Tandio is operated by NORTHFORGE LIMITED, a company registered in Hong Kong ("we", "us"). We are responsible for the personal information described in this policy. This policy covers the Tandio app and its product website. Contact us at [email protected].
1. Information we collect
- Accounts: a randomly generated account ID, creation date, your chosen display name, and, when you register or link an account, your email and basic profile information supplied by Google or Apple sign-in. Your display name and XP may be visible on leaderboards.
- Learning: progress, completed lessons, answers, accuracy, time spent, XP, streaks, energy and gem balances and changes.
- Optional questionnaire: how you heard about Tandio and topics of interest. Answers stay on your device until you explicitly choose to save them to the cloud. Cloud answers are linked to your account, including a guest identity, for cross-device access and product statistics, not ad targeting.
- Purchases: subscription status, product identifiers, transaction dates and purchase verification records. Apple or Google processes payments; we do not receive your full payment card details. RevenueCat helps manage entitlements.
- Usage analytics: app sessions, screens viewed, lesson and question interactions (including selected options and results), battles, home cards, rewards, leaderboard interactions, settings values, progress resets, sign-in outcomes, paywall and rewarded-ad interactions, notification campaign taps and experiment groups. Records may include account and random session IDs, app and content versions, platform, interface and learning languages, timestamps and failure categories. Our usage-event records do not include free-text input, email, contacts, photos, precise location or device advertising IDs.
- Reminders and diagnostics: push tokens, platform, time zone and reminder time when enabled; crash reports may include device model, OS version and error details.
- Support: your email and information you choose to send when contacting us. Please do not send unnecessary sensitive information.
2. Website and third-party collection
The website stores your theme preference locally in your browser. Its interactive demo runs in your browser. Cloudflare hosts and delivers the website and may process IP addresses, request details and technical security information. The home page loads fonts from Google Fonts, which receives your IP address and technical request information. The app analytics controls below do not control website hosting or font requests.
Google Analytics for Firebase may collect an app instance ID, device and OS information, approximate region derived from IP and screen views; on Android this may include an advertising ID. Turning off "Share usage data" stops Firebase Analytics collection.
Google AdMob is used when you choose rewarded ads. It may process device information, IP addresses, ad interactions and, on Android, an advertising ID. On iOS we do not request cross-app tracking permission or read IDFA. Your account ID is passed to AdMob to verify rewards. Our servers also receive IP addresses for security and troubleshooting; these are not included in our usage-event records.
3. Purposes and legal bases
We use information to authenticate accounts, deliver lessons, sync progress, grant rewards, verify purchases, send requested reminders, respond to support requests, improve courses, measure retention and experiments, fix crashes, prevent fraud and show rewarded ads you request. We do not sell personal information or use our usage-event records for ad targeting.
Where the GDPR or UK GDPR applies, our legal bases are performance of our agreement for core account, learning and purchase services; legitimate interests for necessary security, diagnostics and product improvement where permitted and balanced against your rights; consent for optional processing where required, including analytics or ad-related device access; and compliance with legal obligations. Where consent is required, an opt-out alone is not a substitute for obtaining it. You may withdraw consent without affecting earlier lawful processing.
4. Your controls
- Usage data: Profile → About → Privacy policy → Share usage data. When disabled, the app stops recording and uploading optional usage events, deletes unsent events from the device and stops Firebase Analytics. Necessary learning, reward and purchase records and crash diagnostics are not disabled.
- Questionnaire: Profile → Settings → New-user questionnaire. Review sync status, edit answers or decline collection. Declining removes cloud answers and stops further collection for that account; it cannot be reversed unless the account is deleted and recreated.
- Reminders: disable them in Profile → Learning reminders or your device settings.
- Ads: use Ad privacy choices on the energy screen. You can choose not to watch rewarded ads.
- Account deletion: Profile → Account & subscription → Delete account. You may also contact us for help. Deleting an account does not cancel an app-store subscription; cancel it separately in the store.
5. Who receives information
We use service providers as necessary: Google Firebase for authentication, analytics, notifications and crash diagnostics; Google AdMob for rewarded ads; RevenueCat for purchases and subscriptions; Apple and Google for sign-in and app-store purchases; and Cloudflare for website delivery and security. These providers process relevant information subject to their roles, contracts and applicable privacy terms. We may disclose information when legally required or necessary to protect users, investigate abuse or defend legal rights. Public leaderboard information is visible to other users.
6. Retention and deletion
- Account, learning and cloud questionnaire data: retained while needed to provide your account and learning services. Following account deletion, we normally remove this information from active systems within 30 days, except records needed for a legal obligation or a specific legal claim.
- Identifiable usage analytics: retained for no more than 12 months after collection, then deleted or irreversibly anonymised. Account-linked usage data is also covered by account deletion.
- Security and diagnostic logs: normally retained for up to 90 days. Relevant records may be kept longer where necessary to investigate a specific incident or resolve a legal claim.
- Backups: residual deleted information is removed through backup rotation within 90 days after deletion from active systems. It is not used for ordinary business purposes; if a backup is restored, applicable deletions must be reapplied.
- Transactions and accounting: only the records necessary for tax, accounting and legal compliance are retained for the applicable statutory period. Relevant Hong Kong business records generally must be kept for at least seven years after the transaction. This does not require keeping all learning or analytics data for seven years.
- Support: kept only as long as reasonably needed to answer your request, resolve follow-up issues and meet applicable legal obligations.
Where a specific legal obligation or legal hold requires longer retention, we restrict the retained information to that purpose and delete it when the requirement ends. Truly anonymous aggregate statistics may be retained longer; replacing a name with an ID alone is not anonymisation.
7. International processing and security
Our company is in Hong Kong and providers may process information in other countries, including the United States. Where applicable law requires transfer safeguards, we use appropriate mechanisms, such as recognised adequacy decisions or standard contractual clauses and applicable UK transfer arrangements. Contact us to ask about safeguards relevant to your information. We use reasonable technical and organisational safeguards, but no system is completely secure.
8. Children
Tandio is not directed to children under 13, or under 16 in the EEA and UK. We do not knowingly collect personal information from children below these ages. If you believe a child has provided such information, contact us so that we can investigate and delete it as appropriate.
9. Your rights
Depending on applicable law, you may request access, a copy or portability of information, correction, deletion, restriction, or object to processing, and withdraw consent. You may complain to your local data protection authority. Applicable US state laws may also provide opt-out and appeal rights. These rights depend on the law's scope, eligibility and exceptions; not every state law applies to every business.
Email [email protected] to exercise your rights or appeal a refusal where available. We may verify your identity using proportionate information and will respond within applicable legal deadlines. We will not unlawfully discriminate against you for exercising privacy rights.
10. Changes and contact
We update this page and its effective date when the policy changes, and provide additional notice or request consent where required. Privacy enquiries: NORTHFORGE LIMITED, Hong Kong; [email protected].