1. Who we are

MyHSK1 is an online platform for learning Mandarin Chinese and preparing for the HSK exams. MyHSK1 is the party responsible for your personal data (the "data controller"). You can reach us at any time through our contact form.

2. Information we collect

Information from your sign-in provider. When you sign in with Google, we receive your email address, name, and basic profile information from Google. We never receive or store your Google password.

Information you provide. A display name you optionally set so teachers can identify your assignment results, and the content of any feedback or messages you send us.

Information generated as you use the Service. Drills you start and complete, scores, attempts, saved items, drills you create as a teacher, assignments, and your subscription status.

Billing information. Whether you have an active Pro subscription and related renewal or cancellation dates. Payment card details are handled entirely by Stripe; we never see or store your full card number.

Technical information. Basic technical data such as your IP address and browser type. We store the IP address attached to contact-form submissions to help protect the Service against spam and abuse.

3. How we use your information

• To provide, operate, and maintain the Service and your account.
• To authenticate you and keep your session secure.
• To record and display your learning progress, scores, and saved items.
• To process and manage Pro subscriptions through Stripe.
• To respond to your feedback and support requests.
• To protect the Service against fraud, abuse, and security threats.
• To measure and improve the Service, including through analytics.
• To comply with our legal obligations.

4. How and when we may contact you

We may contact you by email at the address associated with your account. This includes:

• Service and account messages — sign-in confirmations, security notices, subscription and billing notifications, and changes to the Service or this policy. These are necessary to provide the Service and cannot be opted out of while you hold an account.
• Responses to you — replies to feedback, questions, or messages you send us.
• Occasional relationship and product messages — for example, thanking you for feedback, offering you access to features, or telling you about updates we think are relevant to you.

You can opt out of the occasional relationship and product messages at any time by replying to ask us to stop or by using our contact form; we will honour your request. We do not sell your email address or add you to third-party marketing lists.

5. Legal bases for processing (EU/UK/EEA users)

Where the GDPR or UK GDPR applies, we rely on:

• Performance of a contract — to provide the Service and your account, and to process subscriptions.
• Legitimate interests — to secure the Service, prevent abuse, understand and improve how the Service is used, and send relationship or product messages to existing users (you may object at any time).
• Consent — for non-essential analytics and advertising cookies where required.
• Legal obligation — where we must retain or disclose data to comply with the law.

6. Service providers we rely on

We do not sell, rent, or trade your personal data, and we never share it for anyone else's marketing or purposes. Your data does, however, pass through a small number of trusted providers whose tools we use to run the Service. They act only on our instructions, only to deliver the features below, and are bound by agreements to keep your data confidential:

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users or the Service. Some of these providers are located in the United States; where we transfer data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Cookies and analytics

We use cookies and similar technologies to keep you signed in (a secure, http-only session cookie) and to understand how the Service is used. We use Google Analytics and Google Ads conversion tracking to measure traffic and the performance of our advertising. Where required by law, we ask for your consent before setting non-essential cookies. You can change your choice at any time — manage your cookie preferences — or control cookies through your browser settings.

8. How long we keep your data

We keep your account data for as long as your account is active, so we can show your learning history. If you delete your account, we delete or anonymise your personal data, except where we must retain certain records (for example, billing records) to meet legal obligations. Contact and feedback records may be retained as an operational and audit record.

9. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete your data — you can delete your account, which removes your associated personal data;
• object to or restrict certain processing;
• port your data to another service; and
• withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us. EU/EEA users also have the right to lodge a complaint with their local data protection authority.

10. Security

We use industry-standard measures to protect your data, including encrypted connections, managed cloud infrastructure, and tokenized authentication. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you by email or through the Service.

13. Contact us

For any questions or requests about this policy or your data, please get in touch through our contact form.