Privacy Policy

Effective date: 25 October 2026

This Privacy Policy explains how Keiko-Lab (“we”, “us”, or “our”) handles information in connection with the Koala Chinese 樹熊認字 mobile application, also published as “Koala Learning – Learn Chinese” (the “App”), on Google Play and the Apple App Store.

The App is an educational app designed primarily for children and families to learn Chinese characters and Cantonese through games and guided activities. The App may also be used by parents, guardians, teachers, and adult learners supporting Chinese language learning. We designed the App to minimize data collection and to avoid advertising and tracking.

Summary

  • No account is required to use the App. Learning data stays on the device by default.
  • A parent or guardian can optionally create a family account (with an email address) to sync progress across devices. Only then is data stored on our servers.
  • We show no advertising and use no advertising SDKs, analytics SDKs, crash-reporting SDKs, or cross-app tracking. We do not sell personal information.
  • Photos taken with the App’s camera feature stay on the device.
  • Subscription purchases are processed by Google Play or Apple, not by us.
  • You can delete the family account at any time. See how to delete your account.

Information We Process

Depending on how the App is used, the App may process the following categories of information.

1. Profile and learning information (on the device)
Child profile names, ages and avatars entered by a parent or guardian (we suggest using a nickname rather than a full name); learning progress, including completed activities, mastery status, streaks, stars, XP, achievements, writing practice data, and drawings and writing the child saves; and App settings such as language, selected voice, sound preferences, screen-time limits, and reminder preferences. This information is stored on the device and used only to provide core App functionality.

2. Optional family account and sync
If a parent or guardian turns on sync (a premium feature, behind a parent check), they sign in with an email address by entering a one-time code we email to them. We then store, on our servers: the parent’s email address; the family account; the child profiles (names, ages, avatars); learning progress; saved writing and drawing artwork; and a list of the devices linked to the account. Data is sent over encrypted connections (HTTPS). It is used only to sync the family’s devices and to let the parent sign in again. It is not used for advertising, profiling, or analytics.

Our sync service is hosted by Supabase, our service provider, in Singapore. The child never creates an account or enters an email address; only a parent or guardian can.

3. Subscription and purchase status
If you buy or restore a subscription, the App checks the status of your subscription with Google Play (Google Play Billing) on Android, or Apple (StoreKit) on iOS, so premium features can be unlocked. We do not receive your payment card details. If a subscription is linked to a family account so premium works across devices, we keep the store’s purchase identifier and subscription status.

4. Camera and photos
The App’s camera feature (photo learning) asks for camera permission. Photos are processed on the device to find Chinese characters. On Android, text recognition uses Google ML Kit running on the device; on iOS it uses Apple’s on-device frameworks. Photos you choose to save are kept in the App’s private storage on the device and are not uploaded to us. You can turn off the camera permission in your device settings at any time.

Google ML Kit may send Google technical diagnostics and usage metrics, such as device model, operating system version, app version, a per-installation identifier, performance data, and error codes. According to Google, ML Kit does not send your images or the recognized text to Google, and does not share this diagnostic data with third parties. See Google’s ML Kit data disclosure.

5. Notification preferences
If reminders are enabled, the App stores whether daily reminders are on and the selected time, and schedules them using your device’s local notification system. Reminders are generated on the device. We do not use push notifications.

6. Speech and voices
The App speaks using your device’s text-to-speech engine (for example Google Text-to-Speech on Android, or Apple’s speech voices on iOS). Depending on the voice you install, the engine may process speech on the device or through its provider’s service, under that provider’s terms. The App does not send the spoken text to us.

7. iCloud sync (iOS)
On iOS, if iCloud is enabled for the device and the App’s iCloud features are available, profile and learning progress data may sync through Apple’s CloudKit services associated with the parent’s or guardian’s Apple account. This data is held by Apple, not by us.

8. Device backups
Your device’s own backup service (Android Auto Backup to your Google account, or iCloud Backup on iOS) may copy the App’s local data, such as profiles, progress and saved artwork, to your backup. Sign-in tokens and cached purchase status are excluded from Android backups. Backups are controlled by your device and account settings.

9. Technical information
When sync is on, our hosting provider may process technical information such as IP address and request times in server logs to operate and secure the service.

Advertising and Tracking

We do not show advertising in the App. We do not use third-party advertising SDKs, behavioral advertising, analytics SDKs, crash-reporting SDKs, or cross-app tracking, and the App does not use the advertising ID. We do not sell personal information. We do not collect personal information beyond what is reasonably necessary to provide the App’s educational features, subscriptions, optional reminders, and optional sync.

How We Use Information

We use information only to:

  • Provide educational gameplay and progress tracking
  • Save settings and preferences
  • Enable optional subscriptions
  • Enable optional family-account sync and let the parent sign in
  • Schedule reminders requested by the parent
  • Maintain, secure, and fix problems with the App and our sync service

Children’s Privacy

The App is intended for children to use with parental or guardian involvement. Purchases, sync, and account deletion sit in a parent area protected by a parent check, and only a parent or guardian can create a family account. The App may also be used by parents, guardians, teachers, and adult learners.

We aim to comply with applicable children’s privacy laws, including COPPA, and to follow the Google Play Families Policy. We do not knowingly collect personal information from a child other than the profile details a parent chooses to enter. If you believe a child has provided us with personal information directly, contact us and we will delete it. Parents and guardians can review and request deletion of profile and progress data as described below.

Sharing of Information

We do not sell or rent personal information. We share information only with service providers that help us run the App, and only as needed:

  • Google (Google Play Billing and subscription management, ML Kit diagnostics, device speech engine, and Android backup) and Apple (App Store purchases and iCloud/CloudKit on iOS), under their own terms and privacy policies
  • Supabase, which hosts our optional sync service

We may also disclose information where required by law or in connection with a business transfer, subject to applicable law.

Data Storage and Retention

Learning data and settings are stored on the device. If a family account is used, a synced copy is kept on our servers until the parent deletes a profile or the account. We delete the account’s data when the account is deleted, as described below. We keep billing records for as long as tax, accounting, and app store rules require. We retain other information only as long as needed to provide the App’s functionality, comply with law, resolve disputes, and enforce agreements.

Data Deletion and Your Choices

Parents or guardians may:

  • Delete a child profile in the App. This removes the profile’s data from the device and, if sync is on, from our servers.
  • Delete the family account in the App (For Parents, then Settings, then Delete Family Account), or by emailing us. This permanently removes the parent email, child profiles, progress and artwork stored on our servers. Instructions, and what we keep, are on our Delete Account page.
  • Turn off reminders or camera access in the App or in device settings.
  • Turn off iCloud for the App in Apple device settings (iOS).
  • Cancel subscriptions in Google Play or in their Apple account settings. Deleting the account does not cancel a subscription.
  • Uninstall the App to remove local App data from the device.

Depending on where you live, you may have the right to ask us to give you a copy of, correct, or delete your personal information. To make a request, or for help with privacy or deletion, contact us at support@keiko-lab.com.

Security

We use reasonable measures designed to protect information processed by the App, including encrypted connections and access controls on our servers. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

International Users

The developer is based in Australia. Synced data is stored on servers in Singapore. If you use the App elsewhere, information may be processed on your device and by Google, Apple and our service providers in other countries, subject to applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, provide additional notice within the App or through the app store listing.

Contact Us

If you have questions about this Privacy Policy or want to make a privacy or deletion request, contact:

Keiko-Lab
support@keiko-lab.com