Privacy Policy

UNIINCN ("we", "our", "the app") is a study companion for the CSCA (Chinese university entrance for international students) and HSK exams. This policy explains what data we collect, how we use it, and the choices you have. It applies to our website, Android app on Google Play, and iOS app on the App Store.

Data controller: UNIINCN team. Contact us at privacy@uniincn.app.

• Account data — your email address and display name. If you sign in with Apple or Google, we receive a stable user identifier and the email and name you choose to share. We do not see your password.
• Phone number — only if you sign in with SMS OTP. Used for authentication and abuse prevention.
• Guest sessions — if you choose "Try as guest", we create an anonymous account with no personal data attached. You can later bind a real account to keep your progress.
• Study data — questions you attempt, answers, scores, time spent, and which subjects you study. Stored against your account so you can resume across devices.
• Device & diagnostic data — minimal logs (timestamps, error messages, device model) to keep the app working. We do not collect precise location, contacts, photos, microphone, camera, or SMS content.

• To create and secure your account.
• To save your study progress and personalize content.
• To enforce free-trial limits for guest users.
• To diagnose and fix bugs, and prevent abuse.
• To comply with legal obligations (e.g. responding to lawful requests).

We do not sell your personal data, and we do not use it for third-party advertising.

When you sign in with Apple or Google, the provider sends us a signed identity token containing your provider user ID, email, and (for Apple) optionally your name. We store these to identify you on subsequent logins. The provider's own privacy policy also applies:

• Apple — see apple.com/legal/privacy
• Google — see policies.google.com/privacy

Account, authentication, and study data are stored on the Lovable Cloud platform (built on Supabase / PostgreSQL), encrypted in transit (TLS) and at rest. Data may be processed in regions where our cloud provider operates. Lovable Cloud and Supabase act as our data processors.

We keep account and study data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we must keep it to comply with law. Anonymous guest sessions that have not been bound to an account are automatically purged after 90 days of inactivity.

You can, at any time:

• Access and export your study data.
• Correct or update your profile.
• Delete your account and all associated data — from inside the app, go to More → Account → Delete account, or email privacy@uniincn.app.
• Withdraw consent or object to processing.

Residents of the EU/EEA, UK, California, and other regions with comparable laws have additional rights (GDPR, UK GDPR, CCPA/CPRA). Contact us to exercise them.

UNIINCN is intended for users aged 16 and over. We do not knowingly collect data from children under 13 (or the equivalent minimum age in your country). If you believe a child has given us data, contact us and we will delete it.

We may update this policy as the app evolves. Material changes will be announced in-app or by email. The "Last updated" date at the top of this page always reflects the current version.

Questions or requests: privacy@uniincn.app.