Privacy Policy

1. Who we are and what this policy covers

AiCocoding ("we", "us") provides Flashcards, an English-learning app used by families. This policy covers the Flashcards app and the account, learning and support services connected to it. Parents may use the companion Mini Program to arrange learning, while children use the app to practise.

Privacy contact: flashcards@etoneyang.vip. This policy describes data handling; it does not replace any additional notice or consent required when a sensitive feature is used.

2. Information we process and why

Account and profile: a Flashcards user ID, WeChat sign-in identifiers (such as OpenID and, when provided by WeChat, UnionID), authentication records, nickname and avatar. Profile information you choose to provide can include a birthday, age or other profile details. We use this information to sign you in, recognise the same account and display your profile.

Learning activity: selected courses, plans, favourites, practice and quiz results, scores, progress and learning history. We use these records to provide learning and revision features, synchronise your account and show your learning history. A score is a learning aid, not a professional assessment.

Voice, text and images: microphone input, recordings, recognised speech, messages, conversation context and media you choose to upload or export. Processing depends on the feature, as explained below.

Purchases and entitlements: where you obtain paid or granted content, we process order references, payment status and entitlement records to provide access and handle support, settlement or refunds. Payment providers process payment credentials under their own terms.

Service and support information: network request information, IP address, timestamps, app or device compatibility information, error records and information you send us when requesting help. We use necessary technical information to operate, secure and troubleshoot the service. Third-party components may also process technical data needed for their functions.

3. Microphone, recordings and online AI features

Microphone access is used when you choose a speaking, recording or voice-conversation feature. You can refuse or revoke microphone permission in your device settings; features that need it will then be unavailable.

Some follow-along speech recognition runs on the device, and recordings can be stored locally for playback. This does not mean that all audio stays on the device: an export or download workflow can upload the recording to create a downloadable file, and online speech or AI conversations transmit relevant audio, text, transcripts and context to our services and the processing providers used for that feature.

Online services process this content to recognise speech, generate a response, produce audio and maintain the conversation. Conversation and service records can be retained as described in the retention section. Do not include unnecessary personal details about yourself or a child in an open-ended conversation.

If you choose to provide an avatar or other media, the selected file can be uploaded to provide that feature. Media or camera access is subject to the device permissions used by the relevant feature.

4. Service providers and disclosures

Tencent/WeChat provides sign-in and related authorisation functions; the Tencent Mini Program multi-platform runtime also supports app functions. Information needed for authentication and runtime operation is processed by the relevant Tencent services.

Online speech and AI processing can use Alibaba Cloud/Qwen, ByteDance Volcengine/Doubao, DeepSeek or Google/Gemini integrations, depending on the feature and service configuration. When a provider is used, the relevant input (such as speech, a transcript, a message, a lesson image or context) is sent to it to deliver the requested function. A provider is not involved merely because its integration exists in our code. Provider terms, age restrictions, processing regions and retention conditions apply to the services actually enabled.

Hosting, storage, network and support providers process information needed to deliver and protect the service. We may also disclose information when required by law or where necessary to protect users, investigate abuse or address a security incident.

Profile information and learning results may be displayed where you participate in a leaderboard or choose a sharing feature. Consider the information included before sharing. We do not sell personal and sensitive user data or use children's personal data for targeted advertising.

5. Children and parents or guardians

Flashcards supports family-supervised learning. A parent or guardian should manage the account and review the features a child uses, especially microphone access, media sharing and online conversations. Applicable requirements for notice, parental consent and children's data must be met before the relevant processing takes place; accepting this policy alone does not provide a separate parental-consent verification process.

Parents or guardians can contact us to ask about information associated with their child, request correction or deletion, or raise a concern about an online feature. We may verify the requester's authority to protect the child and the account.

If we learn that a child's personal information has been processed without legally required authorisation, we will take appropriate steps to stop the unauthorised processing and delete the information unless retention is legally required.

6. Security, storage and international processing

We use access controls and transport-security measures to protect personal information in our online services. Authentication credentials should be kept private. No storage or transmission system can guarantee absolute security.

Data may be processed on our service infrastructure and by the providers used for a selected feature, in locations different from where you live, including China where relevant services operate. Transfers handled by us are subject to the safeguards required by applicable law. Contact us if you need details about a particular feature's processing location.

7. Retention

We retain account and synchronised learning records for as long as needed to provide the account and the features you use. Conversation, export, operational and security records are retained only for their service, troubleshooting, security or legal purposes. Retention can differ by feature and provider; local recognition does not imply zero retention by an online provider.

When information is no longer needed, it should be deleted or de-identified. After a verified deletion request, information within the confirmed scope will be deleted except for information that must be retained for legal obligations, security, fraud prevention or resolving an outstanding transaction. Any necessary exception will be explained when handling the request, and retained information is limited to that purpose.

Local files and exported copies have a separate lifecycle. Removing app data or uninstalling can remove app-local files, but it does not submit a request to delete server data, and copies you saved or shared elsewhere may remain. Backup copies are removed through the applicable backup lifecycle and must not be returned to active use after the underlying data has been deleted.

8. Your choices, account deletion and data requests

You may request access, correction, deletion or other rights available under applicable law. You can also revoke device permissions, sign out, stop optional features or remove local app data. Signing out, uninstalling or disabling an account is not the same as deleting the account and associated server data.

Select whether to delete your Flashcards account and associated data, or delete data while keeping your account, then submit your Flashcards user ID below. A parent or guardian can submit a request for a child. Do not enter a WeChat password, verification code or payment secret. For data-only requests, the specific scope will be confirmed during ownership verification and manual handling. Contact the privacy email above for other privacy rights.

We may ask for reasonable verification of account ownership or guardian authority, then explain the scope and any necessary retention. Account deletion concerns the same Flashcards account used across the app and companion services and can affect plans, favourites, learning records and entitlements. Subscriptions or payments handled by another provider may require separate action with that provider. Submitting the form starts a request; it does not immediately or automatically delete data. A submitted user ID alone does not establish account ownership. We store the requested user ID, request type, a request reference, submission time and processing status, and use short-lived network-derived information to limit abusive submissions. This information is used to receive, verify and handle the request, and retained only as needed for that process or a necessary legal or security purpose.

9. Changes and contact

We update this policy when the service or its data practices change. The latest version is identified by the update date. Where required, a material change will be accompanied by additional notice and consent before the changed processing starts.

Developer: AiCocoding. App: Flashcards. Privacy questions and account/data requests: flashcards@etoneyang.vip.