1 · Who This Applies To
This policy covers the ASTC App (iOS / Android), astc.cc, and related websites. Operated by Atom (atom@astc.cc) as a sole proprietor.
Children under 13 are not permitted. Parents who discover their child registered without consent may email atom@astc.cc — we'll respond within 7 business days.
2 · What We Collect & Why
At sign-in: email, Google / Apple account name, avatar.
During usage: course progress, posts, comments, likes, direct messages.
Purpose: deliver the service (progress display, completion animations), verify paid access, bug detection, abuse prevention, legal compliance.
3 · Third-Party Services
We work with industry-standard providers, each with data processing agreements:
| Category | Purpose |
|---|---|
| Google / Apple | OAuth sign-in, push notifications |
| Stripe / Kajabi | Payments (credit cards) · ASTC does not store card numbers |
| Hosting & networking | IP / access logs, abuse prevention |
Website (not the App) uses industry-standard analytics and advertising platforms. Full vendor list available to regulators upon legal request; individuals may write to atom@astc.cc.
4 · Data Retention
| Data | Period |
|---|---|
| Account, learning progress | While account is active |
| After account deletion | 30-day grace, then permanent |
| Access logs | 30 days |
| Payments, invoices (legal) | 5–7 years per tax law |
Data is stored with industry-certified cloud providers (global edge nodes + encryption at rest). In case of breach, we notify regulators and affected users within 72 hours.
5 · Your Rights
Whether you're in Taiwan, the EU, the USA, or elsewhere:
- Access your data — in-App "Account" page, or email for full export
- Modify name / avatar — in App settings
- Delete account — in-App request (30-day grace, then permanent)
- Withdraw consent — revoke ASTC in Google / Apple account settings
- Object to specific processing — by email
- Complain to regulators — Taiwan PDPC / EU DPA / California AG Office
6 · Governing Law & Contact
Governed by Taiwan PDPA, EU GDPR (if you're in the EU), and California CCPA / CPRA (if you're in California).
Disputes resolved by good-faith negotiation; if unresolved, Taipei District Court has primary jurisdiction.
For material policy updates: in-app dialog requesting re-consent + email to subscribed users + 14-day banner on website.
| Matter | Contact |
|---|---|
| Privacy / legal | atom@astc.cc |
| Customer support / refunds / feedback | atom@astc.cc |
Last updated April 30, 2026 · First publication