隐私政策
- 账户由家长注册。孩子不需要提供真实姓名、照片、住址或联系方式，米粒也不会问。
- 孩子说的话在我们的服务器上转成文字，录音不保存。
- 对话文字会发给 AI 服务商（Anthropic）来生成米粒的回复；老师说的话会发给语音服务商来朗读。
- 不卖数据，不放广告，不用第三方统计或追踪。
- 家长可以随时要求查看或删除孩子的数据：【待填写：联系邮箱 contact email】
1. 这份政策适用于什么
本政策说明「中文探险乐园」（包括手机和电脑上的 App、本网站，以及它们使用的后台服务，统称「本服务」）收集哪些信息、怎么使用和分享、以及家长有哪些权利。本服务由 【待填写：运营方名称 operator】（「我们」）提供。
2. 儿童隐私
本服务是给 3–8 岁儿童学中文用的，但账户只能由家长或法定监护人（年满 18 岁）注册和管理。家长注册账户、填写孩子的学习资料，即表示家长同意我们按本政策收集和使用孩子在使用本服务时产生的信息。
我们只收集提供课程所必需的信息。我们不会要求孩子提供真实姓名、照片、住址、学校、联系方式或其他能识别身份的信息；AI 老师被设定为不询问这些信息，如果孩子主动说出，会温柔地把话题拉回游戏。我们不会向孩子展示广告，也不会用孩子的信息做营销。
家长可以随时查看、更正或删除孩子的信息，或停止孩子继续使用本服务，方法见第 8 节。
3. 我们收集的信息
| 信息 | 内容 | 来源 |
|---|---|---|
| 家长账户 | 邮箱、密码（只保存加密后的散列值，我们看不到原密码）、由邮箱生成的显示名 | 家长注册时填写 |
| 孩子的学习资料 | 昵称（可不填，请不要用全名）、年龄段、中文程度、学习目标、兴趣、所学语言、选的老师 | 家长在 App 的引导问题里选择 |
| 孩子的语音 | 按住按钮时录下的一小段声音（最长约 10 秒） | 孩子在 App 里说话 |
| 对话记录 | 孩子的话转成的文字、AI 老师的回复、所在关卡 | 上课时产生 |
| 学习进度 | 过了哪些关、得了几颗星 | 保存在孩子使用的设备上，不上传 |
| 用量和余额 | 每次 AI 回复和语音用了多少、对应费用、学习币余额 | 使用时自动记录 |
| 付款信息 | 充值金额和时间、自动充值设置；保存卡片时只存卡组织和末四位，以及 Stripe 的客户和付款方式编号。完整卡号、有效期和安全码由 Stripe 处理，我们收不到也不保存 | 家长在 Stripe 付款页填写 |
| 技术信息 | 访问时的 IP 地址、请求时间、错误日志 | 服务器自动记录 |
4. 我们怎么使用这些信息
- 提供课程：把孩子的话转成文字，生成 AI 老师的回复，朗读回复，按年龄和程度调整难度，安排冒险地图。
- 管理账户和学习币：登录、计算用量、扣除学习币、处理充值和自动充值。
- 保障服务安全、排查故障、防止滥用。
- 回复家长的问题和请求。
我们不会出售个人信息，不会用孩子的信息投放广告或建立广告画像，也不会用孩子的录音或对话训练我们自己的 AI 模型。
5. 语音怎么处理
孩子的录音发送到我们的服务器，由我们自己运行的语音识别程序转成文字，转完即丢弃，录音本身不保存，也不发给第三方。转出来的文字会作为对话记录保存，并用于生成回复（见第 6 节）。
6. 我们和谁分享信息
我们只把完成某项功能所需的信息交给以下服务商。它们代表我们处理数据，受各自的商业条款和数据处理协议约束：
| 服务商 | 用途 | 收到的信息 |
|---|---|---|
| Anthropic（Claude） | 生成 AI 老师的回复 | 本节课的对话文字，以及孩子的昵称、年龄段、中文程度、学习目标和兴趣 |
| Microsoft Azure、ElevenLabs | 把老师的回复读出来 | 只有老师要说的文字，不含孩子说的话和孩子的资料 |
| Stripe | 处理付款和保存卡片 | 家长邮箱、付款信息 |
| 服务器和数据库托管商 | 运行本服务 | 上面列出的、保存在我们服务器上的信息 |
除此之外，只有在法律要求、为保护孩子或他人的安全、或在公司合并或资产转让（会继续受本政策约束）时，我们才会披露信息。
7. 保存多久
- 录音：转成文字后立即丢弃。
- 账户、学习资料、对话记录、用量和余额：在账户存续期间保存；账户删除后删除，法律要求保留的除外。
- 付款记录：删除账户时一并删除；Stripe 会按税务和财务法规保存它自己的交易记录。
- 服务器日志：只保存排查问题所需的一段时间。
8. 家长的权利
家长可以发邮件到 【待填写：联系邮箱 contact email】，要求：
- 查看我们保存的您和孩子的信息；
- 更正不准确的信息；
- 删除孩子的对话记录和学习资料，或删除整个账户；
- 停止进一步收集孩子的信息（孩子将无法继续上课）。
也可以直接在 App 里删除账户：在地图页最下面点「删除账户」，输入密码确认。账户、对话记录、充值记录和保存的卡会立即永久删除，剩余学习币作废。用量统计会保留，但不再关联到任何账户。
通过邮件提出的请求，我们会先确认您是账户的主人。学习进度只保存在设备上，在 App 里重新开始或卸载 App 即可清除。您也可以随时在 App 里删除保存的卡片、关闭自动充值。
9. 安全
我们用加密连接（HTTPS）传输数据，密码只保存散列值，卡片信息交给 Stripe 处理，并限制能访问后台数据的人员。没有任何系统能保证绝对安全；如果发生影响您信息的安全事件，我们会按法律要求通知您。
10. 跨境处理
我们和服务商可能在美国或其他国家和地区处理数据，这些地方的数据保护法律可能与您所在地不同。我们会要求服务商采取适当的保护措施。
11. Cookie
本网站只使用维持登录和安全所必需的 Cookie（例如管理后台的会话）。我们不使用广告 Cookie 或第三方统计工具。App 不使用 Cookie。
12. 政策更新
本政策更新时，我们会修改顶部的生效日期；如果改动会影响孩子信息的收集或使用方式，我们会先通过邮件或 App 通知家长，必要时重新征得同意。
13. 联系我们
【待填写：运营方名称 operator】 · 【待填写：联系邮箱 contact email】
Privacy Policy
- Accounts are created by parents. Children never need to give a real name, photo, address or contact details, and Miri never asks for them.
- What a child says is turned into text on our own server; the recording is not kept.
- Lesson text is sent to an AI provider (Anthropic) to write Miri's replies; the tutor's lines are sent to voice providers to be read aloud.
- We don't sell data, show ads, or use third-party analytics or tracking.
- Parents can ask to see or delete their child's data at any time: 【待填写：联系邮箱 contact email】
1. Scope
This policy explains what information 中文探险乐园 (the apps, this website and the backend they use, together the "Service") collects, how it is used and shared, and the rights parents have. The Service is provided by 【待填写：运营方名称 operator】 ("we", "us").
2. Children's privacy
The Service is for children aged 3–8 learning Chinese, but accounts can only be created and managed by a parent or legal guardian aged 18 or over. By creating an account and filling in the child's learning profile, the parent consents to our collecting and using the information the child produces while using the Service, as described here.
We collect only what is needed to run the lessons. We don't ask children for their real name, photos, address, school, contact details or other identifying information; the AI tutor is instructed not to ask for these and to steer the conversation back to the game if a child volunteers them. We don't show ads to children or use their information for marketing.
Parents can review, correct or delete their child's information, or stop further use, at any time (see section 8).
3. Information we collect
- Parent account: email, password (stored only as a one-way hash), and a display name taken from the email.
- Child's learning profile, chosen by the parent: optional nickname (please don't use a full name), age range, Chinese level, learning goals, interests, language and chosen teacher.
- Voice: short recordings (up to about 10 seconds) made while the child holds the talk button.
- Lesson transcripts: the text of what the child said, the tutor's replies, and the level.
- Progress (levels passed, stars) is stored on the child's device only, not uploaded.
- Usage and balance: how much each AI reply and voice line used, its cost, and the token balance.
- Payments: top-up amounts and dates and auto-reload settings; for a saved card only the brand, last four digits and Stripe customer and payment-method IDs. Full card numbers, expiry dates and security codes are handled by Stripe; we never receive or store them.
- Technical data: IP address, request times and error logs.
4. How we use it
- To run lessons: transcribe speech, generate and read out the tutor's replies, adapt to the child's age and level, and arrange the adventure map.
- To run the account and tokens: sign-in, usage, charging tokens, top-ups and auto-reload.
- To keep the Service secure, fix problems and prevent abuse.
- To answer parents' questions and requests.
We do not sell personal information, use children's information for advertising or profiling, or use children's recordings or transcripts to train our own AI models.
5. Voice
Recordings are sent to our server and transcribed by speech recognition we run ourselves. The recording is discarded once transcribed — it is not stored and not shared with third parties. The resulting text is kept as part of the lesson transcript and used to generate replies (section 6).
6. Who we share it with
We share only what each feature needs with these providers, who process it on our behalf under their commercial terms and data processing agreements:
- Anthropic (Claude) — writes the tutor's replies. Receives the lesson transcript and the child's nickname, age range, Chinese level, goals and interests.
- Microsoft Azure, ElevenLabs — read the tutor's replies aloud. Receive only the tutor's lines, never what the child said or the child's profile.
- Stripe — payments and saved cards. Receives the parent's email and payment details.
- Hosting providers — run our servers and database.
Otherwise we disclose information only when required by law, to protect the safety of a child or others, or as part of a merger or sale of assets (where this policy continues to apply).
7. How long we keep it
- Recordings: discarded right after transcription.
- Account, learning profile, transcripts, usage and balance: while the account exists; deleted when the account is deleted, unless the law requires otherwise.
- Payment records: deleted with the account; Stripe keeps its own transaction records as tax and accounting rules require.
- Server logs: only as long as needed to troubleshoot.
8. Parents' rights
Email 【待填写：联系邮箱 contact email】 to see the information we hold about you and your child, correct it, delete your child's transcripts and profile or your whole account, or stop further collection (your child will then no longer be able to take lessons). You can also delete the account yourself in the app: tap "Delete account" at the bottom of the map and confirm with your password. The account, transcripts, top-up records and saved card are deleted permanently right away and any remaining tokens are forfeited; usage statistics are kept without any link to an account. For requests by email we will first verify that you own the account. Progress lives on the device and is cleared by restarting in the app or uninstalling it. Saved cards and auto-reload can be removed or turned off in the app at any time.
9. Security
Data travels over encrypted connections (HTTPS), passwords are stored only as hashes, card details are handled by Stripe, and access to stored data is limited. No system is perfectly secure; if an incident affects your information we will notify you as the law requires.
10. International processing
We and our providers may process data in the United States and other countries whose data protection laws may differ from yours. We require providers to apply appropriate safeguards.
11. Cookies
This website uses only cookies needed for sign-in and security (such as the admin session). We use no advertising cookies or third-party analytics. The apps don't use cookies.
12. Changes
When this policy changes we update the effective date above. If a change affects how children's information is collected or used, we will tell parents by email or in the app first and ask for consent again where required.
13. Contact
【待填写：运营方名称 operator】 · 【待填写：联系邮箱 contact email】