VIEN

Privacy Policy

Version 2026-11-13 · Effective 13/11/2026

Bibozi helps parents study Chinese with their child along the very book the child uses at school. We collect only what the app needs to work, show no ads, sell no data, and treat your child's data with the greatest care. This policy says what we collect, why, who receives it, how long we keep it and what you can do about it.

1. Who is responsible

Responsible for your data: Bibozi. Contact for anything about your data or this policy: support@bibozi.com.

2. Who the app is for

  • Bibozi is made for children aged 6 to 13, but it is bought, set up and managed by a parent or guardian. Only an adult creates an account and a child's profile; a child cannot sign up alone.
  • By creating a child's profile you confirm that you are the child's parent or guardian and that you agree to this policy for your child. You can withdraw that agreement at any time by deleting the child's profile or the account (see section 8).
  • If you believe a child has made an account without a parent, write to support@bibozi.com and we will delete it.

3. What we collect

The parent's account:

  • Your email address (you sign in with a code sent to it), or your Apple or Google account if you choose to sign in that way.
  • The app's language and the reminder time (if switched on).
  • If you try the app as a guest, a temporary account without an email is created, with a small number of free page scans.

Your child's profile (entered by you):

  • A name or nickname, an avatar (a cartoon animal) and a birth year (optional). Please do not enter a surname or any other detail that is not needed.

Learning:

  • Lessons, words, exercise results, study streaks, treasure chests and puzzle pieces, and how many minutes were studied.

Photos of book pages:

  • When you photograph a page, the photo is sent to our AI provider to read the text on it and is deleted as soon as it has been read. The text read from the page, and the words and exercises the app builds from it, are kept in your family's lessons and are visible to your family only.
  • A photo from an interrupted upload may stay on our servers until you delete the account. Photograph only the page, not your child's face or name. The app removes the location and other hidden details (such as the time and the device) from the photo before it leaves your phone.

Your child's voice:

  • When your child practises speaking, the short recording is sent to Microsoft Azure to be scored and is deleted right after scoring; we do not store the audio. We keep the score, the text that was recognised and the result for each sound, so you can follow progress.

Subscriptions:

  • Payment is handled by Apple or Google. We never receive or store card details. We know which plan your account has and until when; RevenueCat helps us check that.

Technical information:

  • Records of how often AI services are used, and of errors (to follow costs, fix faults and prevent abuse). They contain no photo and no voice.
  • Crash reports (the error and where in the app it happened) without your name, account, voice, photo or device name.
  • Simple counts of how many times an achievement card is shared, without its content.

We do not collect: your location, contacts, photos other than the pages you photograph, or advertising identifiers. The app has no ads, no tracking across other apps or websites and no third-party analytics tools.

4. Why we use it

  • Building lessons from book pages, model audio, pronunciation scoring and practice games. We use your data for this because you asked for these features.
  • Keeping progress so your child continues on every device of the family.
  • Sending sign-in emails and study reminders (if switched on).
  • Managing subscriptions.
  • Keeping the service safe, fixing faults and preventing abuse, which is our legitimate interest.
  • We do not use your family's data to advertise, to build advertising profiles or to train AI models.

5. Who receives it

We use these providers to run the app. Each receives only what its job needs and may use it only to provide its service to us:

  • Supabase: data storage and sign-in (servers in Singapore).
  • OpenAI: reading the text on page photos and writing words, sentences and exercises (United States). Under OpenAI's API terms, data sent through the API is not used to train its models unless the customer chooses so; we have not chosen so. OpenAI may keep requests for a short time (up to 30 days) to detect abuse, then deletes them.
  • Microsoft Azure: pronunciation scoring and model audio (Southeast Asia). The model audio is a synthetic voice.
  • RevenueCat, Apple and Google: subscriptions and payment.
  • An email delivery service (currently Google Gmail): sending sign-in codes.
  • Sentry: crash reports (European Union).

We do not sell data and do not share it for advertising. We may disclose data if the law or a court requires it.

6. Data sent abroad

Your data is stored in Singapore. Page photos are read in the United States, voice is scored in Southeast Asia and crash reports go to the European Union. Providers handle this data under their data processing terms. By using the app you agree to this transfer; if you do not agree, do not use the page scan and speaking features, or delete your account.

7. How long we keep it

  • Page photos: deleted as soon as they are read (see section 3 for an interrupted upload).
  • Voice recordings: deleted right after scoring.
  • Account, child profiles, lessons, scores and progress: until you delete a child's profile or the account.
  • Records of AI use and errors: kept without a link to your account after the account is deleted.
  • Guest accounts without an email: deleted when you sign out, or after 90 days without use.
  • Purchase records: Apple, Google and RevenueCat keep their own records under their own policies, even after the account is deleted.

8. Your rights and choices

  • See and edit your child's profile in Settings.
  • Delete a child's profile, or delete the whole account and all its data, in the app (Settings → Delete account), or by email without opening the app. Deleting the account does not cancel a paid plan; cancel it in the App Store or Google Play first.
  • Ask about your family's data, ask for a copy of it, a correction or deletion, or object to how it is used, at support@bibozi.com. We answer within the time the law requires and, at the latest, within 30 days.
  • Withdraw consent by deleting the child's profile or the account.
  • Complain to the data protection authority of your country if you think we handled your data wrongly.

9. Children's data

  • A child's profile is created by the parent, with the parent's consent given when creating it.
  • Purchases, settings, links outside the app and deleting data are behind a parental gate (the parent PIN).
  • There are no ads, no links to other apps or websites where the child learns, and no chat with other people.
  • Achievement cards show the child's name by default, and you can turn the name off before sharing. They never show a real photo of the child. A card leaves the app only when you share it.
  • The reminder shows the child's name on the lock screen of your device (it is made on the device and is not sent to us).
  • Part of the content is written by AI and can be wrong. You can report any word that is not suitable for a child from its card in the app.

10. Security

Data is encrypted in transit and stored on servers that only our service can open. Each family can access only its own data. The keys of the AI and speech services live only on our servers, never in the app. If a breach puts your data at risk we tell you and the authorities as the law requires.

11. Changes

When this policy changes we update the version at the top and ask you to read and accept the new text in the app before you continue.

12. Contact

Bibozi · support@bibozi.com