Privacy Policy for Chinese Forge

Last Updated: August 28, 2026 | Effective Date: August 28, 2026

Developer & Legal Entity: RegnaVita ("we", "us", or "our")
Application: Chinese Forge ("App")
Official Website: https://chineseforge.regnavita.com
Contact Email: hello@regnavita.com

1. Introduction & Privacy by Design

RegnaVita is dedicated to safeguarding your personal privacy. This Privacy Policy outlines how Chinese Forge collects, processes, stores, and protects your information when you interact with our mobile application, web presence, and associated educational services.

We build our software under the core tenets of data minimization, user transparency, and privacy by design. Chinese Forge is engineered as an offline-first learning system that restricts cloud data collection strictly to what is necessary for cross-device progress synchronization, subscription verification, and technical crash monitoring.

By downloading, accessing, or using Chinese Forge, you acknowledge and agree to the data handling practices outlined in this policy.

2. Information We Collect

A. Information You Provide Directly

Email Authentication: If you sign up using email, we collect your email address. We authenticate sessions exclusively via passwordless one-time passwords (OTP) or magic links. We never collect, store, or process passwords.
OAuth Social Authentication: If you choose to authenticate via Google Sign-In or Sign in with Apple, we receive your email address (or Apple Private Relay address) and primary display name as authorized by your identity provider settings.
Anonymous Guest Sessions: If you use Chinese Forge as a guest, no email address, real name, or identifying credentials are collected. A randomly generated anonymous UUID is assigned to maintain your local device session.

B. Information Collected Automatically (Cloud Synchronization)

Learning Progress & Study Activity: To support seamless multi-device synchronization and optimal spaced-repetition scheduling via the Free Spaced Repetition Schedule (FSRS) algorithm, we securely store your character review history, review ratings, vocabulary and grammar mastery levels, reading progress, and saved reading shelf bookmarks.
Subscription Entitlements (Scholar Premium): When you purchase a Scholar Premium subscription or access pass, our subscription infrastructure provider (RevenueCat) records your anonymous or authenticated User ID, active entitlements, purchase timestamps, expiration dates, renewal status (will_renew), and store transaction identifiers.
Financial Data Exclusion: RegnaVita does not collect, process, or store credit card numbers, banking details, or billing addresses. All monetary transactions and billing operations are conducted entirely and securely by Google Play Billing (Google LLC) or Apple App Store (Apple Inc.).
Diagnostics & Crash Telemetry: To maintain high application stability, we utilize Sentry to collect anonymized crash reports, exception stack traces, operating system versions, device model names, and network state indicators. Diagnostic telemetry never captures personal notes, handwriting strokes, or audio data.

C. On-Device Only Processing (Zero Cloud Transmission)

Google ML Kit Digital Ink Recognition: When you practice writing Chinese characters in the Forge screen, your stroke coordinates and timing are evaluated 100% on-device using Google ML Kit Digital Ink Recognition native libraries (libdigitalink.so). Your handwriting strokes are processed in temporary volatile memory and are never transmitted to external servers, never stored in the cloud, and never used for AI training datasets.
Text-to-Speech (TTS) Pronunciation: Audio pronunciation of Chinese vocabulary, sentences, and graded reader articles is synthesized directly on your device via native operating system TTS engines. No voice recordings or audio streams are transmitted to remote servers.

3. Legal Bases for Processing (GDPR Compliance)

If you reside within the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following lawful bases pursuant to Article 6 of the General Data Protection Regulation (GDPR):

Performance of a Contract (Art. 6(1)(b)): Processing is necessary to deliver the core functionality of Chinese Forge, including synchronizing your study data, serving curriculum content, and maintaining your Scholar Premium access.
Legitimate Interests (Art. 6(1)(f)): Processing diagnostic crash data via Sentry to guarantee application security, resolve fatal bugs, and optimize UI rendering performance.
Consent (Art. 6(1)(a)): When you voluntarily link an OAuth provider (Google or Apple) or submit your email address for cloud synchronization.

4. How We Use Your Information

We use the collected information exclusively for the following operational purposes:

To establish, maintain, and synchronize your learning account across multiple devices.
To compute personalized spaced-repetition review schedules using the FSRS algorithm.
To authenticate and manage Scholar Premium subscriptions and feature access.
To seamlessly migrate study progress from guest anonymous sessions to permanent accounts.
To diagnose application errors, prevent frame drops, and improve overall software quality.
To respond to customer support inquiries and process account deletion requests.

Our Privacy Guarantee: We do not sell your personal data. We do not share data with data brokers. We do not engage in targeted cross-app advertising or behavioral tracking.

5. Third-Party Service Providers (Sub-Processors)

We engage trusted, enterprise-grade service providers to assist in operating Chinese Forge under strict data protection agreements:

Service Provider	Core Purpose	Data Handled	Privacy Policy
Supabase Inc.	Cloud Database & Auth Core	User ID, Email Address, Study Records (`user_dictionary`, `user_articles`)	supabase.com/privacy
RevenueCat Inc.	In-App Subscription Management	User ID, Active Entitlements, Expiration Timestamps, Store Transaction IDs	revenuecat.com/privacy
Functional Software, Inc. (Sentry)	Crash Reporting & Diagnostics	Exception Stack Traces, Device Model, OS Version, App Build Number	sentry.io/privacy
Google LLC	Google Play Billing, Sign-In, ML Kit Models	Payment Processing, OAuth Email, On-Device Digital Ink Model Assets	policies.google.com/privacy
Apple Inc.	App Store Billing, Sign in with Apple	Payment Processing, OAuth Email / Private Relay Identifiers	apple.com/legal/privacy

6. Data Storage, Security & Retention

Encryption in Transit: All network communication between the Chinese Forge client and cloud endpoints is strictly encrypted using HTTPS/TLS 1.2+ and TLS 1.3.
Encryption at Rest: Local ObjectBox device storage and remote PostgreSQL cloud databases are protected by industry-standard encryption protocols (AES-256).
Row Level Security (RLS): Cloud database tables are enforced with PostgreSQL Row Level Security policies, ensuring that authenticated users can only read and write their own data records.
Retention Policy: Personal and educational data is retained for the active lifespan of your account. Upon account deletion, all cloud database records are permanently purged immediately.

7. Account & Data Deletion (User Rights)

In accordance with Google Play Store, Apple App Store, and international privacy mandates, you maintain full control over your data and may permanently delete your account and all associated cloud records at any time.

Method 1: Instant In-App Deletion (Recommended)

You can execute immediate account and data deletion directly inside the mobile application:

Navigation Path: Profile screen -> Account Settings (top right icon) -> Account Security (bottom) -> Delete Account.

Method 2: Web Deletion Portal (No App Reinstallation Required)

If you have uninstalled Chinese Forge and wish to purge your records without reinstalling the application:

Visit our dedicated web deletion portal: https://chineseforge.regnavita.com/delete-account, OR
Send an email from the email address registered with your Chinese Forge account to hello@regnavita.com with the subject line "Chinese Forge Account Deletion Request". Our team will verify your ownership and purge all records within 7 business days.

Important Notice on Store Subscriptions: Deleting your Chinese Forge account terminates your profile and cloud data, but it does not automatically cancel recurring subscriptions managed by the Google Play Store or Apple App Store. Active subscriptions must be cancelled directly in your store account settings.

8. Your Legal Rights (GDPR & CCPA/CPRA)

Depending on your geographic location, you are entitled to exercise the following privacy rights:

Right to Access & Portability: Request an export of the personal data we maintain about you.
Right to Rectification: Request correction of incomplete or inaccurate records.
Right to Erasure ("Right to be Forgotten"): Request complete deletion of your account and learning data.
Right to Restrict or Object: Limit or object to specific data processing activities.
Non-Discrimination: We will never deny services, charge different prices, or degrade quality for exercising your privacy rights.

To exercise any of these rights, please contact our privacy team at hello@regnavita.com.

9. Universal Access & Children's Privacy (COPPA / GDPR-K)

Chinese Forge is a family-friendly educational platform designed for learners of all ages. We do not enforce age barriers or age gating. For minors and young learners, access to the application and any financial purchases should be conducted under parental or legal guardian supervision in compliance with applicable local laws.

We do not knowingly collect personal information from young children without parental involvement. Our anonymous Guest Mode allows complete local study functionality without requiring an email address or personal account creation.

10. International Data Transfers

Information collected by Chinese Forge may be stored and processed on secure cloud infrastructure located in the European Union and the United States. Where cross-border data transfers occur, we implement adequate legal safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements in application features, legal compliance requirements, or security standards. Material modifications will be reflected by updating the "Last Updated" timestamp at the top of this document and, where appropriate, displaying an in-app update notice.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data governance practices, please reach out to us:

Legal Entity: RegnaVita
Email: hello@regnavita.com
Web Portal: https://chineseforge.regnavita.com