Privacy Policy
Last updated: August 18, 2026
1. Introduction
This Privacy Policy explains how FlixFluent ("we", "our", or "the Service"), operated by Flixfluent Co. Ltd., processes personal data when you use our language learning Chrome extension and website. Data Controller: Flixfluent Co. Ltd. Seoul, South Korea Email: We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR), PIPA (Personal Information Protection Act of Korea), and applicable data protection laws.
2. Data We Collect
2.1 Account Information Email address: Required for account creation and authentication. Name: Used for account identification. Profile picture: Optional, obtained from your sign-in provider (Google, Microsoft, Kakao, or Naver) if you use social login. 2.2 Learning Data Language preferences: Your native language and target language selections. Extension settings: Preferences such as auto-pause and playback speed. Saved vocabulary and training progress: words you save and your review activity, linked to your account. Text you interact with: when you hover over or select a word or sentence (on Netflix, on YouTube, or on a website where you have enabled FlixFluent), that text and its surrounding sentence are sent to our servers to generate the translation, explanation, or pronunciation audio you requested. 2.3 Technical Data Authentication tokens: Temporary tokens from your OAuth provider (Google, Microsoft, Kakao, or Naver). Session data: Essential for maintaining your login session. Error logs: Technical information when errors occur (via Sentry). Browser type and extension version. Usage counters: daily counts of feature use (such as the number of translations requested), used for fair-use limits. Referral attribution: a first-party cookie (ff_ref) set when you arrive through a referral link, read once by the extension to apply your referral discount. 2.4 Payment Information We do NOT collect or store payment information. All payment processing is handled by Stripe, which processes your payment data under their own privacy policy.
3. Legal Basis for Processing
We process your data based on: Contract performance (Article 6(1)(b) GDPR): To provide the FlixFluent service you have subscribed to. Legitimate interests (Article 6(1)(f) GDPR): For service improvement, security, and error tracking. Legal obligations (Article 6(1)(c) GDPR): To comply with tax and accounting requirements. Consent (Article 6(1)(a) GDPR): For optional features such as profile pictures from social login.
4. How We Use Your Data
We use your personal data to: (a) Provide and maintain the FlixFluent extension and service. (b) Authenticate your account via Google or Microsoft OAuth. (c) Process your subscription through Stripe. (d) Personalize your language learning experience. (e) Track your saved vocabulary and learning progress. (f) Provide customer support. (g) Monitor and fix errors via aggregated error reporting. (h) Comply with legal obligations. We will NEVER sell your personal data, use your data for advertising, or share your data except as described in this policy.
5. Data Sharing and Third-Party Services
We share data only with essential service providers: 5.1 Authentication Providers Google, Microsoft, Kakao, and Naver: For OAuth login only. We receive only your email, name, and optional profile picture. 5.2 Payment Processing Stripe: Handles all payment processing. We never see or store your card details. 5.3 Error Tracking Sentry: For error monitoring and service reliability. Only technical error data is shared. 5.4 Streaming Platforms FlixFluent reads subtitles within your browser and sends their text to our servers to generate the translations and explanations shown to you. We are NOT affiliated with, endorsed by, or partnered with Netflix Inc. or YouTube (Google LLC) in any way. We do not share your personal data with any streaming platform, and we do not access your streaming account credentials or your platform viewing history. Subtitle content belongs to the respective platforms and their licensors. You must have your own valid account on the respective streaming platform to use FlixFluent. 5.5 AI Processing OpenAI: subtitle lines and the words or sentences you ask about are sent to OpenAI through our servers to generate translations, explanations, and pronunciation audio. This content is sent without your name or email, and under our API terms it is not used to train OpenAI's models. 5.6 Email Communications ActiveCampaign: processes your email address and account lifecycle events to send transactional emails and, where you have consented, marketing emails.
6. International Data Transfers
As a globally available service, we may transfer data outside the European Economic Area or your country of residence. We ensure appropriate safeguards through: Standard Contractual Clauses with service providers. Adequacy decisions where applicable. Your explicit consent for certain transfers.
7. Data Retention
We retain your data only as long as necessary: Active account data: During your subscription plus 30 days grace period. Closed account data: Deleted within 90 days of account closure. Legal records: Up to 10 years for tax and accounting compliance. Security and error logs: Maximum 12 months.
8. Your Rights
Under GDPR and applicable data protection laws, you have the right to: (a) Access your personal data. (b) Rectify inaccurate data. (c) Erase your data ("right to be forgotten"). (d) Restrict processing. (e) Data portability (receive your data in a standard format). (f) Object to processing. (g) Withdraw consent at any time. To exercise these rights, contact: Response time: Within 30 days.
9. Data Security
We implement appropriate technical and organizational measures including: Encryption in transit (HTTPS/TLS) and at rest for sensitive data. Regular security assessments. Access controls and authentication. Incident response procedures. However, no method of transmission over the Internet is 100% secure.
10. Browser Extension Data
The FlixFluent Chrome extension stores your preferences and settings locally on your device using Chrome's storage API. Preferences such as your native and target language are synced with our servers to enable cross-session persistence. By default, the extension activates only on Netflix and YouTube. You can optionally enable it on other websites of your choice; this is strictly per-site and opt-in, and you can turn it off or revoke a site's access at any time. On sites you have enabled, text is processed only when you hover over or select it to request a translation or explanation. The extension does not read, store, or transmit the pages you browse, and it does not collect your browsing history. Our website uses cookies for authentication, locale preference, referral attribution, and A/B testing, and uses Google Tag Manager (Google Analytics) and Meta Pixel for aggregated marketing measurement.
11. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. Users under 16 in the EU require parental consent. If we discover that data from a child under 13 has been collected, we will delete it promptly. Parents may contact us at to review or request deletion of their child's information.
12. Data Breach Notification
In case of a data breach affecting your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and notify you directly if the breach poses a high risk to your rights.
13. Changes to This Policy
We may update this Privacy Policy to reflect service changes, legal requirements, or best practices. We will notify you of material changes via email. The date of the latest revision is indicated at the top of this policy. Continued use of the Service after changes constitutes acceptance of the updated policy.
14. Complaints
You have the right to lodge a complaint with a supervisory authority in your country of residence. For users in South Korea, complaints may be directed to the Personal Information Protection Commission (PIPC). For users in the EU, you may contact the data protection authority in your member state.
15. Contact Us
For privacy-related inquiries: Flixfluent Co. Ltd. Seoul, South Korea Email: This privacy policy is provided in multiple languages for international users. In case of conflict between translations, the English version prevails.