Ting Xie Mao 听写猫Home

Legal

Privacy Policy

Effective date: 27 August 2026

1. Introduction

This Privacy Policy explains how EnchantingLabs Pte Ltd. (“we”, “us”, or “our”) handles information in connection with the Ting Xie Mao mobile application and related marketing website (together, the “Service”).

We design the Service to process learning activity primarily on the user’s device. We do not operate a proprietary backend that stores learner profiles, practice attempts, worksheet images, or unshared educational content on servers controlled by us. We host a public curriculum and optional Flash Card illustrations described in Section 8, and an optional, user-initiated word-list sharing service described in Section 10.

By using the Service, you acknowledge this Privacy Policy. If you do not agree, you should not use the Service.

2. Operator and contact

The Service is operated by EnchantingLabs Pte Ltd., a company incorporated in Singapore.

Privacy and support enquiries: hello@enchantinglabs.com

3. Scope

This Privacy Policy applies to:

  • use of the Ting Xie Mao iOS application; and
  • visits to our marketing website that links to this Privacy Policy.

It does not govern the privacy practices of Apple Inc. or other independent third parties, except to the extent we describe how the Service interacts with their platforms.

4. Learners and parental responsibility

The Service is designed for learners of all ages practising Chinese spelling and dictation. Where used by minors, use should be under the supervision of a parent or legal guardian. Purchases are managed through the device’s Apple account. Learners are not required or invited to create independent Ting Xie Mao customer accounts.

If you enable a child or minor to use the Service, you are responsible for supervising their use and for any information entered into the Service on your device or Apple account.

5. Information we do not collect on our servers

We do not maintain Ting Xie Mao customer accounts, and we do not operate a service that receives or stores your private learning content for our own hosting. In particular, we do not collect on our servers:

  • learner profile names or learning progress;
  • unshared word lists, practice or test answers, or handwriting strokes;
  • worksheet photographs or camera frames;
  • microphone audio captured for speech practice; or
  • analytics, advertising identifiers, or behavioural tracking profiles for marketing purposes.

When you voluntarily choose to share a word list or folder, that specific snapshot is hosted on our sharing service as described in Section 10. The public educational content described in Section 8 is not learner content; standard connection metadata for those downloads may be processed as described there.

Our marketing website is informational. We do not require website visitors to create an account or submit personal information to browse the site. If you email us, we will process the contents of your correspondence in order to respond.

6. Information processed on your device

Depending on how you use the Service, the application may process the following categories of information locally on your device:

  • Learning data. Profiles, folders, word lists, practice and test attempts, study sessions, review history, and related settings.
  • Worksheet media. Photos or camera captures used for on-device optical character recognition (OCR).
  • Handwriting input. Canvas strokes used to check written answers.
  • Speech input. Microphone audio used for speech recognition after you tap a microphone control. Recognition starts on your device. If on-device recognition is unavailable, the application may send the spoken audio to Apple for recognition.
  • Device permissions and preferences. Settings you configure in the app (for example dictionary script preference, notification preferences, and iCloud sync preference).

Recognition features prefer on-device processing so that practice content does not need to be uploaded to EnchantingLabs. When the Apple online fallback is needed, voice input is processed by Apple, not EnchantingLabs.

7. Apple services

The Service relies on Apple platforms. Apple, not EnchantingLabs, provides and controls these services subject to Apple’s terms and privacy policy. Depending on your choices and device configuration, this may include:

  • App Store purchases and subscriptions. Payment processing, purchase restoration, and subscription management are handled by Apple. The application does not use Sign in with Apple. Purchases restore through the Apple ID signed in on the device.
  • iCloud / CloudKit sync (optional). If you enable iCloud sync, learning data may be stored in your own iCloud account and synchronised across your devices. That data is held under your Apple account; it is not stored on EnchantingLabs servers.
  • System frameworks. Features such as camera, the system photo picker, speech synthesis, speech recognition, and notifications use Apple system APIs. When you tap a microphone and on-device recognition is unavailable, Apple may process the spoken audio on its servers under Apple’s privacy terms.

We do not control Apple’s processing of account, payment, or iCloud data. Please review Apple’s applicable privacy information for those services.

8. Public educational-content downloads

The application may download a public curriculum catalog and optional curriculum files, a public visual index, and optional Flash Card illustrations from our Cloudflare-hosted endpoint at tingxiemao.com. These files are published educational content (for example school word lists and reviewed learning illustrations), not a learner’s private library. Downloaded content may be cached on the device.

The application checks words against the downloaded visual index locally on the device. It does not send the text of a custom word to find a match, and a word with no match creates no illustration request. If a word matches a public concept in the index, the application may request the corresponding public illustration file by its content hash. Because the catalog of illustrations is public, the specific asset URLs requested indicate which public visual concepts were studied. Those requests contain no learner profile details, account identifiers, advertising identifiers, or custom spelling attempt records. Standard HTTPS connection metadata, such as IP address, request time, requested asset URL, and user-agent, may be processed by Cloudflare and by us for security, caching, and content delivery. We do not use that metadata to identify you or any learner, to build a marketing profile, or to track users across apps or websites.

9. Optional third-party components

Certain handwriting-recognition features may use Google’s ML Kit Digital Ink Recognition library. Where that feature is used, the application may download a handwriting recognition model to the device. After the model is available, recognition of your handwriting strokes is intended to run on-device. EnchantingLabs does not upload your handwriting content to EnchantingLabs servers in connection with this feature.

Separately from your handwriting content, Google’s ML Kit library collects a limited set of diagnostic and usage-analytics data and sends it to Google whenever the feature initializes, downloads a model, or processes a recognition request. Google documents this data as including device and app information, per-installation identifiers not intended to uniquely identify you, performance metrics such as latency, error codes, event types (for example feature initialization, model download, or detection), and the configured recognition language. This diagnostic data does not include the handwriting strokes, images, or answers you write. It is collected by Google under Google’s own terms and privacy practices, not by EnchantingLabs, and we do not receive it.

10. Shared word lists and folders

The application allows you to voluntarily share a word list or folder with others. When you choose to share content:

  • Content snapshot. The list or folder title and the associated Chinese spelling words (characters and pinyin) are transmitted to our sharing endpoint at share.tingxiemao.com. Practice attempts, test scores, handwriting strokes, and learner profiles are not included in the shared snapshot.
  • Verification and security metadata. To protect against automated abuse, spam, and denial of service, the sharing service verifies device integrity (via Apple App Attest) and active purchase entitlement (subscription or lifetime purchase via StoreKit signed transaction data). The service records the App Attest key identifier and StoreKit transaction identifier with the share record for rate limiting and fraud prevention. Request source IP addresses are also retained in temporary hourly security state to enforce sliding rate limits on challenge creation and share reads. The attested public key metadata and assertion replay counter are retained in secure cloud storage to enforce ongoing per-device rate limits across shares, while temporary idempotency records linking the key and transaction to a specific share token expire after 24 hours. These identifiers are not linked to a personal account or used for advertising or cross-app tracking.
  • Public accessibility. The sharing service generates a unique web link. Anyone who possesses the link can view the shared title and words on our web preview page or import the words into Ting Xie Mao.
  • Retention and takedown. Shared snapshots are stored in secure cloud storage (Cloudflare KV) with a retention window of 180 days, after which they automatically expire and are purged. If you encounter shared content that is objectionable or violates our terms, you can report it to hello@enchantinglabs.com. When an operator records a takedown, public access and importing are immediately disabled (returning an HTTP 410 status), while the underlying record remains suppressed until the 180-day retention window expires.

11. Device permissions

The application may request access to device capabilities such as the camera, microphone, speech recognition, and notifications. These permissions are used to provide the corresponding features described in this Privacy Policy. You may deny or later revoke permissions in your device settings, though some features will then be unavailable.

Importing an existing worksheet photo uses Apple’s system photo picker. That picker does not require Photo Library permission; the application receives only the image you choose.

12. Retention

Unshared learning data remains on your device, and in your iCloud account if sync is enabled, until you delete it or remove it through Apple’s account or device controls. Voluntarily shared word list snapshots are retained on our sharing servers for up to 180 days as described in Section 10; recording a takedown immediately disables public access, with underlying data purging automatically when the 180-day storage TTL expires. Device verification metadata (App Attest public key records and replay counters) is retained securely in cloud storage to maintain rate limiting and prevent abuse across sharing operations, while hourly IP rate-limit state and 24-hour share idempotency records expire automatically.

Emails you send to us may be retained for as long as reasonably necessary to handle your request and meet legal or operational requirements.

13. Deletion

You may permanently delete learner profiles and learning data from within the application by opening Settings → Account → Delete All Tingxie Data and confirming the deletion prompt. Where iCloud sync is active and the app is publishing to your mirrored iCloud store, deletion is intended to remove the relevant Ting Xie Mao learning data for that iCloud account across synced devices. Deletion of app data does not delete your Apple Account.

You may also remove the application from your device. If iCloud sync was previously enabled, you may need to manage or delete remaining iCloud data using Apple’s controls.

If you need assistance, contact hello@enchantinglabs.com.

14. Disclosure of personal data

We do not sell personal data. Private learning content is not disclosed from EnchantingLabs servers because we do not host that content on our servers. Content you voluntarily share through a public share link is accessible to anyone with the link as described in Section 10.

We may disclose information if required by applicable law, regulation, legal process, or governmental request, or if necessary to protect our legal rights, users, or the public. If you contact us by email, our service providers who support email or business operations may process that correspondence on our behalf under appropriate arrangements.

15. International transfers

EnchantingLabs is based in Singapore. Apple and other platform providers may process data in jurisdictions outside Singapore in accordance with their own terms. The optional Google ML Kit component described in Section 9 may likewise involve Google infrastructure outside Singapore, both for model download and for Google’s own diagnostic and usage-analytics data collection. The public educational-content downloads described in Section 8 and sharing services described in Section 10 may involve Cloudflare infrastructure outside Singapore for content delivery and storage.

16. Your rights

Depending on applicable law, including Singapore’s Personal Data Protection Act 2012 (“PDPA”), you may have rights to access, correct, or withdraw consent in relation to personal data that we control. Because learning content is stored on your device and optionally in your iCloud account, the primary means of access, correction, and deletion for that content is through the application and your Apple account controls.

For requests relating to personal data we control (for example, email correspondence with us), contact hello@enchantinglabs.com. We may need to verify your request before responding.

17. Security

We take reasonable steps appropriate to our architecture, which is designed so that unshared educational content remains under your device and Apple-account controls rather than on EnchantingLabs servers. Where content is voluntarily shared, snapshots and verification metadata are stored using secure cloud infrastructure (Cloudflare KV). No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security of information processed by your device or by third-party platforms.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Effective date” at the top of this page will be revised when changes are posted. Continued use of the Service after an update constitutes acceptance of the revised Privacy Policy, except where applicable law requires otherwise.

19. Governing law

This Privacy Policy is governed by the laws of the Republic of Singapore.

20. Contact

EnchantingLabs Pte Ltd.
Email: hello@enchantinglabs.com