Panda Pinyin Privacy Policy
Updated October 6, 2026. Panda Pinyin is a Chinese-learning app and website for children and their families. This policy explains information used by Panda Pinyin, including its parent account and teacher-access features. Privacy requests are handled by Panda Pinyin's operator at huang.maike@yahoo.com.
Information we use
- Parent accounts: usernames, account identifiers, password hashes, recovery-code hashes, session records, and any parent display name or email associated with an existing account. New Panda Pinyin signup does not require a child's email address.
- Child profiles and learning: the profile name or nickname entered by a parent, a selected avatar, lesson and game identifiers, answers, correct and incorrect counts, completed rounds, points, achievements, and activity dates. Use a nickname rather than a child's full name. Signed-in progress is associated with the parent's account and child profile.
- Membership: subscription identifiers, purchase and transaction identifiers, entitlement status, expiry dates, account-linking tokens, and family PIN redemption records. Apple handles App Store payments; Stripe handles supported website checkout. Panda Pinyin does not receive or store complete payment-card numbers.
- Support: your contact information and the messages you send us. Do not send passwords, recovery codes, a child's school, or unnecessary personal details.
- Security and delivery: network requests include an IP address. Authentication rate limits store hashed values derived from the IP address or username, attempt counts, and timestamps. Hosting services may process request and error information to deliver and protect the service.
Why we use this information
We use information to sign parents in, save and display learning progress, personalize review exercises, provide membership access, restore purchases, respond to support requests, and prevent abuse. Personal progress is not shown on a public leaderboard.
Local storage and speech
The app or browser stores preferences, selected profiles, some lesson progress, and cached lesson media on the device. Secure session cookies keep parents signed in. Our pronunciation activities play prerecorded audio or device speech; Panda Pinyin does not record children's voices or request microphone, camera, contacts, or location access for these activities. Child answers and profiles are not sent to ElevenLabs for audio generation.
Service providers and sharing
Panda Pinyin uses Sites hosting and its Cloudflare-backed delivery and storage services. These services process information needed to operate the app. Apple and, for website billing, Stripe process purchases under their own privacy policies. Support email is delivered through our email provider. We do not sell personal information, use advertising identifiers, or use data for targeted advertising or cross-app advertising tracking in the current app.
Children and parent choices
Parents or guardians should create and manage family accounts and child profiles. Children do not need to create their own accounts to try the free learning activities. Parents can request access to, correction of, or deletion of family and child-profile information using the contact below. We may request information needed to verify control of the account; do not send a password or recovery code by email.
Retention and security
We retain account-linked profiles and progress to provide ongoing learning and review while you maintain the account. Parents can permanently delete the family account, its child profiles, saved progress, and membership links from the parent area's Privacy and account controls. Panda Pinyin accounts require the current password and an explicit DELETE confirmation. Existing platform-authenticated accounts without a Panda Pinyin password use their authenticated session and the same explicit confirmation. You may also request deletion through support. Signing out, uninstalling, or cancelling membership does not itself delete the account.
Expired sign-in sessions are eligible for removal seven days after expiry, and authentication attempt records seven days after their recorded window, during subsequent authentication requests. Cleanup runs when the service is used, not on a guaranteed daily schedule. Account deletion removes the family records from the active app database. Apple, Stripe, hosting backups, and support email may retain their separate records under applicable service policies or legal requirements; contact us for help with requests concerning those records. We do not automatically delete an active family's learning history as part of security cleanup.
Connections use HTTPS and passwords are stored as salted hashes. No system can guarantee complete security. This policy does not change Apple's or Stripe's records, and deleting a Panda Pinyin account does not automatically cancel an Apple subscription.
Contact and privacy requests
Contact Panda Pinyin at huang.maike@yahoo.com. For an account or profile request, include your parent username and describe the request without including sensitive child information.
Changes
When our practices change, we will update this policy and its date. Material changes involving children's information may require additional parent notice or consent.