Privacy Policy

Last updated: 18 August 2026

1. Who we are

Learn To Play Limited is a company incorporated in Hong Kong. We operate an educational product that turns photos of homework and other study materials into interactive games — including Pop Quiz, Memory Game, Quick Snap flashcards, Monster Conquest, and AR Explore — and provides teacher classroom tools, an in-app coin marketplace, and account subscription management.

For privacy requests, email neil@learn2play.app or call +852 6522 6236.

2. Scope

This Policy applies to personal data we process as operator of the Service, including:

• accounts created with Google sign-in on the website or in the iOS app;
• profile, gameplay, reward, classroom, and homework data stored on our backend;
• photos and other content you upload so we can generate games;
• subscription and billing records associated with your account.

It does not apply to Google’s own processing of your Google Account (see Google’s Privacy Policy) or to our payment provider’s processing of payment card data (see Stripe’s Privacy Policy). Those companies act as independent controllers for data they collect directly from you.

3. Information we collect

3.1 Account and authentication

You sign in with Google through Firebase Authentication. We receive the identifiers Google provides for that sign-in, which typically include your Google account email address, a unique user ID, display name, and profile photo URL. We use your email as the primary key of your Learn To Play account. We do not receive or store your Google password.

3.2 Profile information you provide

When you create or update a profile, we store:

• age (the iOS signup flow accepts ages from 5 to 99);
• preferred language (currently English, Cantonese, or Mandarin);
• education level (for example Primary School through Postgraduate).

We use this information to generate questions and games at an appropriate difficulty and language.

3.3 Study materials and generated games

To create a game, the iOS app captures a photo of study material (worksheets, textbook pages, notes, or similar) using the device camera. That image is sent to our servers, stored in Google Cloud Storage, and processed by Google Vertex AI (Gemini models) to produce questions, object lists, flashcards, narration, or other game content. We also store:

• the uploaded image;
• AI-generated game content (questions, answers, prompts, and related structured data);
• AI-generated images used in certain modes (for example memory-matching artwork);
• a game identifier, game mode, and creation time so you can replay recent games.

Do not photograph other people, identity documents, or material you are not allowed to share. Worksheets may already contain a student’s name or school details; those details will be processed if they appear in the photo.

3.4 Gameplay, rewards, and entitlements

We store account activity needed to operate the Service, including:

• games played, last login, and day-streak counters;
• virtual coins and collectible cards earned or purchased in the coin marketplace;
• marketplace purchase history for virtual items;
• subscription tier and status (free, plus, or pro; active, inactive, or canceled) and, where applicable, the paid period end date;
• lifetime trial-use counters per feature (for example Memory Game, Quick Snap, Monster Conquest, AR Explore, and Teacher tools);
• monthly Pop Quiz generation counts used to enforce plan quotas.

3.5 Classroom and homework data

If you use Teacher tools, we store classroom records you create, such as:

• class name, class code, intended student count, education level, language, subjects, and enabled game modes;
• homework assignments, including the linked game, title, and any teacher edits to questions or images;
• which student accounts have joined a classroom via class code, and homework visible to those students.

Teachers should only enroll students they are authorised to teach and should avoid putting unnecessary personal data into class names, homework titles, or uploaded images.

3.6 Payments

If you subscribe to Learn2Play Plus or Pro, checkout and billing for that plan are handled through your Learn To Play account on learn2play.app. Our payment provider collects and processes payment card numbers, billing address, and related payment details. We do not store full payment card numbers on our servers. We store payment-provider customer and subscription identifiers, plan tier, and subscription status so your entitlements stay in sync across the Service.

3.7 Technical and security data

Our hosting providers (including Google Cloud Run, Google Cloud Storage, and Firebase) automatically process technical data such as IP address, timestamps, user-agent, and request logs when you use the Service. We use this to operate, secure, and debug the Service. The website may also store a session cookie used for authenticated API requests.

3.8 Information we do not collect

We do not currently operate third-party advertising pixels, marketing analytics SDKs, or cross-app tracking on the marketing site. The iOS app uses the camera only to photograph study materials and to run AR Explore; it does not request microphone, location, or tracking permission for advertising.

4. How we use information

We use personal data to:

• create and authenticate your account;
• generate, store, and replay games from the study materials you upload;
• personalise difficulty and language using the age, education, and language you provide;
• award coins and cards, operate the marketplace, and show progress on the account dashboard;
• enforce Free, Plus, and Pro entitlements, lifetime trial limits, and monthly Pop Quiz quotas;
• process subscriptions, provide checkout and billing management on your account, and keep plan status in sync;
• operate teacher classrooms and student homework;
• provide customer support and respond to access, correction, or deletion requests;
• maintain security, prevent abuse, and comply with law.

We process this data because it is necessary to provide the Service you request, to perform our contract with you (including the Terms & Conditions), and to meet our legal obligations. Where Hong Kong’s Personal Data (Privacy) Ordinance or another applicable law requires consent, we rely on the consent given when you create an account, upload content, or (for a child) when a parent or guardian does so on the child’s behalf.

We do not sell personal data, and we do not use student or child account data to deliver third-party behavioural advertising.

5. AI processing of study materials

Game generation is performed with Google generative AI (Vertex AI / Gemini). Uploaded images and related prompts are sent to Google for inference. Generated questions, object lists, images, and other outputs are returned to us and stored so the game can be played and later reopened.

AI output can be incomplete, incorrect, or unsuitable for a particular learner. The Service is an educational aid, not a substitute for a teacher, parent, or qualified professional. Do not upload content you do not want processed by our subprocessors, and do not upload sensitive documents unrelated to studying.

Google’s processing of data sent to Vertex AI is described in Google Cloud’s documentation and data processing terms. Inference for our production models is configured in Google Cloud (including the United States region used for Vertex AI).

6. How we share information

We share personal data only as needed to operate the Service:

• Google LLC and Google Cloud — Firebase Authentication; Cloud Run hosting; Cloud Storage for uploaded and generated images; Cloud SQL / MySQL for account and game records; Vertex AI for game generation.
• Our payment provider (currently Stripe, Inc. and its affiliates) — checkout, invoices, tax calculation where applicable, payment method storage, and billing management.
• Teachers and classmates in a classroom you join — a teacher who created a class can see homework and related game content for that class. Students in the same class may see assigned homework. We do not operate a public social feed.
• Professional advisers and authorities — if required by law, legal process, or to protect the Service, our users, or our rights.

If we ever transfer the business, personal data may move with it to the successor, who must use it in a manner consistent with this Policy.

7. International transfers

Learn To Play Limited is established in Hong Kong. The Service is hosted on Google Cloud and uses Firebase, Vertex AI, and our payment provider, which process data in Hong Kong, Taiwan, the United States, and other countries where those providers operate. Where we transfer personal data outside Hong Kong, we do so to provide the Service and we require providers to protect it under their contracts and applicable law.

8. Children, families, and classrooms

Learn To Play is built for students — including children — together with parents, guardians, and teachers. It is especially intended to make homework more engaging for learners who struggle with traditional worksheets, including some children with ADHD. Because of that, we collect only the profile and usage data needed to run the educational product, and we do not sell that data or use it for third-party ads.

Accounts are created with Google Sign-In. Google’s own age rules and Family Link / parental controls apply to the Google account. A parent or legal guardian should create and control the Google account used by a child who cannot manage an account on their own, complete the Learn To Play profile, and supervise camera use and uploads.

By creating or allowing a child to use an account, the parent or guardian consents to our collection and use of that child’s information as described in this Policy — including age, education level, language, gameplay records, and photos of study materials — for the purpose of providing the Service.

Teachers using classroom features represent that they have the authority (and any required parental or school consent) to enrol students and assign homework. Class codes should be shared only with intended students.

A parent or guardian may request access to, correction of, or deletion of a child’s Learn To Play account by emailing neil@learn2play.app from a contact address we can reasonably associate with the account, or by having the child sign in so we can verify the request.

9. Cookies and similar technologies

The website uses:

• an authentication session cookie (where used) so signed-in requests can reach our API;
• local storage for theme preference and language preference on the marketing and account pages;
• Firebase Auth persistence in the browser so you remain signed in on this device.

These are needed to run the site and remember your settings. You can clear cookies and local storage in your browser; doing so will sign you out and reset those preferences.

10. Retention

We keep personal data for as long as your account is active and as needed to provide the Service:

• profile, coins, cards, trial counters, and subscription identifiers while the account exists;
• uploaded images and generated games so you (and, for assigned work, the relevant teacher or student) can reopen them;
• payment-provider billing records for as long as that provider and tax or accounting rules require;
• security logs for a limited period to investigate abuse or incidents.

When you ask us to delete an account, we delete or irreversibly anonymise profile, game, classroom, and image data we control, except records we must keep for billing, audit, dispute, or legal compliance (for example payment invoices or a record that a deletion request was completed). Virtual coins, cards, and unused subscription time are not payable as cash when an account is deleted.

11. Your rights

Under the Hong Kong Personal Data (Privacy) Ordinance, you have the right to request access to personal data we hold about you and to request correction of inaccurate data, subject to the exceptions in that Ordinance. Depending on where you live, you may have additional rights to deletion, restriction, or portability.

To exercise these rights, email neil@learn2play.app. Please:

• use the email address on the account, or explain your relationship to the account (for example parent or teacher);
• tell us whether you want a copy of your data, a correction, or deletion;
• allow us a reasonable time to verify the request and complete it.

You can update age, language, and education yourself in the iOS app profile. You can cancel a paid subscription in Manage billing on the account Shop tab. Cancelling billing does not by itself delete your account or study-material history.

If you are in Hong Kong and are not satisfied with our response, you may contact the Office of the Privacy Commissioner for Personal Data.

12. Security

We use HTTPS, authenticated APIs (Firebase ID tokens), and access-controlled Google Cloud infrastructure. Payment card data is handled by our payment provider. No method of transmission or storage is completely secure. If we become aware of a data incident that requires notice under applicable law, we will notify affected users and regulators as required.

13. Changes

We may update this Policy when the Service or the law changes. The “Last updated” date will change, and the current version will always be published at https://www.learn2play.app/privacy. If a change is material, we will provide additional notice where reasonably practicable (for example a notice on the website or in the app). Continued use of the Service after the updated Policy takes effect means you accept the updated Policy.

14. Contact

Learn To Play Limited
Hong Kong
Email: neil@learn2play.app
Phone: +852 6522 6236

Related documents: Terms & Conditions · Refund Policy · Shipping Policy · Pricing