Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email & Password login: your email address and an encrypted password hash.
• Sign in with Google: your Google account name, email address, and profile photo, as provided by Google OAuth.
• Sign in with Apple: your name and email address (or Apple's private relay email), as provided by Apple authentication.
• Guest mode: no account is created. Progress data is stored locally on your device only and is not linked to any personal identity.

1.2 Learning & Usage Data

To provide and sync your learning progress, we store in Firebase Firestore:

• Words marked as learned
• XP points earned and current rank
• Day streak count and last activity date
• Quiz and flashcard session history
• Shop inventory (Streak Freeze, XP Boost, Hint Pack counts)
• App settings and preferences

1.3 AI Chat Content

When you use the AI Chat feature ("Ah Ming"), your text and voice messages are processed by Google Gemini AI via Firebase AI Logic. Chat messages may be temporarily processed by Google's infrastructure to generate responses. We do not store the full content of your AI chat conversations in our own databases.

Please do not share sensitive personal information (e.g. passwords, financial details) in the AI chat.

1.4 Purchase & Subscription Data

In-app purchases and subscriptions are processed by Apple App Store or Google Play. We use RevenueCat to manage subscription status. RevenueCat receives your anonymised App User ID, your device platform, and your purchase entitlement status. We do not receive or store your payment card details.

1.5 Advertising Data (Free Users)

If you use the free tier, we display advertisements via Google AdMob. AdMob may collect device identifiers (such as the Advertising ID / IDFA), IP address, and interaction data to serve and measure ads. This data is governed by Google's Privacy Policy. You can limit ad personalisation in your device settings.

1.6 Device & Technical Information

We may automatically collect:

• Device type, operating system version, and app version
• Crash reports and diagnostic logs (via Firebase Crashlytics)
• General region/locale (to select the appropriate TTS voice)

2. How We Use Your Information

3. Third-Party Services

CantoMate uses the following third-party services, each with their own privacy policies:

We recommend reviewing the privacy policies of these providers for more details on how they handle your data.

4. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only:

• With the third-party services listed in Section 3, as necessary to provide App functionality.
• When required by applicable law, court order, or governmental authority.
• To protect the rights, property, or safety of CantoMate, our users, or the public.

5. Data Retention

We retain your account and learning data for as long as your account remains active. If you delete your account, we will delete your personal data from our systems within 30 days, except where we are required to retain it for legal purposes.

Guest mode data is stored locally on your device only. Uninstalling the App will remove this data permanently.

6. Your Rights & Choices

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data.
• Object to or restrict certain processing activities.
• Data portability — receive a copy of your data in a structured format.
• Withdraw consent at any time, where processing is based on consent.

To exercise these rights, please contact us at support@cantomate.com. We will respond within 30 days.

You may also manage ad personalisation directly through your device settings (Advertising ID / Limit Ad Tracking on iOS; Advertising ID reset on Android).

7. Children's Privacy

CantoMate is intended for general audiences. We do not knowingly collect personal information from children under the age of 13 (or under 16 in the European Economic Area) without verifiable parental consent.

If you believe a child has provided us with personal information without parental consent, please contact us at support@cantomate.com and we will promptly delete such information.

8. Data Security

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS)
• Firebase Security Rules to restrict database access
• Password hashing (managed by Firebase Authentication)

No system is completely secure. While we strive to protect your data, we cannot guarantee absolute security. We encourage you to use a strong, unique password and keep your device updated.

9. International Data Transfers

CantoMate is operated from Hong Kong. By using the App, your data may be processed on servers located in other countries, including the United States (Google Firebase and RevenueCat infrastructure). We rely on appropriate safeguards (such as standard contractual clauses) where required by applicable law.

10. Cookies & Similar Technologies

The App does not use browser cookies. However, our third-party advertising provider (Google AdMob) may use mobile advertising identifiers (IDFA on iOS, AAID on Android) to serve relevant ads. You can reset or limit these identifiers through your device's privacy settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you within the App or by email (if you have provided one). The "Last updated" date at the top of this page will reflect the most recent revision. Your continued use of the App after changes are posted constitutes acceptance of the updated Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

CantoMate
Email: support@cantomate.com
Website: cantomate.com