Last updated: 17 July 2026

Privacy Policy

HuaStar is operated from Singapore and complies with the Personal Data Protection Act 2012 (PDPA). This policy explains how we collect, use, disclose, and protect your personal data — including children's voice recordings.

1. What We Collect

Account info: email address, display name, primary level (P5/P6).
Voice recordings: audio of your child reading passages or answering conversation questions.
Practice data: AI-generated transcripts, scores, and feedback.
Billing info: handled by our payment provider (Stripe); we do not store full card numbers.
Technical info: IP address, browser, device type (for security & analytics).

2. How We Use It

To transcribe your audio and grade your practice attempt.
To save your practice history so you can review past attempts.
To improve our grading prompts and content (in aggregated, anonymised form).
To process payments and manage subscriptions.
To send service emails (e.g. confirmation, password reset).

3. Voice Recordings (Children)

Voice recordings are sent securely to our AI provider (Google Gemini via Lovable AI Gateway) for transcription, then to our grading model. We do not use child voice recordings to train third-party AI models. Raw audio is stored only as long as needed to generate the score; you may request deletion at any time.

4. Parental Consent

For users under 13, a parent or guardian must create the account and provide consent for voice recording and processing. By signing up on behalf of a child, you confirm you have this authority.

5. Third Parties

Lovable Cloud (Supabase) — account storage and database.
Lovable AI Gateway (Google Gemini) — transcription and grading.
Stripe — payment processing.

These providers may store data outside Singapore (e.g. EU, US). They are contractually bound to PDPA-equivalent standards.

6. Your Rights (PDPA)

You can request: access to your personal data, correction of inaccurate data, withdrawal of consent, or deletion of your account. Email admin@huastar-sg.com with your request; we respond within 30 days.

7. Data Retention

Account and practice data are kept while your account is active. We delete inactive accounts after 24 months. Billing records are kept for 7 years (Singapore tax law).

8. Security

All data is transmitted over HTTPS and stored encrypted at rest. Access is restricted via row-level security and admin roles.

9. Cookies

We use only essential cookies for authentication. No tracking or advertising cookies.

10. Contact / Data Protection Officer

Email: admin@huastar-sg.com.