Privacy Policy
Last Updated: April 26, 2026
You Can Shine LLC ("Company", "we", "our", "us"), a California limited liability company, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.ycsusa.com), enroll in our tech camp programs, or engage our consulting services (college admissions consulting, statistics & data consulting).
1. Information We Collect
Information you provide directly:
- Parent/Guardian Info (Tech Camp): Name, email address, phone number, WeChat ID, and mailing address.
- Student Info (Tech Camp): Name, age, date of birth, dietary restrictions, medical conditions, allergies, and emergency contact information. This information is collected solely from parents or legal guardians for the purpose of ensuring student safety.
- Client Info (Consulting): Name, email address, phone number, organization name (if applicable), and project/engagement details.
- Admissions Consulting Data: If you engage our admissions consulting services, you may provide academic transcripts, test scores, essays, resumes, recommendation letters, and other application materials. We treat all such materials as confidential (see Section 4).
- Data Consulting Project Data: If you engage our data consulting services, you may provide datasets, research materials, or business data for analysis. We treat all such data as confidential (see Section 4).
- Payment Info: Payment details are processed directly by Stripe, Inc. We do not store, process, or have access to your full credit card numbers. Stripe's privacy policy applies to payment data: stripe.com/privacy.
- Inquiry/Contact Info: When you submit our contact form or email us, we collect the information you provide (name, email, phone, WeChat, and message content).
- Account Info: If you create a parent portal account, we collect your email address and an encrypted password.
Information collected automatically:
- Log Data: Your browser type, IP address, pages visited, time spent, and referring URL.
- Cookies and Similar Technologies: We use Google Fonts (served by Google LLC), which may collect your IP address. If Google Analytics is enabled, it collects anonymized usage data. See Section 8 (Cookies) below.
2. How We Use Your Information
- To process tech camp enrollments and payments.
- To deliver admissions consulting and data consulting services.
- To communicate program updates, schedules, project progress, and emergency information.
- To coordinate with accommodation, transportation, and campus facility providers (tech camp).
- To share daily photos and updates with enrolled parents via WeChat groups (tech camp).
- To send inquiry follow-ups and respond to your questions.
- To improve our website and services.
- To comply with legal obligations.
3. Third-Party Service Providers
We use the following third-party services to operate our website and deliver our Services. Each has its own privacy policy:
4. Confidentiality of Consulting Data
We take the confidentiality of client data seriously. For our consulting services:
- All datasets, research materials, business data, application materials, academic records, and project details provided by clients are treated as strictly confidential.
- We will not share, publish, or disclose client data to any third party without the client's explicit written consent, except as required by law.
- Client data is used solely for the purpose of delivering the agreed-upon consulting services.
- Upon project completion, client data will be returned or securely deleted at the client's request.
- Our consultants may use anonymized, aggregated insights for internal process improvement, but will never disclose identifiable client information.
5. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We only share your data in the following circumstances:
- Service Providers (Tech Camp): With third-party providers (accommodation, transportation, insurance, campus facilities) solely as necessary to deliver our tech camp programs.
- Service Providers (Consulting): With your explicit consent, we may share relevant information with educational institutions, testing organizations, or other parties as necessary to deliver admissions or data consulting services.
- Legal Requirements: When required by law, subpoena, court order, or governmental regulation.
- Safety: To protect the rights, safety, or property of our students, clients, staff, or the public.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.
6. Children's Privacy
Our tech camp programs serve students aged 10–19. We take children's privacy seriously:
- COPPA Compliance (Children Under 13): We do not knowingly collect personal information directly from children under 13. All student information is collected from and provided by parents or legal guardians. If we learn that we have inadvertently collected information directly from a child under 13 without verified parental consent, we will promptly delete it.
- Students Aged 13–17: Information is collected from parents/guardians at enrollment. Students may interact with our portal under parental supervision. We do not collect data from minors for marketing purposes.
- Student Photos: Photos and videos of students are shared with enrolled parents via private WeChat groups. Use in public marketing requires parental consent as described in our Terms of Service.
Our consulting services (admissions and data) are provided to adults (18+) or to minors through their parents/guardians.
7. Your Rights Under California Law (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with the following rights:
- Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request that we delete the personal information we have collected from you, subject to certain legal exceptions.
- Right to Correct: You may request that we correct inaccurate personal information.
- Right to Opt-Out of Sale: We do not sell your personal information. We do not share personal information for cross-context behavioral advertising.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, please email support@ycsusa.com with the subject line "Privacy Request". We will verify your identity and respond within 45 days as required by law.
8. Cookies and Tracking Technologies
Our website uses minimal cookies and tracking:
- Essential Cookies: Firebase Authentication uses cookies/local storage to maintain your login session.
- Google Fonts: Loaded from Google servers, which may log your IP address per Google's privacy policy.
- Google Analytics (if enabled): Collects anonymized usage statistics. You may opt out by installing the Google Analytics Opt-out Browser Add-on.
We do not use advertising cookies or third-party tracking pixels.
9. Data Retention
- Inquiry Data: Contact form submissions are retained for up to 2 years, then deleted.
- Tech Camp Enrollment Data: Student enrollment records and related information are retained for up to 5 years after the program end date for legal, tax, and safety record-keeping purposes.
- Consulting Engagement Data: Client information and project records are retained for up to 3 years after project completion for reference and legal purposes, unless the client requests earlier deletion.
- Account Data: Parent portal accounts are retained until you request deletion.
- Photos and Videos: Program photos shared in WeChat groups are retained for up to 1 year. Photos used on our website are retained until removed.
10. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your information, including:
- Encrypted data transmission (HTTPS/TLS).
- Firebase Authentication with secure password hashing.
- Firestore security rules restricting data access to authorized users.
- Stripe PCI-DSS Level 1 compliance for payment processing.
- Secure handling and storage of consulting project data with access limited to assigned consultants.
However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
11. International Data Transfer
Our services are operated in the United States. If you are located outside the United States (including China), by using our services and providing your information, you consent to the transfer, processing, and storage of your information in the United States, where data protection laws may differ from those in your jurisdiction.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top will be revised. We encourage you to review this page periodically. For active clients and enrolled families, material changes will be communicated via email.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
- Company: You Can Shine LLC
- Email: support@ycsusa.com
- Phone: +1 (408) 210-4727
- Mailing Address: Los Altos, California 94022, USA