Privacy Policy

The YiXiaoNeng Youth Index Assessment platform (hereinafter referred to as "the Platform", URL: www.youthscore.org) understands the importance of your personal information and will do its utmost to protect its security. This Privacy Policy explains how we collect, use, store, share, and protect your personal information. Please carefully read and understand this Privacy Policy before using the Platform. By using the Platform, you agree to the terms of this Privacy Policy.

We may collect the following types of information:

1.1 Information You Provide

• Account Information: Username, password (encrypted), name (optional), email (optional), and phone number (for guest login) provided during registration.
• Assessment Data: All answers and selections submitted when completing assessment questionnaires. This data is used to generate evaluation reports.
• Payment Information: Transaction records when purchasing paid services (transaction ID, amount, status). We do not directly collect or store sensitive payment information such as card numbers or CVV. All payments are securely processed by Stripe.
• Profile Information: Optional supplementary information such as bio and full name.

1.2 Automatically Collected Information

• Device Information: Device type, operating system version, browser type and version, screen resolution, etc.
• Usage Data: Access times, page views, feature usage frequency, assessment completion status, etc.
• Network Information: IP address (for security and basic geolocation), network connection type.
• Cookies and Similar Technologies: Session cookies used to maintain login status and improve user experience.

1.3 Information We Do Not Collect

• We do not collect precise geolocation data (GPS).
• We do not collect contacts, messages, call logs, or other communication data.
• We do not collect biometric information (fingerprints, facial recognition, etc.).
• We do not use advertising tracking or third-party marketing tracking tools.

The information we collect is used for the following purposes:

1. Core Services: Processing assessment data, generating evaluation reports, managing your account and subscriptions.
2. AI Data Processing: Transmitting your assessment answer data to AI service interfaces for analysis to generate personalized reports and recommendations. Data is encrypted during transmission.
3. Service Improvement: Analyzing anonymized usage data to optimize platform functionality and user experience.
4. Security: Detecting and preventing fraud, abuse, or other security threats.
5. Communications: Sending you service-related notifications, updates, and reminders.
6. Legal Compliance: Complying with applicable laws and regulations.

The Platform uses artificial intelligence technology in the following areas, involving your data processing:

1. Report Generation: Your assessment answer data is transmitted to AI service interfaces, where AI algorithms analyze it to generate personalized evaluation reports.
2. Personalized Recommendations: AI generates targeted improvement suggestions and action plans based on your assessment results.
3. Data Analysis: AI analyzes anonymized statistical data to optimize assessment algorithms and report quality.

1. Storage Location: Your data is stored on secure cloud servers (located in the United States) using industry-standard encryption for transmission and storage.
2. Retention Period: We retain your personal information for as long as necessary to provide services. After account deletion or data removal, we will delete or anonymize your personal information within a reasonable period (typically no more than 30 days), unless otherwise required by law.
3. Security Measures: We implement reasonable technical and administrative measures including:
   • HTTPS encryption for all data transmission
   • Database access controls and encryption
   • One-way password encryption (bcrypt hashing)
   • Secure session token management (JWT)
   • Regular security audits
4. Security Incidents: In the event of a data breach, we will notify affected users within the timeframe required by law and take necessary remedial measures.

Please understand that no internet transmission is completely secure, and we cannot guarantee absolute security of data transmission.

We do not proactively share your personal information with third parties, except in the following circumstances:

1. Third-Party Service Providers:
   • Stripe (Payment Processing): Processes your payment transactions according to its own Privacy Policy.
   • AI Service Providers: Process your assessment data to generate reports. Data is encrypted in transit and providers do not retain your personal data.
   • Cloud Service Providers: Provide data storage and computing infrastructure.
2. Legal Requirements: When required by law, government authorities, or to protect the rights, property, or safety of the Platform, users, or the public.
3. User Consent: When sharing information with third parties you designate, with your explicit consent.
4. Anonymized Data: We may share anonymized statistical data (such as total assessments completed, average score distributions) that cannot identify any individual.

The Platform's primary audience includes minors (youth). We place special emphasis on protecting minors' privacy:

1. Minors should use the Platform with the consent and guidance of their guardians.
2. We will not knowingly collect personal information from children under 14 without parental consent.
3. If we discover that we have collected a minor's personal information without parental consent, we will delete the data promptly.
4. Guardians may request correction or deletion of their ward's personal information at any time.
5. Minors' assessment data receives the same security protections as adult users' data.

The Platform uses cookies and similar technologies to maintain your login status and improve your experience.

1. Essential Cookies: Used to maintain login sessions and basic functionality (JWT session tokens). Cannot be disabled.
2. Functional Cookies: Used to remember your preferences (such as language selection, theme preferences).

We do not use advertising tracking cookies, third-party marketing cookies, or any user behavior tracking tools. You can manage cookies through your browser settings, but disabling essential cookies may prevent normal use of the Platform.

Under applicable laws and regulations, you have the following rights:

1. Right of Access: You can view your account information and assessment records in your profile.
2. Right of Correction: You can directly modify your personal profile in your account settings.
3. Right of Deletion: You can delete your assessment reports and related data from your profile.
4. Data Portability: You may request your personal data in a common format (where technically feasible).
5. Right to Withdraw Consent: You may withdraw consent at any time without affecting prior lawful processing.
6. Account Deletion: You may request account deletion by contacting us. We will process your request within 30 days.

As the Platform uses cloud servers and AI services located in the United States, your data may be transferred to regions outside mainland China for processing and storage. We ensure such cross-border transfers comply with applicable data protection laws and implement appropriate security measures to protect your data.

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through platform notifications or other appropriate means. Continued use of the Platform constitutes acceptance of the updated Privacy Policy.

If you have any questions, comments, or requests regarding this Privacy Policy, or wish to exercise any of the above rights, please contact us through the Platform. We will respond to your request as soon as possible (typically within 15 business days).