Canpanion Group Limited Privacy Policy

---

Canpanion Group Limited Privacy Policy

Canpanion Group Limited (“Canpanion”, “we”, “us”, or “our”) is committed to complying with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (“PDPO”) and applicable privacy laws. This Privacy Policy explains how we collect, use, disclose and protect personal data when you use our Services. Our Services include the Canpanion mobile application, Canpanion Assessment (our iOS and Android educational mini-game app for schools), assessment tools, Health Buddy, CANEmo mental health application, Teacher Dashboard, Admin Portal, SEN Tracker, Student Portal, and our official website (canpaniongroup.com).

Personal Information Collection Statement (PICS)

We collect personal data for the following purposes:

• To provide, personalise and improve our educational and mental health support Services;
• To deliver assessments, learning analytics, progress reports and personalised recommendations;
• To monitor wellness, conduct mental health screenings, support emotional wellbeing and respond      to crises (including sending alerts to designated school staff);
• To facilitate communication between parents, teachers and students;
• To process payments and manage subscriptions;
• To comply with legal obligations.

We may collect the following types of personal data:

• Contact and identification information (email, phone, date of birth, student ID);
• Educational and learning data (grades, assessments, progress, activity logs);
• Health and mental health related information (mood tracking, assessment results, SEN indicators,      wellness check-ins and AI conversations) — only with explicit consent (or parental consent for minors);
• Device and technical information;
• Voice/audio inputs for speech-to-text and accessibility features.

Certain data (such as email, student ID and contact details) is obligatory to provide the core Services. If you do not provide this data, we may not be able to register you or deliver the relevant features.

Your personal data may be disclosed to:

• Authorised school personnel (when the Services are used in a school setting);
• Third-party service providers, including cloud, AI, voice processing, payment and notification      services, who help us deliver the Services;
• Other parties as required or permitted by law.

We obtain explicit permission before sharing personal data with third-party AI or voice services.

Third-Party Service Providers and International Transfers

Canpanion engages the following third-party providers to deliver our Services. Each provider is bound by a Data Processing Agreement and may only use personal data for the purpose described below.

• Microsoft Azure Speech Services — transcription of voice recordings from speaking mini-games. Audio is transmitted to Azure servers in Southeast Asia (Singapore), transcribed into text, and discarded. Microsoft does not retain the audio after transcription and does not use it to train Microsoft models.
• Microsoft Azure OpenAI Service (model gpt-oss-120b) — AI evaluation of the student’s transcribed response in the problem-solving mini-game. Requests are sent to the Asia Pacific (Tokyo) region. Only transcribed text is sent; no audio, images, or personally identifying information is shared.
• Canpanion backend services (canpaniongroup.com) — storage of game progress, scores, and learning analytics on servers operated by Canpanion Group Limited in Hong Kong / Asia Pacific.
• Stripe — payment  processing for institutional subscriptions, where applicable. Stripe processes payment card and billing information directly; Canpanion does not store card numbers.

Your data may be processed in Hong Kong, Southeast Asia, Asia Pacific or other locations where our service providers operate. We take appropriate safeguards to protect the data during such transfers.

Third-Party AI Services

Canpanion Assessment uses third-party AI services to deliver core features. Before the relevant mini-game begins, the app displays a consent notice identifying the service and the data to be shared. The mini-game cannot be used until consent is granted.

The four AI service providers are:

• Microsoft Azure Speech Services (STT) — transcribes the student’s voice recordings in speaking mini-games. Audio is sent to Azure servers in Southeast Asia, converted to text, and discarded. Microsoft does not retain the audio and does not use it to train its models.
• Microsoft Azure OpenAI Service (answer evaluation) — evaluates the student’s transcribed response      in the problem-solving mini-game using the gpt-oss-120b model hosted in the Asia Pacific (Tokyo) region. Only transcribed text is sent — never the audio, images, or identifying information.
• Volcengine / Doubao (TTS)— text-to-speech functionality.
• MiniMax (TTS) —  text-to-speech functionality.

Canpanion does not permit these AI providers to use the shared data for advertising, profiling, or training their own models beyond what is required to return the requested result.

Camera Use

Canpanion Assessment uses the device camera in the Motion mini-games to detect body and hand (palm) positions. All camera processing happens locally on the student’s device using the OpenCV and MediaPipe libraries (person and palm models) bundled with the app.

Camera images and pose data are never transmitted to Canpanion servers, never shared with any third party, and never used for advertising, marketing, profiling, or to train AI models. The camera feed is held in memory only while the mini-game is running and is discarded as soon as the mini-game ends.

Microphone Use

Canpanion Assessment uses the device microphone in its speaking mini-games (Supermarket Speaking, Sea and Sky, Tone of Voice, Problem Solving, Spot the Difference, Story, and Piano / Karaoke). When a mini-game asks the student to speak, the app records a short audio clip and transmits it to Microsoft Azure Speech Services in Southeast Asia for transcription.

The resulting text is used only to evaluate the student’s response within the mini-game. Recordings are not saved to the device after transcription, are not retained by Microsoft after transcription completes, and are not used for marketing, advertising, or AI model training.

Children’s Privacy

Our Services are designed for educational use and many users are minors (under 18 years of age). For minor users, we require verifiable parental or guardian consent before collecting and processing personal data, including health and mental health information. We collect only the minimum data necessary. Schools using our platform are responsible for obtaining appropriate consents from parents/guardians and ensuring compliance with applicable laws. We do not knowingly collect personal data from children without appropriate consent.

Data Sharing with Schools

When the Services are used in a school environment, we may share student progress, assessment results, SEN reports and mental health alerts with authorised school personnel only. Schools remain responsible for their own compliance with the PDPO and other applicable laws regarding any further use of the data.

Data Security and Retention

We take all practicable steps to protect personal data against unauthorised access, loss or misuse. We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law.

Your Rights

You (or your parent/guardian where you are a minor) may request access to, correction of, or deletion of your personal data and account by contacting us at the email address below. We will handle such requests in accordance with the PDPO.

Changes to This Policy

We may update this Policy from time to time. The updated Policy will be posted on our website. Continued use of the Services after changes constitutes acceptance of the revised Policy.

Contact Us 

Email: team@canpaniongroup.com 

Website: https://canpaniongroup.com