Privacy Policy

1. Who is responsible

The controller of your personal data is R8VEN LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States, which sells its apps under the name Kandedong (“we”, “us”). For privacy requests, write to support@kandedong.com. This Policy covers the Kandedong apps, the Kandedong website, the browser extension, the mini apps and the R8VEN website (the “Service”).

2. Private by design

• Your PDFs stay on your device. A PDF that you open is processed in your browser. We do not upload, store or read the files you open.
• OCR runs on your device. Character recognition happens in your browser. Page images are not sent to us.
• Notes, highlights and bookmarks are stored in your browser, unless you use a feature that syncs them. If we offer sync, we tell you when you turn it on.
• The mini apps need no account and run in your browser.
• Your texts stay yours. What you type, paste or open in the mini apps stays out of our analytics. We count which tools you use and which dictionary words come up, and that's all.

3. Personal data we collect

• Account data, through Clerk: your email address and, if you sign in with Google, the basic profile you approve (name and email). We do not store your password.
• Plan and purchase data, through our payment provider: what you bought, your plan and its status, and a transaction or subscription identifier. We do not receive your full card number.
• Entitlement and usage data: your plan, your trial status and end date, and the counters we need to enforce plan limits.
• Technical data: basic logs such as IP address, browser type and timestamps, for security, fraud prevention, rate limits and reliability.
• Support data: what you send us when you contact us.
• Waitlist data: if you join the waitlist on kandedong.com, your email address, the date, the language of the page, your invite code and, if a friend's link brought you, their invite code. We also note which Kandedong app or page sent you to the waitlist (for example “the Sheets app”). Your invite link shows how many friends joined through it.
• Usage data, through PostHog: which Kandedong apps and features you use (for example “a game finished” or “the Share button pressed”), with the app's version, your interface language, theme, device type (phone or computer), your approximate location (country or city, from your IP address) and the Kandedong page that sent you there. An anonymous ID in a cookie lets us tell one visit from the next. We also receive error reports and page-speed measures. Where the law asks us to, we collect this only after you agree (section 12).
• Session recordings, through PostHog: for a share of visits, and for visits where something breaks, a recording of what happened on the screen, so that we can find and fix bugs. Everything you type in a field is hidden in the recording. Where the law asks us to, only after you agree.
• Word statistics: which Chinese words come up in the mini apps (for example a game's answer, a word you look up, save or mark as known), with the app, your interface language, the word's HSK level and your country. We store no IP address with them, and we attach the anonymous ID above only when analytics cookies are allowed. We use them to learn which words learners meet and find hard, and we may publish or license statistics made from them, only as totals that cannot identify anyone.

We do not sell your personal data.

4. Why we use it, and the legal bases

We use personal data to create and manage your account, to provide the Service and its plan limits, to manage purchases and prevent fraud, to give support, to run the waitlist and its invite rewards, to send you news about Kandedong if you joined the waitlist, to secure and improve the Service, to understand how the Service is used, and to comply with the law. Where the GDPR applies, our legal bases are the performance of our contract with you, our legitimate interests (security, fraud prevention, improving the Service, and word statistics without an ID), your consent (the waitlist and its emails, analytics cookies and session recordings), and our legal obligations. We make no automated decisions about you that have legal or similarly significant effects.

5. Payments

When you buy a plan, our payment provider collects and processes your payment and billing details (for example name, email, country, postal code, payment method and tax number if you give one), under its own privacy policy, which the checkout links to. The provider shares with us what we need to give you your plan: your email, the product, the price paid, the country and the subscription status.

6. Service providers

We share only the personal data that each provider needs to work for us, under data protection terms:

7. International transfers

Our providers can process data outside your country, including in the United States. Where the law requires it, transfers rely on safeguards such as Standard Contractual Clauses or a provider's certification under the Data Privacy Framework. PostHog stores our analytics data in the European Union; PostHog is a US company, and its data processing agreement with us includes the Standard Contractual Clauses.

8. Retention

We keep account and plan data while your account is active and as long as we need it to provide the Service. After you delete your account, we delete or anonymize your personal data within 90 days, except records that the law requires us to keep for longer, such as transaction and tax records.

We use waitlist data to tell you when Kandedong opens, to send you news about Kandedong now and then, and to give you and your friends the invite rewards. Every email has a link to unsubscribe, and you can also write to us. We keep waitlist data until you unsubscribe or ask us to delete it.

Usage data and error reports are kept for 1 year, and session recordings for 1 month. Word statistics are kept as individual records for 3 months; after that we keep only totals (per word, app, language, level and day) with no ID. The cookie that holds your cookie choice lasts 1 year, and so does the analytics cookie.

9. Your rights

Depending on where you live, you can have the right to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent. California residents can ask to know, delete and correct their data and to opt out of its “sale” or “sharing”: we do not sell or share personal data in the meaning of the CCPA/CPRA. To use any right, write to support@kandedong.com. We do not treat you differently for using your rights. You can also complain to your data protection authority.

You can use every Kandedong app without allowing analytics. You can turn analytics and session recordings off at any time, in the Settings of any Kandedong app, under Cookies. If your browser sends a Global Privacy Control signal, we treat it as a “no” to analytics cookies and recordings.

10. Security

We protect personal data with technical and organizational measures: encryption in transit, access controls, plan checks on the server, and established providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you think a child gave us personal data, contact us and we will delete it.

12. Cookies and local storage

The Kandedong apps use necessary cookies and browser storage to keep you signed in, to remember your settings, your progress and your cookie choice, and to enforce plan limits. Because these are necessary for the Service, we do not ask for consent to them.

The mini apps also use one analytics cookie, set by PostHog for us, which holds an anonymous ID (PostHog keeps a copy of it in your browser's local storage too). It is shared by every page on kandedong.com, so one choice covers them all.

• In the European Economic Area, the United Kingdom and Switzerland, we ask first. Until you choose “Allow”, we set no analytics cookie and record no session. If you choose “Don't allow”, we still count your visit, without any cookie or ID.
• Elsewhere, analytics cookies and session recordings are on from your first visit. You can turn them off in Settings at any time, and a Global Privacy Control signal turns them off.

13. Changes

We can update this Policy. For a material change we give reasonable notice, for example by email or in the app, and we update the date at the top.

14. Contact

R8VEN LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States. Email: support@kandedong.com.