1. 我们是谁
考啦（“我们”）是一款面向 FRM、CFA、CSC 等考试考生的备考进度 App，由个人开发者 Qing Yang 以“考啦 Kaola”名义运营。本政策说明我们收集哪些信息、怎么使用、保存在哪里，以及你有哪些选择。联系邮箱：[email protected]。
2. 我们收集哪些信息
账号信息
你登录时使用的邮箱（我们会通过邮件发送登录验证码），或 Apple 提供的用户标识（如果你选择“通过 Apple 登录”并隐藏邮箱，我们收到的是 Apple 的私密转发邮箱）。
仅当你登录时
你创建的学习数据
所选考试和考试日期、每周学习目标、各章节学习状态、打卡记录（日期、时长、章节）、你写的笔记、计划设置和每周清单、休息卡使用、考拉的名字、成长进度与装扮、昵称头像等个人资料、App 设置。
你使用 App 时。未登录时只保存在你的手机上；登录后同步到我们的服务器
设备标识
App 随机生成的设备编号，仅用于多设备同步时区分“哪台设备改的”。它不是广告标识符，也不用于跨 App 追踪。
使用同步时
订阅信息
如果你订阅会员，订阅由 Apple 处理，我们（及我们使用的订阅管理服务）只获得订阅状态、产品、到期时间等，不会获得你的银行卡或支付信息。
仅当你订阅时
我们不会收集你的精确位置、通讯录；不使用广告标识符；App 内没有第三方广告。
3. 游客模式
不登录也可以使用核心功能，此时你的学习记录和设置保存在本机。登录后，本机的游客记录会合并到该账号，并在联网时同步到我们的服务器。
4. 我们如何使用信息
- 提供和维护服务：登录、多设备同步、根据你的学习状态生成今日任务和学习计划；
- 处理订阅和会员权益；
- 保障安全、排查故障、防止滥用；
- 回复你的反馈和请求，遵守法律义务。
我们不出售你的个人信息，也不会为了定向广告而与第三方共享。
5. 数据保存在哪里、谁会处理
- Supabase：我们的账号与数据库服务，数据存放在加拿大（Canada Central）区域；
- Apple：Apple 登录、App Store 订阅与付款；
- RevenueCat：订阅管理服务，用于验证和同步会员状态。它会收到用于关联会员权益的考啦账号标识，以及订阅产品、状态和到期时间等订阅信息，其服务器可能位于美国；
- Resend：用于发送登录验证码。为发送邮件并记录投递结果，Resend 会处理你的邮箱地址、验证码邮件内容和投递信息。相关数据会在美国处理和存储。
你的数据可能被传输到上述服务商所在的地区（包括加拿大和美国）处理。除上述情况和法律要求外，我们不会向第三方披露你的数据。
6. 保存期限与删除
只要你的账号存在，我们就保存你的学习数据，以便多设备同步。如需申请删除账号，请发邮件到 [email protected]。如果你的 App 版本支持应用内删除，也可在“我的 → 删除账号”提交申请。删除完成后，我们会删除你的账号以及云端的学习数据（打卡、笔记、章节状态、计划、考拉与装扮、个人资料和设置）。为满足财务记录、退款处理和法律要求，与订阅交易有关的记录可能会在必要期限内保留，期限以满足上述目的所需为限。备份中的残留副本会在正常轮换周期内清除。卸载 App 会移除本机的学习记录和设置。登录凭证可能仍保存在 iOS 钥匙串中，如需退出请先在 App 内登出。注意：删除考啦账号不会取消你的 Apple 订阅。订阅会继续续费，直到你在 Apple 的“设置 → 你的名字 → 订阅”中取消。
7. 你的权利
你可以要求访问、更正、导出或删除你的个人信息，也可以撤回同意。请发邮件到 [email protected]，我们会在合理期限内回复（加拿大 PIPEDA 及适用的美国州法律，例如加州 CCPA/CPRA 所要求的期限内）。我们不出售也不为跨情境广告“共享”个人信息，因此不涉及“不出售”选项。你有权不因行使这些权利而受到歧视。如果你认为我们处理数据不当，加拿大用户也可以向加拿大隐私专员办公室投诉。
8. 未成年人
考啦不面向 13 岁以下儿童，我们不会故意收集 13 岁以下儿童的个人信息。如果你发现孩子向我们提供了信息，请联系 [email protected]，我们会删除。
9. 安全
数据传输使用加密连接，服务端对每个账号的数据做访问隔离，用户只能读取自己的数据。没有任何系统可以做到绝对安全，如发生影响你的数据泄露，我们会按适用法律通知你。
10. 政策变更
我们可能更新本政策。重大变更会在 App 内或本页面提前告知，并更新页首的生效日期。
1. Who we are
Kaola (“we”, “us”) is a study-progress app for people preparing for exams such as FRM, CFA and CSC. Qing Yang, an individual developer, operates it under the name “Kaola”. This policy explains what we collect, how we use it, where it is stored, and the choices you have. Contact: [email protected].
2. What we collect
Account
The email you sign in with (we email you a one-time sign-in code), or the user identifier from Apple if you use Sign in with Apple (if you hide your email, we receive Apple’s private relay address).
Only if you sign in
Study data you create
Chosen exams and exam dates, weekly goals, chapter status, study check-ins (date, duration, chapter), notes you write, plan settings and weekly lists, rest-card use, your koala’s name, growth and wardrobe, profile details such as nickname and avatar, and app settings.
As you use the app. Signed out: stored only on your phone. Signed in: synced to our servers
Device identifier
A random device ID generated by the app, used only to tell which device made a change when syncing. It is not an advertising identifier and is not used to track you across apps.
When syncing
Subscription
If you subscribe, billing is handled by Apple. We (and the subscription-management service we use) receive subscription status, product and expiry date. We do not receive your card or payment details.
Only if you subscribe
We do not collect your precise location or contacts, do not use advertising identifiers, and show no third-party ads in the app.
3. Guest mode
You can use the core features without signing in. In that case your study records and settings stay on your phone. When you sign in, the guest records on this phone are merged into that account and synced to our servers when you are online.
4. How we use information
- To provide the service: sign-in, multi-device sync, and building today’s tasks and study plans from your progress;
- To process subscriptions and membership benefits;
- For security, debugging and abuse prevention;
- To respond to your requests and comply with legal obligations.
We do not sell your personal information and do not share it with third parties for targeted advertising.
5. Where data is stored and who processes it
- Supabase — our account and database provider; data is stored in Canada (Canada Central region);
- Apple — Sign in with Apple, App Store subscriptions and payment;
- RevenueCat — subscription management, used to verify and sync membership status. It receives the Kaola account identifier used to link membership entitlements, plus subscription information such as product, status and expiry date; its servers may be in the United States;
- Resend delivers sign-in codes. It processes your email address, the contents of the sign-in email, and delivery information to send the email and log the delivery result. This data is processed and stored in the United States.
Your data may be transferred to the regions where they operate (including Canada and the United States). Except as described here or required by law, we do not disclose your data to third parties.
6. Retention and deletion
We keep your study data while your account exists so it can sync across your devices. To request account deletion, email [email protected]. If your version of the app supports in-app deletion, you can also submit a request under “Me → Delete account”. Once deletion is complete, we remove your account and your cloud study data (check-ins, notes, chapter status, plans, koala and wardrobe, profile and settings). To meet financial-record, refund and legal requirements, records related to subscription transactions may be kept for as long as needed for those purposes. Residual copies in backups are removed on their normal rotation cycle. Uninstalling the app removes local study records and settings. Sign-in credentials may remain in the iOS Keychain. To sign out, use the sign-out option in the app before uninstalling. Note: deleting your Kaola account does not cancel your Apple subscription. It will keep renewing until you cancel it in Apple’s Settings → your name → Subscriptions.
7. Your rights
You may ask to access, correct, export or delete your personal information, or withdraw consent, by emailing [email protected]. We will respond within a reasonable time and within the periods required by Canada’s PIPEDA and applicable US state laws such as California’s CCPA/CPRA. We do not sell personal information or “share” it for cross-context behavioral advertising. You will not be discriminated against for exercising your rights. Canadian users may also complain to the Office of the Privacy Commissioner of Canada.
8. Children
Kaola is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child has given us information, contact [email protected] and we will delete it.
9. Security
Data is sent over encrypted connections and access is isolated per account on the server, so users can read only their own data. No system is perfectly secure; if a breach affects you we will notify you as required by applicable law.
10. Changes to this policy
We may update this policy. For material changes we will give notice in the app or on this page and update the effective date above.
考啦