我们怎样保护家庭数据How we protect family data

谁可以使用Who may use DoodleSeed

DoodleSeed 供家长与儿童共同使用。成年人创建并管理家庭账户、孩子档案、付款和数据请求。孩子无需提供邮箱或真实全名。请参阅给孩子看的隐私说明。

DoodleSeed is for families to use together. An adult creates and manages the family account, child profile, payments and data requests. A child does not need to provide an email address or full legal name. See our child-friendly privacy notice.

我们处理什么What we process

• 家长资料：邮箱、显示名称、登录及安全记录。Parent details: email, display name, login and security records.
• 孩子档案：昵称、年龄段、兴趣和家长选择的起始 Level；请勿填写真实全名。Child profile: nickname, age band, interests and starting Level selected by the parent; please do not enter a full legal name.
• 使用记录：打开、点读、阅读完成、答对答错和与汉字相关的复习记录。Usage records: opening, tap-to-read, reading completion, correct and incorrect answers, and character review activity.
• 创作内容：家长选择上传或保存的画作、故事文字和角色信息。Creative content: artwork, story text and character information a parent chooses to upload or save.
• 交易资料：方案、付款及订阅状态和 Stripe 标识；我们不保存完整银行卡信息。Transaction data: plan, payment and subscription status, and Stripe identifiers; we do not store full card details.
• 必要技术信息：设备、浏览器、错误和安全日志，以及维持登录和偏好所需的本地存储。Necessary technical data: device, browser, error and security logs, and local storage needed for sign-in and preferences.

目的与法律依据Purposes and legal bases

我们为建立账户、提供绘画和双语阅读、保存家庭选择保留的内容、处理付款、支持用户及保护服务而使用资料。主要依据是履行与家长的合同；防欺诈、服务安全和改进所需的有限处理基于我们的正当利益；账务保存基于法律义务；法律要求同意时，我们会向家长取得同意。

We use data to create accounts, provide drawing and bilingual reading, save content the family chooses to keep, process payments, support users and protect the service. Our main basis is performance of our contract with the parent. Limited anti-fraud, security and service-improvement processing relies on our legitimate interests; financial record keeping relies on legal obligations; where consent is required, we ask the parent.

儿童隐私默认设置Privacy by default for children

孩子档案默认不公开。我们不展示基于儿童资料的定向广告，不出售个人数据，也不要求孩子建立社交公开档案。家长控制保存、导出与删除。

Child profiles are private by default. We do not show targeted advertising based on a child's data, sell personal data, or require a child to create a public social profile. The parent controls saving, export and deletion.

当前公开版本不会要求孩子上传声音，也不会保存录音。点读和整页朗读由设备浏览器播放。

The current public version does not ask children to upload their voice and does not save recordings. Tap-to-listen and full-page reading are played by the device browser.

保存期限Retention

活跃账户资料在提供服务期间保存。家长申请删除后设有 14 天安全缓冲期，期间可撤回；核验后删除不再需要的云端家庭、孩子、学习及原创绘本资料。法律要求保留的付款、税务、欺诈防范或争议记录会被隔离并仅保存至相应期限届满。设备本地记录可由用户清除浏览器网站数据删除。

Active account data is kept while we provide the service. A deletion request has a 14-day safety period during which it may be withdrawn; after verification, cloud family, child, learning and original-story data that is no longer needed is deleted. Payment, tax, fraud-prevention or dispute records required by law are isolated and retained only for the applicable period. Device-local records can be removed by clearing the browser's site data.

家长权利Parent rights

家长可在家长中心导出家庭数据或申请删除，也可请求访问、更正、限制处理、数据迁移或提出异议。我们可能先核验账户持有人身份，通常会在一个月内答复。联系 team@doodleseed.io。您也可向英国信息专员办公室（ICO）提出投诉。

A parent may export family data or request deletion in the Grown-up centre, and may request access, correction, restriction, portability or object to processing. We may first verify the account holder and normally respond within one month. Contact team@doodleseed.io. You may also complain to the UK Information Commissioner's Office (ICO).

Cookie、本地存储与安全Cookies, local storage and security

当前版本只使用登录、账户安全、付款流程和保存用户选择所必需的 Cookie 或本地存储；不使用非必要广告 Cookie。若日后加入分析或营销工具，我们会先更新说明，并在法律要求时取得选择同意。我们使用传输加密、访问控制和最小权限，但任何在线服务都无法保证绝对安全。

The current version uses only cookies or local storage necessary for sign-in, account security, payments and saving user choices; it does not use non-essential advertising cookies. If analytics or marketing tools are added, we will update this notice and obtain choice-based consent where required. We use encryption in transit, access controls and least privilege, but no online service can guarantee absolute security.