Privacy Policy
Last Updated: January 22, 2026
1. Introduction
Hanzi Roast ("we", "our", or "us") operates the Hanzi Roast mobile application. This Privacy Policy explains how we collect, use, and protect your information.
2. Information We Collect
2.1 Account Information
- Email address - When you sign in with Apple or Google
- User ID - Unique identifier for your account
- Display name - If provided by your sign-in provider
2.2 Usage Data
- Practice progress - Characters practiced, scores, mastery levels
- Session history - Topics studied, session durations
- Rank progression - Your current level and achievements
- Streak data - Consecutive practice days
2.3 Purchase Information
- Subscription status - Active/expired subscription tier
- Transaction IDs - For purchase verification (not payment details)
2.4 Device Information
- Device type and OS version - For app compatibility
- Crash reports - Anonymous crash data for stability improvements
3. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Provide the service | Account info, practice progress |
| Sync across devices | All user data via cloud storage |
| Process subscriptions | Transaction IDs (via RevenueCat) |
| Improve the app | Anonymous usage analytics, crash reports |
| AI-powered feedback | Practice scores (premium only) |
4. Third-Party Services
We use the following third-party services:
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Firebase Authentication | User sign-in | Google Privacy | |
| Cloud Firestore | Data storage & sync | Google Privacy | |
| RevenueCat | RevenueCat Inc. | Subscription management | RevenueCat Privacy |
| Google Gemini | AI feedback generation | Google AI Privacy |
5. Data Storage & Security
- Your data is stored securely in Google Cloud (Firebase)
- Data is encrypted in transit (TLS) and at rest
- We do not sell your personal information to third parties
- Practice data is stored locally on your device with cloud backup
6. Data Retention
- Active accounts: Data retained while account is active
- Deleted accounts: Data deleted within 30 days of account deletion request
- Anonymous analytics: Retained for up to 14 months
7. Your Rights
You have the right to:
- Access your personal data
- Export your practice history
- Delete your account and all associated data
- Opt-out of analytics (contact us)
For EU/UK Users (GDPR/UK GDPR)
- Right to data portability
- Right to restriction of processing
- Right to lodge a complaint with a supervisory authority
For California Users (CCPA)
- Right to know what data is collected
- Right to delete personal information
- Right to non-discrimination for exercising rights
8. Children's Privacy
Hanzi Roast is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the new policy in the app
- Updating the "Last Updated" date
10. Contact Us
For privacy inquiries or data requests:
Email: hello@hanziroast.com
Subject line: "Hanzi Roast Privacy Request"