SG 听写

Privacy Policy

Last updated: 28 Aug 2026 · Effective: 28 Aug 2026

SG 听写 (“SG Tingxie”, the “Service”) is operated by R AI FOUNDRY PTE. LTD. (UEN 202633449C), a company incorporated in Singapore (“we”, “us”, “our”). This Privacy Policy explains what personal data we collect through sgtingxie.com and app.sgtingxie.com, how we use and protect it, and the choices you have. It is written to comply with Singapore’s Personal Data Protection Act 2012 (PDPA).

We are the data controller for the personal data described here. Our registered address is 152 Beach Road, #23-02/03, Gateway East, Singapore 189721.

1. A note for parents (children’s privacy)

SG 听写 is a Chinese 听写 (dictation) learning tool intended for primary-school learners. We designed it to collect as little personal data as possible. We do not show third-party advertising, we do not sell personal data, and we do not build advertising profiles of children.

If your child uses the Service, a parent or guardian should review this Policy. By allowing your child to create an account or use the Service, you consent to the collection and use of your child’s personal data as described here. You may access, correct, or delete your child’s data at any time (see Sections 8 and 9). If you believe we hold personal data about a child without appropriate consent, contact us at [email protected] and we will delete it.

2. What we collect

We collect only what the Service needs to work:

a. Account data. If you create an account, we collect your email address and a display name (you choose the display name — it need not be a real name). You may also sign in with Google, in which case Google provides us your email address and basic profile. You can also play as an anonymous guest, in which case we do not collect an email.

b. Learning data. As you use the Service we store your learning progress — quiz results, per-character writing and recognition scores, and which words you have practised — linked to your account identifier. This is what lets you resume and see your progress.

c. Handwriting input. When you write a character, your stroke data (the lines you draw) is processed. Most recognition happens on your device. On “Check”, to improve accuracy for difficult characters, your strokes may also be sent to Google’s Input Tools service for recognition (see Section 5). Strokes are used only to score the character; we do not use them to identify you.

d. Device and usage data. We collect limited technical and usage information — approximate page/screen views, feature interactions (e.g. which characters are skipped), browser type, and general device information — to understand how the Service is used and to fix problems. On our website (sgtingxie.com), whose audience is parents, we use Google Analytics 4 with its advertising features (Google Signals and remarketing) enabled — so we can measure our marketing and reach past visitors with our own ads. It sets first-party analytics cookies (e.g. _ga) and may set Google advertising cookies. In the app (app.sgtingxie.com), where children learn, analytics are cookieless and we run no advertising features. In all cases we do not attach your name or email to analytics, and we do not use children’s app activity for advertising. You can refuse or delete these cookies, or opt out, at any time (Section 6).

e. Security data. To protect the Service from abuse, we use Google reCAPTCHA / Firebase App Check, which collects device and interaction signals as described in Google’s policies (Section 5).

f. Local storage on your device. We store some data locally in your browser (e.g. an in-progress quiz, your last level, and sign-in tokens) so the Service works and can resume. This stays on your device and is not personal data we hold on our servers.

3. How we use personal data

We use personal data to:

• provide, operate, and maintain the Service and your account;
• save and show your learning progress and let you resume;
• score handwriting and generate audio for words;
• keep the Service secure and prevent abuse;
• understand usage in aggregate and improve the Service; and
• communicate with you about the Service (e.g. account or early-access notices) where you have provided an email.

We rely on your consent (PDPA) for these purposes; where relevant, we also process data as necessary to provide the Service you have asked for.

4. We do not

• We do not sell personal data.
• We do not show advertising inside the Service (no ads in the app or web app).
• We do not use children’s learning activity to build advertising or marketing profiles. Advertising features run only on our parent-facing marketing website (Sections 5 and 6).
• We do not collect more data than the Service needs.

5. Third-party services (data processors)

The Service relies on the following providers, who process data on our behalf or as independent controllers under their own policies. Some are located outside Singapore, so your data may be transferred and processed overseas; we take reasonable steps to ensure a comparable standard of protection as required by the PDPA.

We do not control these providers’ own practices. Google’s services (including Firebase, reCAPTCHA, and Input Tools) are governed by Google’s own Terms of Service and Privacy Policy, and we encourage you to review them, along with PostHog’s and Cloudflare’s privacy policies.

6. Cookies and similar technologies

Our marketing website (sgtingxie.com), whose audience is parents, uses Google Analytics 4 with its advertising features (Google Signals and remarketing) enabled, so we can measure our marketing and reach past visitors with our own ads. It sets first-party analytics cookies (_ga and related) and may set Google advertising cookies. We use these only on the marketing website — the app (app.sgtingxie.com), where children learn, uses cookieless analytics (PostHog) with no advertising features, and Cloudflare Web Analytics is also cookieless. You can refuse or delete these cookies in your browser settings on any device; opt out of Google’s advertising personalisation in your Google Ads Settings; and on desktop browsers install Google’s Analytics opt-out add-on. The Service still works without them. We also use local browser storage and authentication tokens that are strictly necessary to sign you in and let the Service function (Section 2f).

7. How long we keep data

We keep account and learning data for as long as your account is active. When you delete your account — or ask us to delete your data — we delete or anonymise your personal data within 30 days, except where we are required to retain it longer to comply with a legal obligation. Aggregated, non-identifying analytics that cannot be linked to you may be kept longer.

8. Security

We use industry-standard measures — including access controls and encryption in transit — and rely on Google Firebase’s security for stored data. No system is perfectly secure, but we take reasonable steps to protect personal data against unauthorised access, use, or disclosure.

9. Your rights (PDPA)

Subject to the PDPA, you may:

• access the personal data we hold about you (or your child);
• correct inaccurate data;
• withdraw consent and ask us to stop using your data; and
• delete your account and associated data — you can delete your account and progress in-app (Account screen), or contact us.

To exercise these rights, or with any question or complaint about your personal data, contact our Data Protection Officer at [email protected]. We will respond within the timeframes required by the PDPA.

10. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here with a new “Last updated” date and, where the changes are significant, take reasonable steps to notify you.

11. Contact us