Privacy Policy

This Privacy Policy explains how HanziStroke ("HanziStroke", "we", "us", or "our") collects, uses, discloses, and protects information when you use hanzistroke.com, the HanziStroke mobile application, and related services (together, the "Services").

This policy applies to both the website and the mobile application. When you sign in to the same HanziStroke account, account information and learning data saved to that account, such as saved vocabulary, flashcards, and practice progress, can be available across supported website and app features. Device-only preferences, recent lookups, and unsynced practice data may remain on the device.

Depending on how you use the Services, we may collect:

• Account information: email address, password credentials, display name, profile image, and account or membership status.

• Sign-in provider information: a verified provider identifier and the information returned by Google or Apple when you choose one of those sign-in methods. Apple may provide a private relay email address.

• Learning information: characters and words practiced, writing sessions and results, flashcard decks and reviews, dictation results, course and lesson progress, saved vocabulary, daily goals, and related timestamps.

• Purchase information: plan, transaction, subscription, entitlement, refund, and payment-provider identifiers. We do not receive or store your full payment card number through the Services.

• Support information: feedback, bug reports, and messages you send to support.

To operate and secure the Services, we may receive technical information such as IP address, browser or app request information, timestamps, request identifiers, authentication and session events, and error or security logs. We use this information for reliability, fraud prevention, rate limiting, and troubleshooting.

The website uses essential cookies for sign-in, security, account deletion flows, usage limits, and anonymous product operations. These cookies are not used to read content from other websites.

The mobile application stores its refresh session securely on the device. It may also store local preferences, onboarding state, recent lookups, practice drafts or history, speech preferences, flashcard preferences, and downloaded or cached learning resources so the application can work smoothly.

The application may request access to your photo library when you choose a profile image or save a writing-practice image. We do not request camera access or microphone access, and the application does not record or upload your voice. Pronunciation and dictation exercises use generated or device speech playback; dictation results, rather than raw recordings, may be saved to your account when you are signed in.

You can deny or later revoke device permissions in your operating-system settings. Some related features may then be unavailable.

We use information to:

• provide stroke-order animations, dictionary and pronunciation content, writing practice, worksheets, courses, flashcards, dictation, and progress features;

• authenticate you, keep your account secure, maintain sessions, and support sign-in with email, Google, or Apple;

• process, verify, restore, and manage memberships and purchases;

• send account, security, billing, service, and optional learning reminder or report emails;

• respond to feedback and support requests;

• prevent abuse, enforce limits, debug failures, and improve the Services; and

• comply with legal obligations and protect our rights, users, and infrastructure.

The website may use Google Analytics 4 after a short delay or after you interact with the page. It may use cookies or similar identifiers and receives events such as page views, searches, content selections, audio plays, practice events, downloads, and purchase or sign-in events. We configure analytics events to avoid sending our internal account identifier as a Google Analytics user ID, and we do not intentionally send passwords, access tokens, or full payment details.

You can control cookies through your browser. Blocking or deleting cookies may affect sign-in, security, limits, or other website functionality. The mobile application does not include the website's Google Analytics script.

We share information only as needed to provide, secure, and improve the Services. Service providers may process information on our behalf, including infrastructure and database providers, email delivery providers, payment providers, analytics providers for the website, object storage for profile images, and Apple or Google when you use their sign-in or app-store services.

We may disclose information when required by law, in response to valid legal process, to investigate security or abuse, or to protect the rights, safety, and property of HanziStroke, our users, or others. We do not sell personal information.

Website purchases are processed by the payment provider shown at checkout. The website currently offers a recurring three-month plan and one-time twelve-month and lifetime plans; the exact price, currency, taxes, and payment terms shown at checkout control.

The mobile application may offer purchases through Apple's App Store. Apple processes the payment and controls the Apple billing relationship. We receive transaction and entitlement information needed to verify access, restore purchases, prevent duplicate or unauthorized grants, and handle refunds or subscription status. Manage or cancel an Apple subscription through your Apple Account's subscription settings.

We retain account and learning information while your account is active or as needed to provide the Services, resolve disputes, enforce agreements, maintain security, and meet legal or financial recordkeeping requirements. We retain only the information reasonably needed for those purposes.

You can edit your profile, manage optional email preferences, export available learning data, and request account deletion through account settings or the mobile application. Account deletion removes or de-identifies account-linked learning, saved-content, notification, and session data through a staged process. Some limited payment, fraud-prevention, security, email-suppression, or legal records may remain in a minimized or non-account form for the period required for their purpose. Deleting your HanziStroke account affects that account on both the website and the mobile application, including access to its synced learning data.

Signing out clears the current sign-in session and removes the app's saved sign-in credential when device storage is accessible; it does not delete your account or its synced learning data. After a deletion request is accepted in the app, the app also signs you out and attempts to remove that saved credential. If this fails, the app asks you to retry signing out. Signing out or deleting your account does not automatically erase all device-only preferences, recent lookups, practice history, or cached files. Images saved to your photo library and files you have exported or shared remain outside the app and must be deleted separately if you no longer want them.

If you cannot complete deletion in the application, contact support. We will not ask you to send a password, access token, authorization code, or private key by email.

We use encrypted connections, access controls, scoped service credentials, rate limits, session revocation, and other technical and organizational safeguards. Passwords are stored using one-way password hashing. No online service or device can be guaranteed completely secure, so please use a unique password and protect your device and sign-in credentials.

The Services and our providers may process information in countries other than where you live. Depending on applicable law, you may have rights to access, correct, export, delete, restrict, or object to certain processing, and to withdraw consent where processing relies on consent. You may also have the right to complain to a data-protection authority.

To make a privacy request, contact us at support@hanzistroke.com. We may need to verify your request before acting on it.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact support so we can review and delete it where appropriate.

We may update this Privacy Policy as the Services, laws, or our processing practices change. We will post the updated policy and change the date above. If a change is material, we will provide an additional notice when appropriate.

Questions or privacy requests can be sent to support@hanzistroke.com.