This list is provided by Shanghai Finite Learning Technologies Co., Ltd. to describe the scenarios, scope, purposes, and retention periods for processing personal information by Ciyouqi (iOS version).
“Necessary” means that, when you use a relevant function or choose a relevant sign-in method, the function cannot be completed without the information. “Optional” means that refusing it generally does not affect an account and basic learning functions that are already available. Information marked “sensitive” is processed only for a specific purpose, when fully necessary, and after the applicable consent is obtained in accordance with law. All personal information of children under 14 is protected as sensitive personal information.
Language and Regional Statement
The App currently provides services only to users in Mainland China. The Simplified Chinese version of this list is the formal version and has legal effect. The English and Japanese versions are reference translations provided only to help international users in Mainland China understand it. If the language versions differ, the Simplified Chinese version prevails.
1. Information Collected Directly or Through Functions
| Scenario/function | Types and specific fields of personal information | Sensitivity | Collection method | Purpose | Necessary? | Retention period | Main recipients or storage location |
|---|---|---|---|---|---|---|---|
| First legal-document consent | Age group, legal-document version and language, consent time, and source | The age group and child-consent record are sensitive | Selected by the user and recorded by the system | Apply the correct privacy and minor-protection rules and retain proof of consent | Necessary for account services | During the account lifetime; deleted after account deletion | Device local settings storage; Ciyouqi server |
| Guardian consent for a child under 14 | In-app guardian consent statement and statement time | Yes; record of authorization to process children's personal information | Guardian actively taps the in-app consent statement | Obtain and record guardian consent | Necessary for a child's account services | During the account lifetime; deleted after account deletion | Device local settings storage; Ciyouqi server |
| Account creation and identification | Internal account identifier, user-visible UID, account creation time, verification status, and nickname | Account identifiers require special protection | Generated by the system or set by the user | Distinguish accounts, display profile information, and manage account security | Necessary for account services; nickname optional | During the account lifetime; deleted after account deletion | Ciyouqi server; local cache |
| Email registration/sign-in | Email address, securely stored password value, verification status, and credentials required to complete verification or reset | Email is generally personal information; stored password value and authentication credentials are account-security information | Entered by the user or generated by the system | Create an account, verify identity, maintain sign-in, and recover or protect the account | Necessary when the email method is selected | During the account lifetime; credentials processed according to the relevant verification process and cleared after verification or reset; deleted after account deletion | Ciyouqi server; device secure local storage; Alibaba Cloud email service handles delivery |
| Email verification/password-reset delivery | Email type, sending status, sending time, and necessary delivery-processing information | Delivery records associated with an account and email require special protection | Recorded automatically by the system | Reliably send verification and reset emails, limit abuse, and troubleshoot delivery | Necessary when email verification/reset is used | During the account lifetime; deleted after account deletion | Ciyouqi server; Alibaba Cloud email service |
| Mobile SMS sign-in | Mobile number, verification status, and credentials required to complete verification | A mobile number in an account-authentication context requires special protection; credentials are account-security information | Entered by the user or generated by the system | Verify ownership of the number and create or sign in to an account | Necessary when the SMS method is selected | During the account lifetime; credentials processed through the verification process and cleared after verification; deleted after account deletion | Ciyouqi server; Alibaba Cloud SMS service; device secure local storage |
| One-tap mobile-number sign-in | Verification result, verified mobile number, and credentials required for verification | Mobile number and credentials require special protection | Processed by the Alibaba Cloud Number Verification SDK and relevant mobile operators when actively triggered by the user | Verify the device's mobile number and sign in | Necessary when one-tap sign-in is selected | Account data until deletion; credentials processed through the verification process; third-party periods follow their policies | Alibaba Cloud Number Verification, mobile operators, Ciyouqi server |
| Sign in with Apple | Apple user identifier, name authorized by the user, real or relay email, sign-in binding status; credentials processed through the relevant authentication process | Account identifiers and credentials require special protection | Returned by Apple's authorization page | Create, sign in to, and bind an account | Necessary when Sign in with Apple is selected | During the account lifetime; information held by the App deleted after account deletion | Apple; Ciyouqi server; device secure local storage |
| Sign In with WeChat | OpenID, UnionID (if provided), nickname, and sign-in binding status; credentials processed through the relevant authentication process | Account identifiers require special protection | Returned by the WeChat authorization page and SDK | Create, sign in to, and bind an account | Necessary when Sign In with WeChat is selected | During the account lifetime; deleted after account deletion | WeChat; Ciyouqi server; device secure local storage |
| Sign In with QQ | OpenID, nickname, and sign-in binding status; credentials processed through the relevant authentication process | Account identifiers and credentials require special protection | Returned by the QQ authorization page and SDK | Create, sign in to, and bind an account | Necessary when Sign In with QQ is selected | During the account lifetime; deleted after account deletion | QQ; Ciyouqi server; device secure local storage |
| Personal profile | Nickname set by the user | Generally personal information; content entered by the user that is sensitive is handled according to its actual nature | Entered by the user | Display and identify the account | Optional | During the account lifetime; deleted after account deletion | Ciyouqi server; local cache |
| Vocabulary book browsing and dictionary search | Learning language, vocabulary-book/unit identifiers, search terms, matching method, and result count | Generally personal information, except where the user enters sensitive information | Selected or entered by the user; queried by the server | Display vocabulary books and dictionary search results | Necessary to browse/search | Search terms processed only to complete the query; no separate long-term search history is created | Ciyouqi server; in-memory app cache |
| Learning plan and review settings | Learning language, vocabulary books, daily learning goal, review preferences, mastery standard, maximum interval, words per unit, and learning order | Generally personal information; all are protected as sensitive for children | Selected by the user and recorded by the system | Provide a learning plan, schedule reviews, and synchronize data | Necessary when the relevant learning or synchronization function is used | During the account lifetime; deleted after account deletion | Ciyouqi server; local cache |
| Quiz, display, audio, and interface settings | Quiz and definition/example display settings, audio settings, interface settings, statistics-page order, and vocabulary-book management settings | Generally personal information; all are protected as sensitive for children | Selected by the user and recorded by the system | Provide optional learning, display, and interface preferences | Optional | During the account lifetime; deleted after account deletion | Ciyouqi server; local cache |
| Word learning and memory scheduling | Word identifiers, learning status, proficiency, review count, forgetting count, review interval, previous and next review times | Generally personal information; may reflect individual learning | User actions and system calculations | Schedule personalized reviews, display progress, and synchronize across devices | Necessary for core learning functions | During the account lifetime; deleted after account deletion | Ciyouqi server; local cache |
| Quiz answers | Quiz session/round/card/event identifiers, word identifiers, question type, difficulty, language settings, submitted answer, correct answer, correctness, score, answer time, and practice/new-word marker | May reflect learning ability; all are protected as sensitive for children | Entered by the user and generated/verified by the system | Generate and verify questions, provide feedback, schedule reviews, and calculate accuracy | Necessary when quizzes are used | During the account lifetime; deleted after account deletion | Ciyouqi server; local session cache |
| Incorrect answers and challenge practice | Incorrect words, error count, forgetting count, stability, latest review time, challenge rounds, and practice results | May reflect individual learning; all are protected as sensitive for children | Generated from quiz and review records | Display difficult words, provide practice, and improve the review plan | Necessary when incorrect-answer/challenge practice is used | During the account lifetime; deleted after account deletion | Ciyouqi server; local cache |
| Learning sessions and time | Session identifier, type, status, start/completion time, active learning time, paused time, idle time, total time, word count, unit/vocabulary-book identifier, accuracy, and completion status | Generally personal information; all are protected as sensitive for children | User actions and system records | Save sessions, resume from where you left off, and calculate learning time and completion | Necessary when session-based learning is used | During the account lifetime; deleted after account deletion | Ciyouqi server; local session cache |
| Statistics, vocabulary milestones, and simulations | Daily activity, consecutive study days, vocabulary progress, learning budget, accumulated time, accuracy, memory retention, learning efficiency, difficult words, vocabulary milestones, predictions | May reflect learning performance; all are protected as sensitive for children | Calculated from learning data | Display trends, vocabulary milestones, goals, and progress predictions | Necessary to use the corresponding functions | During the account lifetime; deleted after account deletion | Ciyouqi server; local cache |
| App Store purchases and subscriptions | Product, transaction, purchase/expiration, subscription/renewal status, benefit status, and account-binding identifier | Transaction and subscription records require special protection | Returned by the Apple App Store and verified by the server | Verify transactions, grant benefits, restore purchases, and handle after-sales matters | Necessary for purchase and restoration functions | During the account lifetime; account mappings held by the App deleted after account deletion; Apple retains transactions under its rules | Apple; Ciyouqi server; local benefit cache |
| Subscription eligibility and app integrity | App/device security identifiers, integrity-verification results, and account- or device-level benefit-claim status | Device identifiers and security credentials require special protection | Generated by the App, returned by Apple, and recorded by the server | Prevent transaction fraud, tampering, and repeated claims of limited offers | Necessary when a limited offer or integrity check is used | Account record until deletion; account-unlinked device claim status retained for the offer period or the shortest period needed for abuse prevention | Apple; device secure local storage; Ciyouqi server |
| In-app feedback | Feedback content, category, app/system version, interface language, user identifier, existing verified reply email (if any), and necessary submission/processing information | Depends on the content submitted; do not submit unrelated sensitive information | Entered by the user and recorded automatically by the App/server | Reply to questions, troubleshoot, and improve services | Necessary when feedback is used; feedback itself is optional | Usually 24 months; deleted on account deletion; except where otherwise required by law | Ciyouqi server; Alibaba Cloud email service |
| Contact us by email | Sender and recipient email addresses, email subject, body, and attachments actively added by the user | Depends on the email content | Actively sent by the user in the system email app | Customer service communication | Optional | Retained for the period required by the email provider and customer-service records | Email provider selected by the user; customer-service mailbox |
| System sharing and user-initiated copying | Recommendation text, App Store link, user-visible UID, learning-statistics or vocabulary-milestone image | Generally personal information; an image may reflect learning | Processed only when the user actively taps share or copy | Share recommendation content, learning statistics, or vocabulary milestones | Optional | Not stored on Ciyouqi servers; system recipients and clipboard follow the user's and the relevant system/app's rules | iOS system share sheet; system clipboard; recipient app selected by the user |
| Server operation and security logs | Source IP, request time, request path or result, client/app version, and error summary | IP and logs that can be linked to an account are personal information | Generated automatically when the service is accessed | Security protection, attack detection, troubleshooting, and auditing | Necessary for online services | Processed for the periods required by the actual log category, security protection, troubleshooting, and necessary auditing | Ciyouqi server log systems |
2. Information Mainly Processed on the Device
The following information is mainly stored on the device. When network synchronization or a corresponding function requires it, some information is uploaded as described above:
| Local data | Purpose | Typical storage location | Deletion/clearing method |
|---|---|---|---|
| Sign-in credentials and app/device security identifiers | Maintain sign-in, app integrity, and offer-abuse prevention | Device secure local storage | Account sign-out/deletion clears account credentials; other security identifiers are handled as needed for security and abuse prevention and may be handled through system erasure or by contacting us |
| Legal-document versions, age group, and guardian-statement status | Avoid repeated display and maintain the legal-consent state | Device local settings storage | Account deletion, clearing app data, or uninstalling; some system preferences follow iOS behavior |
| Learning, vocabulary-book, statistics, and session caches | Speed display and support recovery on weak networks | Device local app storage | Sign out, account deletion, clearing cache, or uninstalling |
| Notification authorization status and local reminder schedules | Study reminders and applicable subscription-expiration reminders | iOS notification system and device local settings storage | Disable notifications in iOS Settings, turn off reminders in the App, sign out, or delete the account |
| Subscription-benefit cache | Quickly display current benefits and then reconcile with Apple/server | Device local app storage | Sign out, account deletion, or revalidation |