WeCoAp logo – AR Onion

Privacy Policy

Last updated: August 31, 2026

Phiên bản tiếng Việt

1. Scope and definitions

This policy describes how WECOAP Co,. LTD. ("the Company", "We") collects and uses data when You use the AR Onion app on iOS/Android and the website aronion.wecoap.com.

AR Onion is an augmented reality (AR) reader for Vietnamese fairy tales, made for children to use together with their parents. Accounts are always created and managed by an adult; children use the app through child profiles inside that account.

Definitions

Application
AR Onion, the software provided by the Company.
Service
The Application and the AR Onion website.
Account
The parent's account, created by signing in with Google, Facebook or Apple.
Child profile
A profile the parent creates inside the Account for each child (up to 5), holding that child's reading progress and controls.
Personal Data
Any information relating to an identified or identifiable individual.
Usage Data
Data generated automatically by use of the Service — for example reading progress, session length, and technical device data.
Service Provider
A person or company that processes data on the Company's behalf, such as our sign-in provider, push notification delivery, server and file storage infrastructure.
You
The parent or guardian using the Service, including when using it on a child's behalf.

2. Data we collect

Parent account data

You sign in with Google, Facebook or Apple through our authentication provider. We never receive or store the passwords of those accounts. From the sign-in we receive and store:

  • the sign-in provider's identifier and the provider type (Google, Facebook, Apple);
  • the email address, display name and avatar the provider returns.

In the Account section of the Application You may add or edit: full name, phone number, address, date of birth, avatar and display language. None of these fields is required.

Child profile data

For each child profile, the parent provides:

  • the child's display name (a nickname is fine — a real name is not required);
  • date of birth — optional, used only to suggest age-appropriate content;
  • an avatar: either a character supplied by the Application, or a photo the parent picks from the device's photo library.

We do not ask for a child's email address, phone number, postal address, or any other contact detail.

Reading and usage data

Attached to each child profile, we store:

  • reading progress per story and the position to resume from;
  • reading history, favourites and your story library;
  • badges, achievements and reading streaks;
  • reading sessions and daily time used, which power the time limits and the parent report.

Parental control settings

When You open the parent area, we store your settings: daily time limit, bedtime window, content age limit, whether a PIN is required to exit, and the parent-area PIN itself. The PIN is verified on the server; the Application keeps it in memory for the current session only and never writes it to the device.

Device and technical data

  • the push notification token, platform (iOS or Android) and device name — only if You allow notifications;
  • IP address, device type, operating system and diagnostic data generated when the Application calls our servers;
  • the display language You choose.

Data we do NOT collect

  • No location data. The Application neither requests nor uses location.
  • No advertising and no advertising trackers. The Application integrates no ad network and no third-party behavioural tracking toolkit.
  • No data selling. We do not sell or rent your Personal Data or your child's.

3. Device permissions and why we need them

Camera
Required for the AR experience: the Application renders 3D characters and scenes onto the live camera image. Camera frames are processed on the device, are not recorded, and are not sent to our servers.
Microphone
Requested by the AR platform alongside the camera, and used when You deliberately record an AR scene. We do not record audio in the background and do not send audio to our servers.
Photo library
Read: only the photo You pick as an avatar for the Account or a child profile. Write: only when You deliberately save a photo or video captured from the AR experience to your device.
Notifications
Used to send reading reminders and news about new stories. You can turn them off in your operating system settings or in the Application; turning them off unregisters this device's push token.

You may refuse or revoke each permission in your operating system settings. Refusing the camera disables the AR part; the rest of the Application keeps working.

4. Data stored on your device

So that reading and AR work offline, the Application stores on the device itself:

  • the content packages You download: 3D models, images and story audio files;
  • cached content and downloaded images;
  • your sign-in session, held in the operating system's secure storage.

You can remove all of this at any time with "Clear storage" and "Clear audio" in the Application's Settings, or by deleting the Application from the device.

5. How we use the data

  • Providing and maintaining the Service: unlocking the content You may read, saving progress, syncing across your devices.
  • Managing the Account and child profiles: authenticating sign-in, keeping each child's progress separate.
  • Parental controls: applying the time limits, bedtime, age limit and PIN You set.
  • Age-appropriate suggestions: based on a child profile's date of birth, where You provided one.
  • Notifications: reading reminders and news about new content, if You allow them.
  • Handling book orders and support requests You send us.
  • Operating, securing and improving the Service: diagnosing errors, preventing abuse, and aggregate analysis to improve content and features.
  • Meeting legal obligations, including invoicing and tax duties and lawful requests from competent authorities.

6. Sharing your data

We share data only in the following cases:

  • Service Providers: our sign-in provider, push notification delivery, server and file storage infrastructure. They may process the data only on our instructions and for the purposes stated in this policy.
  • Legal requirements: where the law requires it, or to protect the rights and safety of users and of the Company.
  • Business transfers: in a merger, restructuring or transfer of all or part of the business, data may be among the assets transferred; we will give notice before your data becomes subject to a different privacy policy.

The Application has no public posting or public profile feature, so a child's data is never shown to other users.

Data may be processed and stored on servers outside Vietnam, wherever our Service Providers operate their infrastructure.

7. Retention, correction and deletion

We keep Personal Data for as long as your Account is active. You can edit your Account data in Settings, delete individual child profiles, or delete the whole Account.

  • In the Application: the Settings section lets You delete your Account.
  • Through the website: submit a request on the account deletion request page. Requests are processed within 7 working days and we confirm by email once done.

When an Account is deleted, we delete the personal information, images, child profiles, progress and usage data attached to it. We retain transaction records for 12 months as tax rules require, and may retain longer any data the law obliges us to keep.

8. Security

Data is transmitted over HTTPS. The sign-in session is held in the operating system's secure storage. The parent-area PIN is verified on the server and temporarily locks after repeated wrong entries. That said, no method of transmission over the Internet or electronic storage is completely secure; we apply commercially reasonable measures but cannot guarantee absolute security.

9. Children's privacy

AR Onion is made for children to use together with their parents. Children cannot create their own accounts: registration, creating child profiles, ordering and submitting requests are all done by an adult. By creating a child profile, You consent to our processing of that child's data as described in this policy.

Children use the Application under adult supervision. The AR part requires moving the device and looking around the surrounding space, so a parent should stay with the child during the experience and remains responsible for supervising the child's use of the camera and the device.

The child data we process is limited to what reading the stories requires:

  • the child profile's display name, optional date of birth and avatar;
  • reading progress, badges and time used;
  • the control settings the parent set for that profile.

We do not use children's data for advertising or targeted marketing, we show no advertising in the Application, and we do not share children's data for third-party commercial purposes.

Parents can view, edit or delete a child profile at any time in the Application. If You believe a child has given us data beyond the scope described above without your consent, please contact us and we will delete it from our systems.

10. Data collected on the website

  • Book orders: the order form collects full name, email address, phone number, delivery address and a note, used to confirm the order and deliver it.
  • Account deletion requests: the form prepares an email to support@wecoap.com containing the full name, registered email, user ID, phone number and note You entered. The email is sent from your own email app.

11. Your rights

You may request access to, correction or deletion of your data, withdraw consent, or object to processing, as provided by Vietnamese personal data protection law. Most of these can be exercised directly in the Application; for anything else, contact us using the details below. We respond within 7 working days.

12. Changes to this policy

We may update this policy as the Service changes. The new version will be posted on this page with its update date. For changes that materially affect your data or your child's, we will give notice in the Application or by email before they take effect.

13. Contact us

If you have any questions, you can reach us:

© 2025 WeCoAp Privacy Policy Terms of Use Account deletion request