Privacy Policy

1. Information we collect

We collect the following:

• Parent account: your email address and basic profile information from Google when you sign in, and — if you subscribe — a customer and subscription identifier from our payment processor (we never receive or store your full card number).
• Child profiles you create: the name or nickname you enter, age, grade level, chosen phonetic script (Pinyin or Zhuyin), and a chosen avatar. We recommend using a first name or nickname only.
• Learning activity: lessons completed, scores, streaks, pearls, and similar progress data used to save and personalize each child’s learning.
• Technical data: limited cookies and log data needed to keep you signed in and to keep the Service secure. We do not use third-party advertising or cross-site tracking cookies.

2. How we use information

• To provide the Service — sign-in, saving progress, and personalizing lessons to the child’s grade and script.
• To process and manage subscriptions and the free trial.
• To keep the Service secure and prevent abuse.
• To respond to your requests and send essential service messages. We are not an advertising business.

3. Children’s privacy (COPPA)

Mandarin Quest is intended for use by parents and guardians on behalf of their children; it is not directed to children to sign up on their own. A parent or guardian creates the account and adds each child profile.

By creating a child profile, the parent or guardian consents to our collection of the limited information described above for the sole purpose of providing the learning experience. We do not require a child to disclose more information than is reasonably necessary, we do not show children behavioral advertising, and we do not make a child’s information public.

Parents can review, edit, or delete a child’s profile and data at any time from the parent dashboard, or by emailing us. Deleting a child profile or the account permanently removes the associated learning data.

If you believe a child provided us information without a parent’s involvement, contact privacy@mandarin-quest.com and we will delete it.

4. How information is shared (service providers)

We do not sell personal information. We share information only with the service providers that operate the Service, under their terms:

• Supabase — authentication and database hosting (stores your account and the profiles and progress you create).
• Stripe — payment processing for subscriptions (Stripe handles card details directly; we receive only customer and subscription identifiers).
• Google — Google Sign-In, and Google Cloud (Vertex AI) to generate the spoken audio in lessons (lesson text is sent to Google to synthesize speech).
• Our in-app “Bubble” assistant, which uses an AI provider to answer questions about the app.
• We may also disclose information if required by law or to protect the rights, safety, and security of our users and the Service.

5. Cookies

We use only essential cookies needed for sign-in and session security. We do not use advertising or analytics cookies that track you across other sites.

6. Data retention

We keep your information for as long as your account is active. When you delete a child profile or your account, the associated data is deleted. Backups are cycled out in the ordinary course of business.

7. Your rights and choices

You can access, correct, or delete your information from the parent dashboard, or by emailing privacy@mandarin-quest.com.

Depending on where you live, you may have additional rights. California residents (CCPA/CPRA), residents of the EEA and UK (GDPR), and Massachusetts residents (Mass. Gen. Laws ch. 93A and ch. 93H) may have rights to access, correct, delete, or restrict use of personal information. We honor these requests as required by applicable law, and we do not sell or “share” personal information for cross-context behavioral advertising.

8. Security

We protect information using encryption in transit, access controls (row-level security), and reputable infrastructure providers. No method of transmission or storage is 100% secure, but we work to protect your information.

9. International users

We are based in the United States and process information there. If you use the Service from outside the United States, you understand your information will be processed in the U.S.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, take reasonable steps to notify you.

11. Contact us

Questions or privacy requests: Cedarwind — privacy@mandarin-quest.com.