Effective · 25 August 2026

Privacy policy

This notice applies only to Cadenvia : Mandarin Journey. Data without a product identifier remains part of Cadenvia: English Journey and is not migrated or reinterpreted.

Data we process

We may process account identifiers and sign-in provider data; learning progress, answers, saved words and review schedule; subscription status and store transaction references; device installation and notification preferences; diagnostics and the four analytics events described in the app. We do not include typed Hanzi, transcripts or lesson text in analytics.

Voice, audio and AI

After consent, the Tutor, writing feedback and editable speech-transcript features send OpenAI the typed content or transcript, the activity prompt and context, recent Tutor history, Mandarin level and explanation language. Recommendations may also send weak skills and eligible-activity metadata. A security identifier does not directly contain the account name or email, and those account fields are not inserted automatically, but free text may contain personal data. The system speech-recognition service may process microphone audio on-device or remotely to create the editable transcript. Cadenvia does not retain that raw audio or send it to the Mandarin backend, Tutor, or OpenAI. Text may be moderated before a response. AI does not decide levels, XP, mastery or entitlement. Under OpenAI’s standard API settings, API data is not used to train models unless the account opts in, while abuse-monitoring logs may retain prompts and responses for up to 30 days. Retention may be longer when required by law or reasonably necessary to protect OpenAI's services or third parties from harm.

Why and where

We use the data to authenticate, deliver lessons, synchronise progress, restore purchases, provide support, prevent abuse and satisfy legal obligations. Service providers may include Firebase/Google Cloud, Apple, Google Play, OpenAI and Cloudflare. Processing can occur outside your country with appropriate contractual and technical safeguards.

Retention and security

We keep data only while needed for the stated purpose, legal obligations, dispute handling and fraud prevention. Product data is scoped by user and product. App Check, platform attestation, encryption in transit and access controls are used where available. No system can promise absolute security.

Your choices and rights

You can opt out of optional analytics and notifications, request a product-scoped export, and request deletion from the Profile area. Deleting the account does not cancel an App Store or Google Play subscription; manage it in the store first. Apple authorisation is revoked when technically and legally required.

Contact and changes

Use the support page for privacy requests. Material changes will be dated and communicated through the app or site before they take effect.