Privacy Policy

This Privacy Policy explains how Lex, an independent developer (“MandoMaxxing”, “we”, “us”), collects, uses, and shares information when you use the MandoMaxxing mobile app and this website (together, the “Service”). By using the Service, you agree to this policy.

1. Information we collect

Account information

When you create an account we collect your email address and, if you sign in with Google or Apple, the basic identifiers those providers return. We do not receive or store your social-login password.

Learning data

To personalise and track your learning, we store your chosen HSK level and topics, the stories generated for you, saved vocabulary, quiz and practice results, mastery and streak progress, and your focus-task activity (for example which unlock tasks you completed and when).

Blocked apps and screen time

The focus shield uses your device's built-in screen-time controls (Apple's Family Controls on iOS). Your selection of blocked apps is stored by the operating system as opaque tokens on your device: we never receive, store, or can see which apps you block, and that information never leaves your device. We store only the non-identifying state needed to run the feature, such as whether the shield is on and when your unlock window ends.

Voice (read-aloud practice)

When you read a story aloud, your microphone audio is processed by your device's built-in speech-recognition service (provided by the device's operating system) to follow your reading in real time. Depending on your device and settings, that service may process audio on the operating system vendor's servers (for example Apple's speech-recognition servers on iOS), under that vendor's own privacy terms. Your voice audio is never sent to our servers, and we do not upload, store, or retain your voice recordings.

Usage, device, and diagnostic data

We collect analytics about how the Service is used (for example screens viewed and feature interactions), basic device and app information (device type, OS version, app version, language), and crash and error diagnostics to keep the app stable.

Notifications

If you enable notifications, we store a push token so we can send reminders. You can turn notifications off at any time in your device settings.

Purchases

The app currently offers no in-app purchases. If we introduce them, purchases will be processed by the Apple App Store or Google Play and our purchase infrastructure (RevenueCat); we would record only your subscription status and entitlements, and we never receive your full payment-card details.

2. How we use information

• To provide, personalise, and improve the Service and your learning experience.
• To generate stories and evaluate your writing, quizzes, and reading.
• To maintain your account, progress, streaks, and entitlements.
• To send notifications you’ve opted into.
• To monitor performance, debug issues, and prevent abuse.
• To comply with legal obligations.

3. AI and automated processing

MandoMaxxing uses a third-party AI service to generate learning content and evaluate your input. Your learning context (such as your HSK level, chosen topics, story text, and the sentences you write) may be sent to our AI provider (currently DeepSeek) to produce your stories, quizzes, and feedback. Voice audio is never sent to our AI providers (read-aloud audio is handled by your device's operating system, as described above). These providers process the data under their own terms; we encourage you not to submit sensitive personal information in free-text input. AI-generated content can be inaccurate and is provided for learning purposes only.

4. How information is shared

We do not sell your personal information. We share data with service providers who help us run the Service, including:

• Google Firebase — authentication, database, cloud functions, and hosting.
• DeepSeek — AI generation and grading of learning content.
• Expo — push-notification delivery.
• PostHog — product analytics.
• Sentry — crash and error reporting.
• Apple / Google — sign-in and app distribution.

We may also disclose information to comply with the law, enforce our terms, or protect the rights and safety of our users and the Service.

5. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, your data is permanently deleted from our systems; residual copies in backups and logs are removed within a reasonable period, unless a longer retention period is required by law.

6. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can delete your account directly in the app (Profile → Settings) or by contacting us at chenglex1@gmail.com. We will respond as required by applicable law (including Singapore's PDPA, and the GDPR and CCPA where they apply).

7. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.

8. Security

We use reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. International transfers

Your information may be processed in countries other than your own, including by the service providers listed above. Where required, we rely on appropriate safeguards for such transfers.

10. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, where appropriate, notify you in the app.

11. Contact us

Questions about this policy? Contact us at chenglex1@gmail.com.