquiry information is used to answer inquiries, investigate errors using the app version and device environment, handle requests to exercise your rights, and prevent abuse (IP address).

5. Processors and International Transfers

The Company sends user input needed to generate answers to the following providers.

A. Answer generation — overseas (United States)
Recipients: Anthropic, PBC (contact: privacy@anthropic.com); when Anthropic, PBC cannot process a request, OpenRouter, Inc. (contact: privacy@openrouter.ai) and language model providers connected through it
Country: United States
Information: the user’s question and the immediately preceding exchange
Purpose: generating answers to questions
Time and method: transmitted over communication networks when the user sends a question
Retention: as needed to generate the answer. Under its terms, Anthropic, PBC does not use this content for model training and, under its policy, automatically deletes it within 30 days of receipt (exceptions include addressing usage-policy violations and legally required retention).

B. Scripture search — overseas (United States)
Recipients: the Company’s scripture search server (on Oracle Corporation’s cloud infrastructure) and Cloudflare, Inc.’s AI inference feature used to convert sentences to vectors
Country: United States
Information: a search sentence rewritten from the question
Purpose: finding scripture passages relevant to the question
Time and method: transmitted over communication networks when the user sends a question
Retention: as needed for the search

C. Storage and hosting
Conversation, bookmark and report records and anonymous account information are stored in a database provided by Supabase, Inc. in South Korea. The website is served on Cloudflare, Inc.’s infrastructure.

D. Usage Statistics and Error Information — overseas (United States)
Recipients: Oracle Corporation’s cloud infrastructure hosting the Company’s collection server, and Cloudflare, Inc. relaying and protecting that traffic
Country: United States
Information: Section 6 usage statistics and error information
Purpose: operating the collection server
Time and method: transmitted over communication networks while the App is used
Retention: Section 8

E. Inquiry notifications — overseas (United States)
Recipient: Slack Technologies, LLC (Salesforce) (contact: privacy@slack.com, Slack privacy policy: https://slack.com/trust/privacy/privacy-policy)
Country: United States
Information: app name, platform, inquiry type ("inquiry" for in-app inquiries), app version, receipt time, reply email, and the first 300 characters of the message (including the appended account identifier if it falls within those 300 characters)
Purpose: notification of received inquiries
Time and method: transmitted over communication networks when the user submits an in-app inquiry or website support form
Retention: follows the provider’s policy

You may refuse the transfers in A and B by not sending questions. As answer generation is a core feature, refusing means you can only read scriptures and cannot use conversations. To object to the transfers in C and D, contact Section 12.

Please avoid entering identifying information such as names, contact details or resident registration numbers in questions.

6. Usage Statistics and Error Information

The Company sends App usage information to its collection server to improve the service and fix errors. Categories are:
- App launch, close, install, update and other usage records
- Identifiers of screens visited in the App
- Key actions (reading scriptures, completing the first reading, creating or deleting bookmarks, sending questions and completing, stopping or failing answers, opening cited sources, choosing follow-up questions, reporting answers and reason categories, read-aloud, creating or deleting conversations, sharing and action failures)
- Categories of question and answer length, time to answer and failure causes (without question or answer content)
- Repeated taps in a short time, their screen coordinates and the structure of the tapped screen element
- Technical information on errors and crashes
- Environment information such as device type, operating system version, app version and language setting
- Anonymous installation and account identifiers grouping these records

The following are not collected:
- Screen recordings or displayed content
- User questions or AI answer content
- Microphone audio

Error information includes error type, message and the program execution path leading to it. Release builds do not expose source file names or locations in execution paths. Error messages may contain some values being processed at the time.

7. Website (bulgyeong.sanglimsoft.com)

- Usage analysis: records such as pages visited, clicks and scrolling, and device and browser information are collected with a web analytics tool provided by Google LLC.
- Cookies and similar technologies: cookies and browser storage are used for usage analysis. You can block cookies in your browser settings; some features may then be restricted.
- Inquiry form: the support form collects request type, email address, message and IP address (to prevent abuse) and stores them in the Company’s inquiry database (Supabase, Inc., stored in South Korea). A notice (app name, platform, inquiry type ("inquiry" for in-app inquiries), app version, receipt time, reply email, and the first 300 characters of the message (including the appended account identifier if it falls within those 300 characters)) is sent to the Company’s internal Slack (Section 5, international transfers, E).
- Except for the inquiry form, the website does not request names, email addresses or phone numbers.

8. Retention and Destruction

The Company destroys information without delay when its processing purpose has been achieved. Retention by category is as follows.
- Conversations, bookmarks and reports: until the user deletes them or requests destruction.
- Anonymous accounts and environment information: until the anonymous account is deleted.
- Anonymous accounts identified as created through automation (accounts that have not agreed to the terms after seven days) are automatically deleted.
- Usage statistics and error information: automatically deleted one year after receipt by the collection server; deleted without delay on earlier request. Collection server backups are deleted 30 days after creation, so records may remain for up to 30 days.
- Records stored in the inquiry database through the App or the website support form are automatically deleted one year after receipt.

Deleting a conversation from the list hides it from the App and website. To request complete deletion of records remaining on the server, contact Section 12.

9. Your Rights and How to Exercise Them

Because the App has no registration feature, it has no account withdrawal menu. You may exercise your rights as follows.
- Delete conversations: delete individual conversations from the conversation list.
- Delete bookmarks: delete individual bookmarks from the bookmark list.
- Withdraw microphone permission: at any time in your device’s app permission settings.
- Other requests for access, correction, deletion or suspension of processing: use the contact below.

Anonymous accounts have no email address or phone number, which limits identity verification. When we receive a request, we explain what is needed to verify it. If you have uninstalled the App or changed devices, there is no way to identify the anonymous account and we may be unable to handle the request.

10. Children’s Personal Information

The App is for users aged 14 or older and asks for confirmation at first launch. This is a self-declaration; date of birth and other age information are not requested. If we learn that personal information of a child under 14 has been processed without a legal representative’s consent, we delete it without delay.

11. Security Measures

- Row-level database access controls prevent each anonymous account from accessing records other than its own conversations and bookmarks.
- Communications between the App or website and servers are encrypted using TLS.

12. Privacy Officer and Contact

- Service: Bulgyeong (불경)
- Operator: SangLimSoft (상림소프트)
- Email: support@sanglimsoft.com or the customer support form

You may report or seek advice on privacy infringements from:
- Personal Information Infringement Report Center: privacy.kisa.or.kr / 118 (no area code in Korea)
- Personal Information Dispute Mediation Committee: kopico.go.kr / 1833-6972
- Supreme Prosecutors’ Office Cyber Investigation Division: spo.go.kr / 1301
- Korean National Police Agency Cyber Safety Bureau: ecrm.cyber.go.kr / 182

13. Notices

This policy may change with changes in laws, policies or the service. Changes will be announced in App notices and on this page.

October 24, 2026 revision: Clarified device and environment information stored with in-app inquiries, internal notification fields, and inquiry retention (one year after receipt). Corrected the descriptions to reflect that the App does not obtain terms acceptance numbers from a server or provide a way to view them in Settings.

October 15, 2026 revision: stated the requirement to be aged 14 or older and confirmation at first launch (Section 10).