In one sentence
We collect only what the app needs to teach your kid Mandarin, we never run third-party ad networks or behavioral analytics on a child profile, and the parent owns the data.
What we collect
For the parent account: email, password (hashed), display name, billing details if you subscribe, and the household configuration you set up. For each child profile: display name, profile color or avatar choice, HSK level, learning progress (which cards are due, accuracy by category), and time-on-task. For voice tutor sessions: live audio that is processed by the tutor and a short transcript used to grade the session.
- No real name required for a child profile
- No location data beyond the country your IP resolves to (for region routing)
- No device contacts, photos, microphone access outside a tutor session, or background activity
What we don't collect
We do not run Google Analytics, Meta Pixel, TikTok pixel, or comparable third-party behavioral analytics on logged-in child profiles. We do not run ad networks anywhere in the product. We do not sell data. We do not build a marketing profile of a child. We do not let the AI tutor browse the web or upload files.
Children under 13 (COPPA)
Bóyǎ is designed for verifiable parental consent. The parent creates the household account and is the data subject of record for every child profile under it. We do not knowingly collect personal information directly from a child without parental consent. A parent may at any time review the data we hold for a child, ask us to delete it, or refuse further collection — email hello@boyapp.io with subject "COPPA".
- Account creation requires a parent email and password
- No outbound email, push, or SMS is ever sent to a child profile
- Parental consent is captured at household creation and re-confirmed on material changes
- Right-to-delete is honored within seven days
Voice and video
The voice tutor (老师 Lin) runs over LiveKit WebRTC with encryption in transit. Audio is processed live by the tutor model; we keep a short, time-limited transcript per session so we can grade the session and audit for off-topic drift. Audio is not used to train third-party models. A parent can disable voice for any child profile from the family dashboard.
Who we share data with (subprocessors)
We work with a small set of named subprocessors. Each is contractually bound to use the data only to provide their service to us.
- Supabase — database and authentication (US or EU region, SOC-2 Type II)
- Anthropic — the model that powers the AI tutor; voice transcripts are not used to train Anthropic models
- LiveKit — real-time voice and video transport for the tutor (encrypted in transit)
- Stripe — billing for paid tiers (we never see your card number)
- Sentry — error logs scrubbed of personal data
Cookies and similar technologies
We use a small number of strictly-necessary cookies for sign-in, session continuity, and remembering the last-visited household. We use a privacy-preserving first-party analytics cookie on the marketing site only (not on logged-in child pages). We do not set third-party advertising cookies.
Your rights
Depending on where you live you have the right to access, correct, export, delete, or restrict processing of personal data we hold about you and the children under your account, and the right to lodge a complaint with your local data protection authority. Email hello@boyapp.io with subject "Privacy" and we will respond within 30 days (usually within 1–2 business days).
How long we keep data
Active accounts: as long as the account is in use. Closed accounts: 30 days, then deleted from production and within 90 days from backups. Voice transcripts: 30 days, then deleted. Aggregated, anonymized usage statistics may be retained longer to improve the product, with no way to re-identify a person.
International transfers
Bóyǎ is operated from the United States and the European Union. Data may be stored or processed in either region depending on where you sign up. Cross-border transfers are governed by standard contractual clauses with our subprocessors where required.
Changes to this Policy
When we change this Policy materially we'll email the parent account on file and post a notice in the app at least 14 days before the change. The effective date at the top of this page reflects the most recent change. Prior versions are available on request.
Contact
Privacy questions, data-subject requests, and COPPA inquiries: hello@boyapp.io with the relevant subject line above. For urgent child-safety concerns use subject "Safety" — those are routed first.