Privacy Policy
Applies to the WhatJapanese, WhatEnglish, WhatKorean, WhatThai, WhatSpanish, and WhatCantonese iOS apps.
Updated: September 19, 20261. Operator and scope
This app is operated by What (Shenyang) Network Technology Co., Ltd. This policy explains how we process personal information when providing accounts, language learning, progress synchronization, memberships, and customer support.
2. Information we process
For account registration and sign-in, we process the phone number or email address you provide. When you sign in with Apple, we receive the unique user identifier and any name or email address you authorize Apple to share. To limit each account to three authorized iOS devices per language version and let you view or remove devices, we also process a one-way hash of the device identifier, device type, language version, OS version, app version, and last-used time. We do not upload the original device identifier or use this information for advertising tracking. During learning, we save course progress, review records, handwriting and exercise results, learning preferences, and offline synchronization status. Only when you choose to change your avatar does the app receive the image you select in the system photo picker, compress it, and upload it as your avatar. We do not read unselected photos. For membership purchases, we process product identifiers, order status, and transaction evidence supplied by Apple; we do not collect bank card numbers. For feedback, we process your message and necessary account identifiers. For handwriting recognition, we process the strokes you submit, the writing-area dimensions, and the recognition language to return text candidates. When you choose WeChat sign-in, we process the authorized OpenID, UnionID (when provided), and temporary authorization credentials to identify and link your account. Accounts without a verified phone number complete SMS verification before sign-in.
3. Purposes and data minimization
We use this information to create and protect accounts, synchronize learning progress, provide purchased language access, restore purchases, handle faults and support requests, and prevent fraud and abuse. We do not use learning records for cross-app advertising tracking. Declining unnecessary information does not prevent you from using basic features that do not depend on it.
4. System permissions
The app uses system capabilities only when you choose the relevant feature. For example, it requests notification permission when you enable learning reminders. To change an avatar, it uses the system photo picker and receives only the image you select. Declining optional permissions does not affect sign-in or basic learning. The app does not read contacts, location, or advertising identifiers.
5. Third-party services
Apple provides Sign in with Apple, the App Store, and StoreKit transaction services. When SMS sign-in is enabled, the SMS provider processes your phone number only to deliver a one-time code. These providers process necessary information under their own policies. Google InputTools provides handwriting recognition: when you submit handwriting, our server forwards the strokes, writing-area dimensions, and recognition language to Google. This request does not include your account identifier, phone number, or email address. Google is an overseas service provider; its privacy policy is available at https://policies.google.com/privacy. Choosing not to use handwriting recognition does not affect other learning features. One-click phone sign-in uses Alibaba Cloud Phone Number Verification SDK, provided by Alibaba Cloud Computing (Beijing) Co., Ltd., with China Mobile, China Unicom and China Telecom authentication components. After you accept the app privacy policy and enter phone sign-in, the SDK obtains and displays a masked number. We obtain the complete number only after you check the agreements and tap sign in on the authorization page. Providers process necessary network type, IP address, device manufacturer and model, operating system, and SIM status. After you confirm the carrier authorization, our server obtains your phone number for sign-in or registration. SMS and other sign-in methods remain available. Provider policy: https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112211045_86198.html . WeChat sign-in in the Korean app uses Tencent WeChat OpenSDK. Authorization starts only when you choose WeChat sign-in, opens WeChat, and returns to this app. Our server exchanges the temporary authorization code and links the account. You can decline or cancel and use SMS, password, or Apple sign-in. WeChat service privacy information: https://weixin.qq.com/ .
6. Retention, security, and deletion
We retain account information, learning data, and authorized-device records for as long as needed to provide the services. We protect information using HTTPS, access controls, short-lived access tokens, and secure device storage. You can view or remove authorized devices in Profile > Account and Settings > Signed-in Devices. Removal invalidates that device’s existing sessions. You can request complete account deletion in Profile > Account and Settings > Permanently Delete Account. To prevent transaction replay, process refunds or renewal notifications, and support restoration of the same App Store purchase, we may retain Apple transaction identifiers and security mappings that no longer point to account profile information after deletion. These records are not used for advertising or profiling and are deleted when the required legal or security retention period ends. If Apple authorization credentials are invalid, the app asks you to authorize the same Apple Account again to revoke authorization and complete deletion. You may cancel this operation.
7. Children
Users under 14 should use this app with a guardian’s consent and supervision. Guardians who believe a child’s information has been handled improperly can contact us through the channels below.
8. Your rights and contact
You can access, correct, or delete account information in the app and withdraw optional system permissions. For questions about personal information, submit a request through Feedback in the app or visit https://www.whatjp.cn to contact the operator. We will verify your identity and handle your request in accordance with applicable law.