Welcome to ChinaReady. We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information. This Privacy Policy explains our practices regarding data collection and usage for our travel preparation application.

1. Information We Collect

1.1 Account Information

Email address (for authentication and account recovery)
Name or username (for personalization)
Password (encrypted and stored securely)
Google account information (if you choose to sign in with Google OAuth)

1.2 Profile Information

Departure country / country of residence
Travel dates and trip details
Travel purpose (tourism, business, study, other)
Personal preferences for trip preparation

1.3 Usage and Task Data

Task completion status and readiness score
Category progress (Documents, VPN, Navigation, Transport, Safety, Accommodation, Payments)
Community posts, comments, and saved content
Session duration and feature usage metrics
Step-by-step guide interaction data

1.4 Technical Information

Device type and operating system (for mobile app optimization)
Browser type and version (for web compatibility)
IP address (for security and fraud prevention)
App usage analytics (crash reports, performance metrics)

2. How We Use Your Information

We use your information to:

Provide personalized preparation checklists: Your departure country and travel details help us generate relevant and tailored readiness tasks
Track your progress: Monitor your readiness score, task completion, and preparation journey
Generate recommendations: Provide country-specific tips, guides, and urgent task alerts
Improve the service: Analyze usage patterns to enhance content and user experience
Authenticate your account: Securely log you in and protect your data
Send important notifications: Account-related updates and preparation reminders (we do not send marketing emails without your consent)

3. Third-Party Services

3.1 Supabase (Database & Authentication)

We use Supabase to store your account information, profile data, and task progress. Supabase is a secure, open-source Backend-as-a-Service platform with enterprise-grade security and GDPR compliance. Your data is stored in encrypted PostgreSQL databases with row-level security policies.

3.2 Google OAuth (Optional Sign-In)

If you choose to sign in with Google, we receive your Google account email, name, and profile picture. Google's own privacy policy applies to their authentication services. We only use this information to create and manage your ChinaReady account.

4. Data Storage and Security

Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest
Access Control: Row-Level Security (RLS) policies ensure you can only access your own data
Password Security: Passwords are hashed using industry-standard bcrypt algorithms
Server Location: Your data is stored on secure servers managed by Supabase (you can request server location details)
Backup & Recovery: Regular automated backups ensure data durability
No Third-Party Sharing: We never sell or share your personal data with third parties for marketing purposes

5. Your Rights

Under applicable data protection laws (including GDPR and CCPA), you have the following rights:

Right to Access
You can view all your data within the app (Profile tab, Task History). For a complete data export, contact us at ventong112358@gmail.com

Right to Data Portability
Request a copy of your data in a machine-readable format (JSON/CSV)

Right to Deletion
You can permanently delete your account and all associated data at any time. This action is irreversible.

Right to Correction
Update your profile information directly in the app or contact us to correct any inaccuracies

6. Data Retention

Active accounts: We retain your data as long as your account is active
Inactive accounts: Accounts inactive for more than 2 years may be automatically deleted after notification
Deleted accounts: Upon account deletion, all personal data is permanently removed within 30 days
Legal obligations: We may retain certain data if required by law (e.g., for tax or legal purposes)

7. Children's Privacy

ChinaReady is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such data, please contact us immediately at ventong112358@gmail.com, and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when the policy was last revised. We will notify you of significant changes via email or in-app notification.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: ventong112358@gmail.com
Response Time: We aim to respond to all inquiries within 48 hours

10. International Users

ChinaReady is operated globally. If you access our service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using ChinaReady, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

By using ChinaReady, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.