Privacy Policy

1. Information We Collect and Use

• Account information (provided by you): When you sign in through providers such as Google or Apple, we collect profile data needed to create and manage your account.
• Learning content (generated during use): To support cloud sync and backup, we store your vocabulary, learning cards, stories, and chat history on our servers.
• AI input data (submitted when you use AI features): Text, images, and audio you provide are processed to generate AI replies, recognition results, or learning suggestions.
• Usage diagnostics: We collect crash logs and basic performance data to improve reliability.

We do not sell your personal data to third parties.

2. AI Data Sharing and Consent

When you use AI features, we present an in-app prompt and obtain your consent before any data is transmitted. We clearly explain:

• What data types will be sent (such as text, image, audio, and necessary request metadata).
• Who receives the data (the third-party AI provider).
• Why the data is processed (to return the requested feature result).

Data is used only to return the AI feature result you requested. You can withdraw consent in the app via Settings > AI Data Sharing, or by contacting our privacy officer.

3. Third-Party Recipients and Sharing Details

To provide our service, we may share limited necessary data with:

• AI provider: Tencent Hunyuan large language model service, which receives your AI input data (text, images, audio) to generate responses.
• Authentication providers: Services such as Firebase Auth, Google Sign-In, and Sign in with Apple to process sign-in and identity checks.
• Cloud infrastructure providers: For encrypted data storage, synchronization, and backup.

We work with providers that commit to data protection standards no less than those required by this policy and applicable law.

Tencent Hunyuan terms are available at https://cloud.tencent.com/document/product/301/97822.

4. Data Storage and Security

We use industry-standard security practices, including encrypted transmission, to protect personal data from unauthorized access, disclosure, or loss.

5. Your Rights

• Access and correction: You can review and update account profile information.
• Withdrawal of consent: You can withdraw consent in the app via Settings > AI Data Sharing, disable permissions such as camera and microphone in system settings, or contact us by email for optional data processing.
• Account deletion timeline: You can request account deletion in the app at any time. We generally complete review and handling within 15 business days after receiving your request.
• Data retention and deletion: After account deletion, primary service data is typically deleted or anonymized within 30 days, and encrypted backup data is typically overwritten within 90 days. Where required by law, we may retain necessary data for the legally required period.

6. Children's Privacy

We do not knowingly collect sensitive personal data from children under 13 without appropriate consent and supervision.

7. Policy Updates

We may revise this Privacy Policy to reflect legal, operational, or product changes. Material updates will be communicated through appropriate channels.

8. Contact Us

If you have questions about privacy, contact us at support@flagsay.com.