Sylvia House Privacy Policy

Versions and choices

Effective date: 15 October 2026. This policy covers the Sylvia House native iPhone/iPad app and this support website. Version 1.0 stores learning records on the device. Version 1.1 adds optional parent Apple or Google sign-in and family cloud storage when that update is available. A parent can choose on-device learning without creating a cloud account. Old on-device records stay separate and are not automatically uploaded or assigned to a cloud family.

Operator

PIXVOGUE PTE. LTD., Singapore operates Sylvia House for children aged 6–8 with an area for grown-ups. Account setup, linking, purchases and external links are intended for a parent or guardian and protected by a grown-up confirmation. Children do not need their own Apple or Google account. Please use child nicknames and do not enter sensitive personal information.

Parent sign-in

If a grown-up chooses cloud storage, Apple or Google verifies the grown-up's account. We receive the provider's stable account identifier and email address when provided. Google access is limited to openid and email; we do not read Gmail messages, contacts, calendars or Drive files. We do not receive Apple or Google passwords. A family session is stored in the device Keychain. Provider authorization tokens are encrypted on the server so access can be revoked when the family account is deleted.

Family records and purpose

Cloud storage contains child nicknames, answers, activity times, progress, creations and observation notes for the signed-in family. We use these records only to provide sign-in, family profiles, learning, synchronization, account security and deletion. Each family has its own account identifier and child records. Equal email addresses do not merge families; linking another sign-in is an explicit parent action. Google account information is not used for advertising, sale, profiling for marketing or model training.

Service providers and storage

Cloud records are held in a private Google Cloud Firestore database in asia-east1, Taiwan, which may be outside your country. Google Cloud Run provides the HTTPS account service. Apple and Google also process information under their own authentication and purchase policies. We do not include advertising, ad identifiers, tracking or marketing analytics. Course content and prerecorded speech are included in the app; no children's learning information is sent to a generative AI service.

Device learning and optional microphone

On-device learner profiles and progress remain in the app's WebKit storage. Optional microphone permission lets a child record and replay a short reading attempt. Recordings stay temporarily in device memory, stop after at most eight seconds or on leaving/backgrounding the activity, and are cleared when leaving. Recordings are never uploaded to the family service. Reading remains available if permission is denied. Some prompts use device speech.

Retention, security and deletion

Cloud family records remain until the parent deletes the family account. In Family account, verify sign-in again if requested, then choose Delete family account and confirm. This revokes the linked provider authorizations, removes the family's active cloud records and clears its matching local WebKit store on that device. Other devices must reconnect to observe account deletion; a signed-out device cannot access that cloud family. Disaster-recovery history may persist for up to seven days and is not used for normal access. Operational request logs, including IP address, browser/device request information, request path, status and time, are retained for 30 days for service operation and security. We do not deliberately log passwords, authorization headers, provider tokens or learning request bodies. Device backups and parent-saved exports are managed separately.

Purchases and exports

Math chapters 1 and 2 are free. One optional non-consumable Apple purchase unlocks the remaining published math chapters. Apple processes payment; we do not receive bank-card details. Sign-in, sign-out or deleting learning data does not cancel that Apple purchase; restore with the Apple account that purchased it. Grown-ups can export learning records through the system share sheet and choose where to save or share them. Exports can contain child nicknames and learning information, are not automatically uploaded, and must be removed separately from any destination or backup.

Support website and privacy requests

Google Firebase Hosting delivers this website and receives connection information needed to serve it. This website has no learner login, advertising, analytics or tracking scripts. A grown-up can contact us to request access, correction or deletion and we may need to verify that request belongs to the family. If you email support, we use your message and reply address only to respond. Avoid sending children's sensitive information, passwords, verification codes or full exported records unless necessary and separately agreed.

Contact

Support and privacy: jason.feng126@gmail.com.