Privacy Policy

Effective date: June 11, 2026

This Privacy Policy explains how Chitok handles information when you use the Chitok iOS app, subscription verification API, and related daily lesson media services.

Information We Collect

Chitok does not provide or store Chitok account usernames, passwords, server-side sessions, or a backend user database. The iOS app stores learning activity on your device, including completed lesson IDs, saved vocabulary entries, selected settings, and cached lesson videos, speech audio, and explainer images. Chitok does not request camera, microphone, contacts, photo library, or location access for its core learning features.

When your device requests the API, website, or static media files, Chitok's servers or hosting providers may automatically receive basic technical request information such as IP address, user agent, request time, requested URL, CloudFront access cookies, and request headers. Chitok does not use third-party advertising or analytics SDKs in the iOS app.

Apple Subscriptions

If you subscribe to Chitok Pro, purchases are processed by Apple. Chitok receives signed StoreKit transaction information only when needed to verify Pro access and issue short-lived CloudFront cookies for protected lesson media. This transaction information can include product ID, transaction IDs, original transaction ID, purchase date, expiration date, revocation date when applicable, signed transaction data, environment, and entitlement status. Chitok does not store a subscription table tied to a Chitok account, and we do not receive your full payment card details.

Vocabulary Sync

Saved vocabulary entries are stored on your device and, when iCloud is available, synced through your private iCloud storage using CloudKit. Chitok does not operate a backend account database for saved vocabulary, and its backend is not designed to receive your plaintext saved vocabulary entries.

Daily Lesson Media

The app fetches shared daily word and Chinese idiom records, videos, explainer images, and speech audio from static media hosting. These daily lessons are selected and generated by Chitok's scheduled backend workflow and are not personalized to you. Requests for the media may be included in normal server or CDN logs.

How We Use Information

We use information to operate the app, verify subscriptions, serve backend-generated Mandarin lesson content, prevent misuse, troubleshoot errors, and maintain service reliability.

Sharing

We do not sell your personal information and we do not use it for third-party advertising tracking. We use service providers for hosting, static media delivery, file storage, AI script and image generation, text-to-speech, subscription verification, CloudKit sync, and payment processing. For backend-generated lesson content, selected Mandarin words or Chinese idioms, examples, generated scripts, narration text, visual prompts, and speech audio used for caption alignment may be sent to AI providers such as OpenAI; AI outputs can include generated scripts, images, and speech audio. Apple processes purchases, subscriptions, and private CloudKit sync. Information may also be disclosed if required by law or to protect Chitok, users, or the public.

Cookies and Local Storage

The backend can issue short-lived CloudFront cookies after verifying an active StoreKit entitlement so protected lesson media can play. The app stores learning progress, saved vocabulary, subscription access state, and cached lesson media on your device. Chitok does not place third-party advertising cookies.

Retention

We keep shared daily lesson media for as long as needed to provide the service. Server, CDN, subscription verification, and generation workflow records are kept only as needed for service operation, security, troubleshooting, legal compliance, dispute resolution, abuse prevention, and agreement enforcement. StoreKit transaction payloads sent to the CloudFront cookie endpoint are verified for that request and are not linked to a Chitok account. Local device data and CloudKit data remain under your Apple device and iCloud controls.

Your Choices

You can use in-app controls to manage progress, saved vocabulary, local data reset, and subscription restore. You can manage or cancel Apple subscriptions through Apple, and you can manage iCloud data through Apple device and iCloud settings. You may contact us with privacy questions.

Security

Chitok uses safeguards such as StoreKit signed transaction verification, short-lived CloudFront cookies, HTTPS, provider access controls, and Apple's CloudKit protections for private synced app data. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Children

Chitok does not knowingly collect personal information from children through the app.

Changes

We may update this policy from time to time. When we make material changes, we will update the effective date on this page.

Contact

For privacy questions, contact chitokapp2026@gmail.com.