Privacy Policy | Hagwon Hub

HAGWON HUB — PRIVACY POLICY

Last Updated: April 11, 2026

Effective Date: April 11, 2026

1. INTRODUCTION

1.1 Miozi LLC ("Company," "we," "us," "our") operates the Hagwon Hub platform ("Platform"), including the website and mobile application.

1.2 This Privacy Policy ("Policy") describes how we collect, use, store, protect, and share your personal information when you access or use our Platform. This Policy applies to all Users, including Teachers, Academies, and visitors.

1.3 This Policy complies with the Korean Personal Information Protection Act (개인정보 보호법, "PIPA"), the Act on Promotion of Information and Communications Network Utilization and Information Protection (정보통신망 이용촉진 및 정보보호 등에 관한 법률), and other applicable data protection laws.

1.4 By using the Platform, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your information as described in this Policy.

2. DATA CONTROLLER AND CONTACT INFORMATION

2.1 Data Controller:

Miozi LLC

State of Ohio, United States of America

(Operating the Hagwon Hub platform, serving users in the Republic of Korea)

2.2 Privacy Officer (개인정보 보호책임자):

Email: [email protected]

2.3 General Privacy Inquiries:

Email: [email protected]

2.4 Jurisdiction Note: Miozi LLC is incorporated under the laws of the State of Ohio, USA. For Korean data subjects, Miozi LLC complies with the Korean Personal Information Protection Act (PIPA) as a cross-border personal information processor.

3. INFORMATION WE COLLECT

3.1 Information You Provide Directly

(a) Account Registration Information:

- Full legal name (as on passport)

- Email address

- Password (stored in hashed form only)

- Date of birth

- Country of birth and citizenship

- Current country of residence

- Passport country

- Account type selection (Teacher or Academy)

(b) Teacher Profile Information:

- Teaching experience level

- Job type preference (full-time, part-time)

- Preferred age groups (kindergarten, elementary, etc.)

- Preferred work shift and schedule

- Visa status

- Preferred locations (up to 3 regions/districts)

- Language proficiency levels

- Motivations and background (optional survey responses)

- Notification preferences

- Academy name (Korean and English)

- Business registration number (사업자등록번호)

- Full address

- Official email and phone number

- Website URL

- Founding year and student count

- Hiring manager names and contact information

- Academy description and benefits offered

(d) Documents:

- Passport copies (Teachers)

- Resumes and CVs (Teachers)

- Teaching certificates (TEFL, TESOL, CELTA, etc.) (Teachers)

- Business registration certificates (Academies)

- Owner identification documents (Academies)

- Academy logos and images (Academies)

- Employment contracts (uploaded by Teachers for AI analysis)

(e) Communications:

- Messages sent and received through the in-app messaging system

- Customer support inquiries and correspondence

- Feedback and survey responses

(f) Payment Information:

- Transaction amounts and dates

- Payment method type (credit card, KakaoPay, Naver Pay)

NOTE: Full payment card numbers are processed and stored exclusively by Stripe, our payment processor. Miozi LLC does not store, process, or have access to complete card numbers.

(g) WLB Reviews:

- Category scores (working hours, overtime, salary reliability, etc.)

- Total score calculation

- Submission date and time

NOTE: Reviews are stored in anonymized form. We do not store reviewer identity linked to review content.

(h) Job Posting Content (Academies):

- Position details, salary, requirements, benefits, descriptions

- Fit Score criteria (preferred qualifications, work style, etc.)

3.2 Information Collected Automatically

(a) Device Information:

- Device type and model

- Operating system and version

- Browser type and version

- Screen resolution

- Unique device identifiers

(b) Usage Data:

- Pages and screens visited

- Features used and interaction patterns

- Time spent on each page

- Navigation paths and click patterns

- Search queries entered

- Jobs viewed, bookmarked, and applied to

- Session duration and frequency

- IP address

- Access dates and times

- Referring and exit URLs

- HTTP request headers

- Error logs and crash reports

(d) Location Data:

- Approximate geographic location based on IP address (city/region level)

- We do NOT collect precise GPS location data

- Time zone information

3.3 Information from Third Parties

(a) Social Login Providers: When you authenticate using Google, Apple, Naver Login, or KakaoTalk Login, we receive your name, email address, and profile picture (if available) from the provider. We receive only the information you authorize the provider to share.

(b) Payment Processors: We receive transaction confirmation, payment status, and partial payment information (last 4 digits of card, card network) from our payment processor. We do not receive full card numbers.

4. HOW WE USE YOUR INFORMATION

4.1 Providing and Operating the Platform

- Creating, maintaining, and authenticating your account

- Facilitating job matching between Teachers and Academies

- Calculating and displaying Fit Scores

- Aggregating and displaying WLB Scores

- Processing job applications

- Enabling in-app messaging between Users

- Processing payments for job postings

- Delivering notifications about applications, messages, and account activity

4.2 AI Contract Analysis

- When you upload an employment contract, our AI system analyzes it to identify potential legal issues, illegal clauses, and areas of concern based on Korean labor law

- Contract content is processed temporarily during the analysis session

- Contract content is NOT stored after analysis completion, NOT shared with any third party (including the employing Academy), and NOT used for any purpose other than generating the analysis for the uploading User

4.3 Improving and Developing the Platform

- Analyzing usage patterns to improve features and user experience

- Identifying and fixing technical issues

- Developing new features based on user behavior and feedback

- Conducting internal research and analytics

4.4 Safety, Security, and Legal Compliance

- Detecting and preventing fraud, spam, and abuse

- Verifying Academy and Teacher identities

- Enforcing our Terms of Use and Platform rules

- Investigating violations and disputes

- Complying with legal obligations, including tax reporting, court orders, and regulatory requirements

4.5 Communications

- Sending service-related notifications (application updates, message alerts, document reminders)

- Sending security alerts (unusual login activity, password changes)

- Sending Platform announcements (policy updates, new features)

- We do NOT send marketing emails to third parties. We do NOT sell or rent your contact information for marketing purposes.

5. LEGAL BASIS FOR PROCESSING

Under PIPA and applicable data protection law, we process your personal information on the following legal bases:

5.1 Consent (동의): For account creation, profile information, document uploads, WLB reviews, and optional features. You may withdraw consent at any time (see Section 9).

5.2 Performance of Contract (계약의 이행): Processing necessary to provide Platform services you have requested, including account management, job matching, messaging, and payment processing.

5.3 Legal Obligation (법적 의무): Processing required to comply with Korean law, including tax reporting, financial record-keeping, and responses to lawful government requests.

5.4 Legitimate Interests (정당한 이익): Processing necessary for our legitimate interests, including Platform security, fraud prevention, analytics, and service improvement, balanced against your privacy rights.

6. DATA SHARING AND DISCLOSURE

6.1 Sharing with Other Users

(a) Teacher → Academy: When a Teacher applies for a position, their profile information (name, experience, qualifications, certifications, teaching preferences, Fit Score) is shared with the Academy. Uploaded documents are shared only with the Teacher's explicit consent.

(b) Academy → Teacher: When a Teacher views a job posting, the Academy's public profile, posting details, and WLB Score are visible. Personal contact information of Academy staff is not disclosed.

6.2 Sharing with Service Providers

We share information with third-party service providers who assist us in operating the Platform, subject to data processing agreements that require confidentiality and data protection:

(a) Cloud hosting and infrastructure providers

(b) Payment processors (Stripe and supported local processors)

(d) Analytics providers (first-party analytics only)

(e) Customer support tools

6.3 Sharing with Legal Authorities

We may disclose your information when required by:

(a) Korean law, regulation, or legal process

(b) Valid court order or government request

(d) In connection with legal proceedings or investigations

6.4 What We Do NOT Do

(a) We do NOT sell your personal information to any third party

(b) We do NOT share your data with advertisers or ad networks

(d) We do NOT disclose WLB review authorship to Academies

(e) We do NOT use your data for automated decision-making that produces legal effects without human review

(f) We do NOT share your data with data brokers

7. DATA RETENTION

7.1 Active Accounts: Personal data is retained for the duration of your active account.

7.2 Account Deletion: Upon account deletion:

(a) Personal profile data is permanently deleted within thirty (30) calendar days

(b) Messages are deleted from your side within thirty (30) days; the other party's copy is retained per their account status

(d) Application history is anonymized within thirty (30) days

7.3 WLB Reviews: Because reviews are stored in anonymized form (not linked to reviewer identity), they are retained indefinitely. This is necessary to maintain the integrity of the WLB Score system.

7.4 Job Postings: Expired and closed postings are archived in anonymized form for one (1) year for dispute resolution purposes, then permanently deleted.

7.5 Financial Records: Transaction records are retained for five (5) years as required by the Korean Framework Act on National Taxes (국세기본법) and related tax regulations.

7.6 Legal Holds: Data subject to a legal hold, active investigation, or pending litigation will be retained until the matter is resolved, regardless of other retention periods.

7.7 Log Data: Server logs and access logs are retained for ninety (90) days and then automatically deleted.

8. DATA SECURITY

8.1 Technical Measures

(a) Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.3

(b) Encryption at rest: All stored personal data is encrypted using AES-256

(c) Document encryption: Uploaded documents receive an additional layer of encryption and are accessible only to the uploading User and explicitly authorized parties

(d) Password hashing: Passwords are hashed using bcrypt with salt and are never stored in plaintext

(e) Access controls: Role-based access control limits employee access to personal data on a need-to-know basis

8.2 Organizational Measures

(a) Regular security audits and penetration testing

(b) Employee background checks and confidentiality agreements

(d) Incident response plan and team

(e) Data processing agreements with all service providers

8.3 Breach Notification

No system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms:

(a) We will notify affected Users within seventy-two (72) hours of becoming aware of the breach, as required by PIPA

(b) We will notify the Korean Personal Information Protection Commission (개인정보보호위원회) as required by law

(c) Our notification will include the nature of the breach, the data affected, the likely consequences, and the measures taken

9. YOUR RIGHTS

Under PIPA and applicable data protection law, you have the following rights:

9.1 Right of Access (열람권): You may request a copy of all personal data we hold about you. We will provide this within ten (10) business days of your request.

9.2 Right of Correction (정정권): You may request correction of inaccurate or incomplete personal data. We will process corrections within ten (10) business days.

9.3 Right of Deletion (삭제권): You may request deletion of your personal data, subject to legal retention requirements. We will process deletion requests within ten (10) business days.

9.4 Right to Suspend Processing (처리정지권): You may request that we suspend processing of your personal data.

9.5 Right of Portability: You may request to receive your personal data in a structured, commonly used, machine-readable format (JSON or CSV).

9.6 Right to Withdraw Consent: You may withdraw consent for data processing at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

9.7 How to Exercise Your Rights:

(a) Through the Platform: Settings → Privacy → Data Requests

(b) By email: [email protected]

(d) Requests are processed free of charge, except where requests are manifestly unfounded or excessive

10. CHILDREN'S PRIVACY

10.1 The Platform is not intended for, and not directed at, persons under eighteen (18) years of age.

10.2 We do not knowingly collect personal information from individuals under 18.

10.3 If we become aware that we have collected personal information from a minor, we will take immediate steps to delete such information and terminate the associated account.

10.4 If you believe we have collected information from a minor, please contact us at [email protected].

11. INTERNATIONAL DATA TRANSFERS

11.1 Your personal data may be processed on servers located outside of the Republic of Korea. By creating an account and consenting during registration (개인정보 국외이전 동의), you consent to these transfers as described below.

11.2 Primary Cross-Border Transfer — Supabase.

We use Supabase, Inc. (a US-based company) as our primary database, authentication, and storage infrastructure provider. Your personal data — including your account information, profile data, uploaded documents, and messages — is stored on Supabase servers located in the United States.

· Recipient: Supabase, Inc.

· Country: United States of America

· Purpose: Database hosting, user authentication, file storage, real-time messaging

· Safeguard: Data Processing Agreement with standard contractual protections

· Supabase Privacy Policy: https://supabase.com/privacy

11.3 Payment Processing — Stripe.

Payment transactions are processed by Stripe, Inc. (USA). Payment card data is handled exclusively by Stripe and is never transmitted to or stored by Miozi LLC.

· Recipient: Stripe, Inc.

· Country: United States of America

· Purpose: Payment processing only

11.4 Additional Transfers. In addition to the above, your data may be transferred to other service providers located in the United States or other countries for the purposes of email delivery, error monitoring, and customer support tooling. All such transfers are governed by data processing agreements requiring confidentiality and appropriate data protection standards.

11.5 Safeguards. All international transfers are protected through:

(a) Compliance with PIPA cross-border transfer requirements (Article 28-8 et seq.)

(b) Data processing agreements with all international service providers

11.6 If you have questions about international transfers or wish to withdraw consent, contact us at [email protected].

12. AUTOMATED DECISION-MAKING

12.1 Fit Score Calculation: Our Platform uses automated processing to calculate Fit Scores between Teacher profiles and job postings. This automated calculation is used as an assistive tool only and does not produce legal effects. All hiring decisions are made by human Academy representatives.

12.2 Content Moderation: We use automated systems to detect prohibited content (e.g., personal contact information in job postings). Automated decisions to remove content are subject to human review upon appeal.

12.3 AI Contract Analysis: Contract analysis is performed by AI and presented as informational guidance. No automated decisions with legal effects are made based on contract analysis.

13. COOKIES AND TRACKING

Our use of cookies and similar technologies is described in our separate Cookie Policy, which is incorporated into this Privacy Policy by reference.

14. THIRD-PARTY LINKS

The Platform may contain links to third-party websites or services (e.g., Korean Law Information Center, immigration resources). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

15. CHANGES TO THIS POLICY

15.1 We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

15.2 Material Changes: For material changes that affect how we collect, use, or share your personal data, we will:

(a) Provide notice via email to your registered address at least fourteen (14) calendar days before the effective date

(b) Post a prominent notice on the Platform

15.3 Non-Material Changes: Non-material changes (e.g., formatting, clarifications) will be posted on this page with an updated "Last Updated" date.

16. COMPLAINTS

16.1 If you have a complaint about how we handle your personal information, please contact us at [email protected]. We will investigate and respond within thirty (30) calendar days.

16.2 If you are not satisfied with our response, you may file a complaint with:

Korean Personal Information Protection Commission (개인정보보호위원회)

Website: www.pipc.go.kr

Phone: 1833-6972

Questions? Contact us at [email protected]