HKGong respects your privacy. This policy explains what we collect and why.
Account data (email), optional app usage events, learning progress, and purchase status.
When a purchase, restore, or subscription-offer check fails or remains unresolved, the app may send a limited technical incident to help us diagnose it: the operation and stage, a standard error code/category, app and native build, iOS or Android platform, approximate durations, and a random identifier used only for that attempt. The stored incident does not contain your account ID, email, receipt, transaction, purchase token, or the text of the underlying error. It is separate from optional Usage Analytics and may be sent when that setting is off.
The incident channel uses an already-existing, valid sign-in session to authenticate the request. Its access token is sent only for that check and is not copied into our incident records or application logs. The incident channel does not create or refresh a session; when no valid session is available, the incident is skipped. Purchases and restores do not depend on incident delivery.
To provide app features, sync progress, improve quality, diagnose payment and subscription problems, and manage subscriptions. Optional app usage events follow the Usage Analytics setting in the app.
The separate technical incident channel is limited to keeping purchases and subscription access reliable. It is not used to measure learning activity, build user profiles, advertise, or calculate purchase conversion. Where applicable, we rely on our legitimate interest in detecting and resolving these operational problems, subject to your rights and the safeguards described here. You may contact us to object to this processing.
HKGong may use Supabase (auth/data and technical incident storage), RevenueCat (subscriptions), and Apple or Google services (payments). Supabase may process technical access logs for requests, including IP address, time, and request metadata, separately from the limited incident record. These logs could allow a request to be associated with a device or person in some circumstances.
Payment incident records are deleted from the live incident table by a daily job after 14 days. Limited copies may remain in provider backups until their retention period expires. Our hosting provider may also retain technical access logs under separate log retention settings. Contact us at the address below if you need details about those settings or your data.
We do not sell personal data. Data is shared only with service providers needed to run the app.
You can request account/data deletion, ask about technical incident data, or object to its processing by contacting us. We will handle requests under applicable law. Since the incident record has no account identifier, we may need information from you to locate a specific event and may be unable to identify one after it has been deleted.
Email: privacy@hkgong.com
Last updated: October 18, 2026