English · Deutsch · Español · Français · हिन्दी · Indonesia · 日本語 · ខ្មែរ · 한국어 · Melayu · Nederlands · Português · Русский · ไทย · Tiếng Việt
XiaoKao ("the App", "we", "us") is a Chinese (HSK) learning app operated by Sapo. This policy explains what data the App collects, why, and your choices. Creating an account is optional — you can learn fully as a guest, without ever signing in or giving us your name, email address, or phone number. If you choose to sign in (to back up your progress or join the leaderboard), we collect the account data described in Section 2.
Signing in with Google, Apple, or email/password is optional and only needed to back up your progress or use the leaderboard. If you sign in:
You can delete your account and this data at any time — see how to delete your account.
We collect data through third-party services embedded in the App:
Speaking-practice exercises let you record your own voice to compare it with the sample audio. These recordings are saved to your device's temporary storage, played back only on your device, and are never uploaded to us or to any third party. We have no access to them. The microphone is used only while you actively hold/press the record button, and you can decline the microphone permission and still use every other feature.
Unless you choose to sign in (see above), we do not collect your name, email, or phone number. We never collect: contacts, photos, health data, messages, browsing history, precise location, or your voice recordings.
These providers process data on our behalf or, for advertising, as independent parties. Please review their policies:
To play pronunciations, the App requests audio from two services
operated in China: Youdao (dict.youdao.com)
for single words, and Baidu Fanyi
(fanyi.baidu.com) for full sentences. Only the Chinese study
text itself — a word or example sentence that is part of the App's own
lesson content — is sent, together with the network request's own metadata
(such as your IP address, which these providers receive by virtue of the
connection). No account data, progress data, or other personal information
is sent, and your voice recordings are never sent. If neither service is
reachable, the App falls back to your device's built-in text-to-speech,
which works offline.
Analytics data is retained for the period configured in Firebase and then automatically deleted. If you created an account, see how to delete your account — either in the app (Settings → Account → Delete account) or by emailing sapoinc.support@gmail.com, which we act on within 30 days.
Data may be processed on servers operated by our providers (e.g. Google, Apple, RevenueCat, Cloudflare) in countries other than yours, under those providers' safeguards. In addition, pronunciation-audio requests described in Section 4 are served from China (Youdao, Baidu). Those requests carry only Chinese study text and the connection's own metadata (including your IP address) — no account, progress, or identity data. If you prefer not to send any request abroad, you can stay offline for pronunciation: the App falls back to your device's built-in text-to-speech.
The App's learning content is suitable for general audiences, but the App is not directed to children under 13 and we do not market it to them. We do not knowingly collect personal data from children under 13. If you are under 13, please use the App with a parent or guardian. If you believe a child has provided data, contact us and we will delete it.
Data collected by the App is encrypted in transit (HTTPS/TLS). No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.
We may update this policy from time to time. Material changes will be reflected by updating the "Effective date" above and, where appropriate, an in-app notice.
Questions or requests: sapoinc.support@gmail.com
Sapo