Privacy Policy
Effective date: 2026-10-31
Cloud profile sync: enabled. App Store purchasing: enabled. Written-answer AI: enabled for supported account regions with current permission, Plus access and all server checks. Check current account eligibility in the app; App Store availability alone does not enable AI.
Bahasa Melayu — Notis Privasi Malaysia
Who we are and who can use WhyArc
WhyArc is operated by Cao Jian. Contact jamesloopme@gmail.com for privacy or support. WhyArc is a personal science-learning app for ages 13 and older, available in selected countries and regions. The app confirms which regions currently support new learning accounts; App Store availability alone does not establish account or AI eligibility. We do not offer the service to users under 13. The current 120-lesson English science foundation is designed primarily around ages 13–14; it is not a complete curriculum for every age.
Before your first lesson, we ask for your age and actual country or region. Ages 13–17 are recorded as an age, and adults choose an 18+ band. Selecting under 13 stops setup. We do not infer your country from your App Store currency, IP address, timezone or precise location, and do not ask for precise location. A saved account region is kept across devices; contact support if it needs correction. We do not require a date of birth or identity document. Sign-in verifies control of an account; it does not verify legal adulthood.
For Malaysia learners aged 13–17, a parent, legal guardian or person with parental responsibility must control the sign-in account and explicitly authorize profile/progress processing and submitted-answer AI processing after the English and Bahasa Melayu notice. We record the guardian's declaration, notice version, authenticated account and consent event. This is a recorded declaration with account-control verification, not independent verification of adulthood or a legal relationship. Without the required permission, the server does not authorize a minor profile or AI requests. Settings → Malaysia guardian permission supports a new explicit permission; ordinary sign-in or refresh cannot replace it.
Account learning and sync
Sign in before setting up a learning profile or opening lessons. Firebase Authentication processes your email, account identifier, provider and verification status, and technical security information such as IP address. Passwords and provider credentials are handled by the authentication providers. Your age and learning plan are saved for your account on this device and reused when you sign in again. With profile saving enabled and successful server authorization, your saved learning plan syncs to other devices using the same WhyArc account.
After your profile-saving choice and successful server authorization, WhyArc stores your region, timezone, age band, nickname, grade placeholder, companion color, consent records and minimal learning progress on its United States backend. Progress includes completed lesson identifiers, review scheduling, activity days, reward-related state, and saved learning-goal and schedule preferences. It synchronizes across devices signed into the same account. One account has one learning profile.
Written reasons and explanations are held in memory while the lesson step is open and cleared when you leave it. They are not saved in checkpoints or cloud progress history. After your explicit agreement to the current AI account notice, only an answer you intentionally submit for available Nova feedback is sent for transient processing as described below. Do not enter your full name, school, address, contact details or other identifying or sensitive information. Device storage can be accessible to someone who has access to your device.
AI answer coaching and international processing
AI answer coaching is a core part of WhyArc's registered learning service. Before creating a learning account or continuing registered learning, review this current AI account notice and make an explicit agreement for your account. Existing accounts must review and agree to this changed notice; an older signal-only AI permission or written-answer grant is not promoted automatically. Merely signing in, registering or buying Plus does not replace that agreement. After you agree, you do not need to toggle AI for each request, and typing or agreeing never automatically sends an answer. Online coaching still requires verified account ownership, an eligible profile, server-confirmed Plus and integrity, quota and safety checks. If you decline or withdraw, registered learning pauses; privacy information, data export, account deletion and sign-out remain accessible.
Written-answer AI is offered in supported account regions when the online service is enabled and your current permission, Plus access and all server checks succeed. Regional availability depends on the current provider and service configuration, not the location of the inference server or your App Store currency. The app checks service availability before starting an answer upload. Your account agreement records your choice but does not activate a disabled service or send your writing. If the server reports written-answer AI disabled, no written-answer request is started. A request may still fail after submission; a failure or local science-model guidance is not an AI review of your answer.
With your current written-answer permission, WhyArc sends only the reason or explanation you submit (up to 1,500 characters), the lesson identifier and approved lesson context through its United States backend to BytePlus ModelArk to generate feedback and one follow-up or revision suggestion. BytePlus publishes processing locations in Malaysia, Indonesia and the EU/EEA; we do not claim Malaysia-only processing without verified account-specific guarantees. We do not add your name, email, age, region, account or device identifiers, tokens, subscription information or detailed answer history to the provider prompt, and do not forward your IP address to BytePlus. Personal-information checks are not perfect: do not include identifying or sensitive information in your answer.
WhyArc does not save submitted answers, complete AI prompts, generated feedback or raw provider responses in progress storage, analytics or application logs. They are processed transiently to return feedback. BytePlus states that content triggering safety filters may be retained for up to 180 days in Malaysia. This is not a zero-retention service. Provider contractual safeguards, access controls, retention and deletion procedures apply to these international transfers. AI suggestions may be incomplete or wrong; they are not verified grades or a substitute for checking the approved science model.
AI feedback may include a qualitative learning band and reasons for the current submitted answer: Needs more support, Basic understanding, Clear understanding or Can apply the idea. We do not display numeric AI scores. These temporary suggestions are not verified grades or a measure of your overall ability. The application band requires an application example identified in your submitted answer; it is not proof of general mastery or transfer to other situations. WhyArc does not save these bands or reasons to a learning record, rank learners by them, or use them to decide Sparks, lesson access or completion. After an edit, the previous feedback remains labelled as belonging to the submitted version until you choose to send again.
Open Settings → AI coaching & privacy to withdraw written-answer permission. Withdrawal stops new local requests immediately and pauses registered learning; a connection failure provides a retry to finish account-wide withdrawal. Privacy information, data export, account deletion and sign-out remain accessible. Withdrawal does not automatically delete a profile or legally retained provider records, and does not cancel an Apple subscription. Older app versions may offer separately authorized signal-only hints without sending written answers; those older grants never authorize the written-answer service.
Purchases and reminders
Apple handles payment using the App Store account on your device. WhyArc receives signed transaction information and records product, transaction identifiers, purchase and expiration dates, environment and renewal or revocation state. We do not receive payment-card details or your Apple ID password. A transaction must be verified and bound to the signed-in WhyArc account before it grants Plus. It cannot grant Plus to multiple WhyArc accounts.
In versions with RevenueCat enabled, RevenueCat, Inc. processes an opaque subscription-account UUID, App Store transaction and subscription information, product prices and technical request information to load plans and synchronize purchases. We do not send your email, nickname, age, written answers, learning history or Apple Ads attribution tokens to RevenueCat, or use RevenueCat for targeted advertising. RevenueCat processes this data under its privacy notice at https://www.revenuecat.com/privacy-policy. Contact support for access or deletion requests concerning subscription-provider records; deleting the app does not cancel Apple billing.
Reminders are optional, with at most two per local day, and can be turned off in the app or device settings. They relate to your current learning and stop for a completed daily plan when the app updates the schedule. A lesson title may appear on your lock screen; your name and original answers do not. Local reminders update when this device receives progress.
Home Screen widgets and Live Activities are separate, optional on-device displays. If enabled in Me → Widgets & Live Activities, WhyArc shares only approved lesson titles, learning-step labels and minimal progress with its iOS widget extension. Names, email addresses, ages, credentials and original answers are not included. People who can see your Home Screen or Lock Screen may see these displays. iOS may also show them on paired devices under your Apple settings. Preferences apply to this account on this device; sign-out and account deletion clear the displays. Widgets refresh from saved local progress when WhyArc runs, not directly from the cloud. An unattended Live Activity changes to a paused reminder after 30 minutes; removal may depend on iOS while the app is not running.
Optional Apple Ads measurement
Advertising measurement is off by default. In supported iPhone versions, you can choose whether WhyArc measures the results of its own Apple Ads campaigns. This choice is separate from profile saving, AI permission and Plus. Declining does not change your lessons, purchase eligibility or price. The setting is available from Me and requires a signed-in, eligible learning account.
If you enable measurement, the app sends an Apple AdServices attribution token and a random installation identifier to WhyArc's authenticated United States backend. The backend sends only the token to Apple's attribution service, which also receives the backend's network request information. We do not store the token or the complete Apple response in our database or application logs. We retain the allowed campaign, ad group and keyword identifiers when supplied, the attributed or unattributed result and limited attribution dates and metadata. A missing attribution result is not proof that you arrived organically.
Within WhyArc, this result is linked to your account, a one-way hash of the installation identifier, existing lesson-completion summaries and server-verified Apple subscription records to measure our advertising. We do not send your email, name, age, answers, learning activity or subscription records to Apple Ads or RevenueCat for this measurement. We do not use IDFA, create cross-app profiles, share audiences, sell data or use this information to personalize advertisements. Reports distinguish eligible production subscription records from Sandbox, test access and revoked access; attribution is not proof of a new purchase or profit.
An installation can be associated with only the first eligible account that enables measurement; switching accounts does not transfer its advertising source. You can turn measurement off in the same setting. This immediately stops new local collection, and the app requests removal of server attribution details; if the connection fails, use the displayed retry to finish the server change. The backend rejects late results from an older permission revision. Minimal preference and installation-claim records remain to honor your choice and prevent reassignment until account deletion. Account export includes retained attribution information. Account deletion removes the server attribution and claim records and your local measurement choice. The installation keeps a local retired-claim marker without the deleted account identifier so that its advertising source cannot be reassigned.
Providers, purpose and information we do not collect
Firebase and Google Cloud provide authentication, app integrity, our United States backend and hosting. Apple and Google also process information when you choose their sign-in services; Apple handles App Store purchases. BytePlus is involved only when you explicitly authorize and submit an AI request. Providers operate under their applicable terms and privacy notices. We may disclose limited information when legally required, to protect the service, or for a business transaction subject to applicable safeguards and notice.
We use information to deliver and sync learning, authenticate users, verify purchases, remember privacy choices, prevent abuse and handle support or legal requests. With your separate choice, we also measure the results of WhyArc's own Apple Ads campaigns as described above. We do not sell personal information, show third-party advertisements, use cross-app targeted advertising, or send learning history to marketing trackers. There are no public profiles, social feeds, messaging or public leaderboards. We do not collect precise location, contacts, photos, camera images, microphone audio or voice recordings.
Retention, rights and deletion
Device learning data remains until deleted, app storage is cleared or the app is uninstalled. Account and cloud profile data are retained while needed to provide your account. Firebase states that authentication data is removed from live and backup systems within 180 days after developer-initiated account deletion. Hosting may retain request IP information for a few months under its service policy. Minimal authorization or transaction evidence may remain when necessary for security, disputes, legal obligations or a documented legal hold. It must not be used to retain original writing or detailed progress.
Use Settings to export account data, withdraw AI permission or start account deletion. Deletion requires recent sign-in. The backend first freezes cloud writes and durably accepts a deletion job; cleanup may then continue asynchronously. The app keeps data closed until completion is confirmed. A queued job does not mean all provider or backup cleanup has finished. Account deletion does not cancel an App Store subscription; cancel renewal through Apple separately.
Contact jamesloopme@gmail.com to request access, correction, export, deletion or help withdrawing permission. We may verify control of your account and ask only for information necessary to handle the request. If someone under 13 has supplied information, contact us so we can investigate and remove it as appropriate. Applicable local rights remain available. Material changes will receive updated notice and renewed permission where required.
Notis Privasi WhyArc — Malaysia
Tarikh kuat kuasa: 2026-10-31
Pengawal data dan cara menghubungi kami
WhyArc dikendalikan oleh Cao Jian. Untuk pertanyaan privasi, sokongan, akses, pembetulan, eksport, pemadaman atau penarikan balik persetujuan, hubungi pegawai hubungan privasi di jamesloopme@gmail.com. Notis ini menerangkan pemprosesan data untuk pengguna Malaysia. Notis dalam bahasa Inggeris juga tersedia pada halaman Privasi yang sama. Hak mandatori di bawah undang-undang yang terpakai tidak diketepikan.
WhyArc ialah latihan sains tambahan untuk pelajar berumur 13 tahun ke atas, bukan sekolah atau jaminan keputusan peperiksaan. Kandungan pelajaran semasa adalah dalam bahasa Inggeris, terutama asas sains bagi umur sekitar 13–14 tahun. Kami tidak menawarkan perkhidmatan kepada kanak-kanak bawah 13 tahun.
Pelajar bawah 18 tahun dan persetujuan penjaga
Di Malaysia, ibu bapa, penjaga sah atau orang yang mempunyai tanggungjawab keibubapaan mesti memberi persetujuan bagi pemprosesan data pelajar bawah 18 tahun. Penjaga hendaklah menggunakan akaun log masuk yang dikawalnya sendiri, membaca notis ini serta penerangan AI dan membuat pilihan persetujuan yang berasingan. Jangan mendaftarkan akaun seorang kanak-kanak tanpa persetujuan yang diperlukan.
Kami merekodkan pengakuan bahawa orang yang memberi kebenaran berumur sekurang-kurangnya 18 tahun dan merupakan ibu bapa atau penjaga sah, versi notis, akaun yang disahkan dan rekod peristiwa persetujuan. Pengesahan log masuk hanya mengesahkan kawalan terhadap akaun; ia bukan pengesahan bebas umur atau hubungan penjagaan. Kami tidak meminta dokumen pengenalan atau tarikh lahir penuh. Satu akaun mempunyai satu profil pembelajaran.
Data, sumber dan tujuan
Data datang daripada maklumat yang anda berikan, pilihan serta aktiviti pembelajaran, dan perkhidmatan log masuk atau pembelian yang anda gunakan. Firebase Authentication mengendalikan e-mel, pengecam akaun, penyedia log masuk, status pengesahan serta maklumat keselamatan teknikal seperti alamat IP. Kata laluan dikendalikan oleh penyedia pengesahan, bukan dihantar kepada penyedia AI.
Selepas persetujuan penyimpanan profil dan pengesahan pelayan berjaya, kami menyimpan negara atau wilayah sebenar yang dipilih, zon masa, umur pelajar atau kumpulan 18+, nama panggilan, ruang letak tahap sekolah, warna teman, rekod persetujuan dan kemajuan minimum pada pelayan kami di Amerika Syarikat. Kemajuan merangkumi pengecam pelajaran yang selesai, jadual ulang kaji, hari aktiviti, keadaan ganjaran serta matlamat dan jadual pembelajaran. Data ini menyokong akaun, penyegerakan antara peranti, keselamatan, pengesahan kelayakan, pembelian dan sokongan.
Kami tidak menentukan negara tempat tinggal melalui mata wang App Store, lokasi tepat, alamat IP atau zon masa. Jika negara akaun tersilap, hubungi sokongan untuk pembetulan. Kami tidak mengumpul lokasi tepat, kenalan, foto, imej kamera, audio mikrofon atau rakaman suara. Tiada profil awam, pemesejan sosial atau papan kedudukan awam.
Jawapan bertulis, AI dan pemindahan antarabangsa
Bimbingan AI ialah sebahagian daripada pembelajaran berdaftar. Persetujuan jelas kepada notis AI semasa diperlukan; persetujuan penyimpanan profil atau pembelian sahaja tidak memberi kebenaran AI. Bagi pelajar Malaysia bawah 18 tahun, kebenaran ibu bapa atau penjaga juga diperlukan. Mengetik setuju atau menaip tidak menghantar jawapan secara automatik. Hanya apabila anda memilih untuk meminta maklum balas, jawapan sains semasa sehingga 1,500 aksara serta konteks pelajaran yang diluluskan dihantar melalui pelayan WhyArc di Amerika Syarikat kepada BytePlus ModelArk.
Lokasi pemprosesan yang diterbitkan oleh BytePlus termasuk Malaysia, Indonesia dan EU/EEA. Pemprosesan antarabangsa ini diperlukan untuk menyediakan bimbingan yang anda minta. Kami tidak menambahkan nama profil, e-mel, pengecam akaun, token log masuk atau sejarah pembelajaran kepada permintaan AI. Jangan masukkan nama penuh, sekolah, alamat, maklumat hubungan atau data sensitif dalam jawapan. Penapis automatik tidak dapat menjamin semua maklumat peribadi dikesan.
WhyArc tidak menyimpan jawapan asal atau balasan AI sebagai sejarah jawapan atau kemajuan awan. Draf dipegang dalam memori semasa langkah pelajaran dibuka dan dikosongkan apabila anda meninggalkannya. BytePlus mungkin menyimpan kandungan yang ditandai oleh penapis keselamatan sehingga 180 hari di Malaysia. Oleh itu, kami tidak menjanjikan pemprosesan tanpa penyimpanan oleh semua penyedia.
Maklum balas AI boleh tersilap dan bukan gred peperiksaan atau ukuran kekal kebolehan. Empat tahap kualitatif menerangkan jawapan yang dihantar sahaja, bukan bukti penguasaan umum. Semak model sains. AI memerlukan Plus aktif, kebenaran semasa, negara akaun yang disokong, sambungan serta semakan pelayan. Persetujuan tidak mengaktifkan perkhidmatan yang ditutup, dan kegagalan atau panduan setempat bukan penilaian AI terhadap jawapan anda.
Pembelian dan penyedia perkhidmatan
Apple mengendalikan pembayaran melalui akaun App Store anda dan memaparkan harga tempatan, tempoh serta syarat pembaharuan. WhyArc menerima maklumat transaksi yang ditandatangani, produk, pengecam transaksi, tarikh pembelian dan tamat tempoh serta keadaan pembaharuan atau pembatalan. Kami tidak menerima butiran kad bayaran atau kata laluan Apple ID. Plus hanya diberikan selepas transaksi disahkan dan dipautkan kepada akaun WhyArc yang sedang dilog masuk. Memulihkan pembelian tidak membuat caj baharu; pemadaman akaun tidak membatalkan langganan Apple.
Apabila diaktifkan dalam versi dipasang, RevenueCat memproses UUID akaun langganan yang tidak mendedahkan identiti secara langsung, maklumat transaksi App Store, langganan, harga produk dan maklumat permintaan teknikal. Kami tidak menghantar e-mel, nama panggilan, umur, jawapan bertulis, sejarah pembelajaran atau token atribusi Apple Ads kepada RevenueCat. Firebase dan Google Cloud menyediakan pengesahan, pemeriksaan integriti aplikasi, pelayan Amerika Syarikat dan pengehosan. Apple dan Google memproses maklumat apabila perkhidmatan log masuk mereka digunakan. BytePlus menerima kandungan hanya untuk permintaan AI yang dibenarkan. Penyedia beroperasi di bawah notis dan terma mereka sendiri.
Kami boleh mendedahkan maklumat terhad apabila dikehendaki undang-undang, bagi melindungi perkhidmatan, atau untuk transaksi perniagaan dengan perlindungan dan notis yang sesuai. Kami tidak menjual maklumat peribadi, memaparkan iklan pihak ketiga atau menggunakan pengiklanan bersasar merentas aplikasi.
Pilihan tambahan dan paparan peranti
Peringatan pembelajaran, widget dan Live Activities adalah pilihan. Peringatan setempat terhad kepada dua sehari dan boleh dimatikan melalui aplikasi atau tetapan peranti. Widget dan Live Activities berkongsi tajuk pelajaran yang diluluskan, label langkah serta kemajuan minimum dengan sambungan iOS pada peranti; nama, e-mel, umur, kelayakan log masuk dan jawapan asal tidak disertakan. Orang yang melihat skrin utama atau skrin kunci anda mungkin melihat paparan ini. Tetapan akaun pada peranti dan kemas kini iOS mempengaruhi masa penyegaran atau penyingkiran.
Pengukuran Apple Ads dimatikan secara lalai dan memerlukan pilihan berasingan. Menolaknya tidak mengubah pelajaran, harga atau kelayakan pembelian. Jika diaktifkan pada versi iPhone yang disokong, token AdServices dan pengecam pemasangan rawak dihantar kepada pelayan WhyArc yang disahkan di Amerika Syarikat; hanya token dihantar kepada perkhidmatan atribusi Apple. Kami tidak menyimpan token atau balasan penuh Apple dalam pangkalan data atau log aplikasi. Kami menyimpan keputusan atribusi terhad yang dipautkan kepada akaun dan statistik langganan untuk mengukur kempen WhyArc, bukan untuk menjejak anda merentas aplikasi. Anda boleh mematikan pengukuran dan meminta pembersihan rekod melalui tetapan pengukuran.
Penyimpanan, keselamatan dan pemadaman
Data pembelajaran pada peranti kekal sehingga dipadam, storan aplikasi dikosongkan atau aplikasi dinyahpasang. Data akaun dan profil awan disimpan selama diperlukan untuk menyediakan akaun. Firebase menyatakan data pengesahan dipadam daripada sistem aktif dan sandaran dalam masa 180 hari selepas pemadaman yang dimulakan pembangun. Pengehosan mungkin menyimpan maklumat IP permintaan selama beberapa bulan di bawah dasar penyedianya. Bukti minimum kebenaran atau transaksi mungkin dikekalkan untuk keselamatan, pertikaian, kewajipan undang-undang atau penahanan undang-undang yang didokumenkan; bukti ini tidak boleh digunakan untuk mengekalkan jawapan asal atau kemajuan terperinci.
Pemadaman memerlukan log masuk terkini. Pelayan membekukan penulisan awan dan menerima tugas pemadaman yang tahan kegagalan; pembersihan boleh diteruskan secara tak segerak. Tugas yang beratur bukan bukti semua sandaran atau rekod penyedia telah dipadam. Perlindungan akses, pengesahan dan semakan integriti digunakan, tetapi tiada sistem bebas risiko.
Hak, persetujuan wajib dan pilihan anda
Gunakan Tetapan untuk mengeksport data, menarik balik kebenaran AI, memadam akaun atau log keluar. Penarikan balik menghentikan permintaan jawapan baharu pada peranti dengan segera; jika rangkaian gagal, cuba lagi untuk menyelesaikan penarikan balik di seluruh akaun. Pembelajaran berdaftar dijeda, tetapi maklumat privasi, eksport, pemadaman, pengurusan akaun dan langganan kekal tersedia. Penarikan balik tidak membatalkan langganan Apple atau memadam secara automatik rekod yang perlu disimpan secara sah. Ibu bapa atau penjaga boleh memberikan kebenaran baharu melalui Malaysia guardian permission dalam Tetapan apabila hendak menyambung semula.
Maklumat akaun, kelayakan umur atau wilayah serta persetujuan profil dan AI yang diperlukan adalah wajib untuk pembelajaran berdaftar. Jika tidak diberikan, kami tidak dapat menyediakan pembelajaran berdaftar; jangan teruskan pendaftaran pembelajaran. Pengukuran iklan dan paparan peranti tambahan tidak wajib. Anda boleh meminta akses, pembetulan, eksport, pemadaman atau bantuan penarikan balik melalui jamesloopme@gmail.com. Kami mungkin mengesahkan kawalan akaun dan meminta hanya maklumat yang diperlukan untuk permintaan itu. Jika data kanak-kanak bawah 13 tahun telah diberikan, hubungi kami supaya kami boleh menyiasat dan membuangnya sewajarnya. Perubahan material akan disertakan notis dan persetujuan baharu apabila diperlukan.
Contact and provider information
Operated by Cao Jian. jamesloopme@gmail.com.
Firebase privacy · BytePlus processing notice · Apple billing support