隐私政策
生效日期:2025-11-30
我们重视你的隐私与数据安全。本政策说明我们收集哪些数据、如何使用与共享、你拥有哪些权利以及如何行使这些权利。
1. 我们收集的数据
- 账户数据:昵称(必填)、邮箱(可选)、登录记录。
- 学习数据:学习计划、上传的文档与文本、题目与作答、测验结果、学习报告。
- 语音与音频数据:你在口语练习中录制的音频,以及为生成反馈所需的衍生特征(如音高 f0、强度、时长、停顿等)。
- 设备与日志:浏览器与设备信息、IP(为安全与反滥用)、错误日志与性能指标。
- 沟通与反馈:你与我们沟通中提供的内容(含支持请求、问卷等)。
2. 我们如何使用数据
- 提供、维护与改进功能(学习计划、AI 出题、测验、口语练习与语音报告)。
- 个性化体验(难度与场景推荐、题目生成、反馈可视化)。
- 账户与安全(认证、风控、故障排查、防滥用)。
- 合规要求与权利响应(删除、记录留存)。
- 基于去标识化与汇总后的统计数据进行产品分析与算法优化。
3. 处理依据(适用时)
- 履行合同:为向你提供所请求的服务。
- 同意:例如可选的邮箱通知、特定实验性功能。
- 合法权益:例如改进服务与确保安全,且不对你的权利与自由造成过度影响。
4. Cookies 与本地存储
我们使用 Cookies、LocalStorage 或同类技术保存会话令牌、语言偏好、UI 偏好等,以支持登录状态与更好的体验。你可在浏览器中管理相关设置,但可能影响功能可用性。
5. 数据共享与委托处理
我们不会出售你的个人数据。为实现功能,我们可能与受约束的委托处理方合作,仅在其履行服务所必需的范围内共享:
- 身份与数据库/对象存储服务(用于账号、题库、文档与音频的安全保存)。
- 语音与自然语言处理服务提供商(用于语音合成/识别/评分与题目生成等 AI 能力)。
- 日志与监控(仅技术运维所需的故障排查与性能监控数据)。
我们要求受托方履行保密、安全与合规义务,禁止其将你的数据用于与服务无关的目的。
6. 数据保存期限
我们在达成本政策所述目的所需的期限内保存你的个人数据。当你请求删除或注销账户,或保存不再必要时,我们将按适用法律的要求删除或匿名化处理(但为履行法定义务或解决争议可能保留必要记录)。
7. 安全措施
- 传输与存储采用业界标准的保护措施,访问控制基于最小权限原则。
- 我们持续进行日志审计与风险评估,以降低数据被未授权访问、披露、篡改或毁损的风险。
8. 跨境传输
你的数据可能被处理或存储在你所在国家/地区之外。我们将依据适用的数据保护法律采取相应保障措施(如标准合同条款或等效机制)。
9. 儿童与未成年人
本服务不面向 13 岁以下儿童。未成年人(13–18 岁或当地成年年龄)应在监护人同意与指导下使用。
10. 你的权利与请求方式
- 访问与更正:查看并更新账户与学习数据。
- 删除:在法律允许范围内删除账户或特定内容(删除后可能无法恢复)。
- 撤回同意:对基于同意的处理可随时撤回,不影响撤回前的处理合法性。
- 投诉:如你认为你的权利受到影响,可向有管辖权的监管机构投诉。
行使上述权利:请通过应用内「设置 → 联系支持」提交请求,我们将在法定时限内响应。
11. 政策更新
我们可能不时更新本政策。重要变更会在站内提示或以其他合理方式通知。更新后继续使用即表示你同意更新后的政策。
12. 联系我们
如对本政策有任何问题或请求,请通过应用内支持渠道与我们联系;若无法登录,可通过登录页提示的渠道(例如微信)联系。
Privacy Policy (English)
1. Data We Collect
- Account Data: nickname (required), optional email, sign‑in records.
- Learning Data: learning loops, uploaded documents/text, questions & answers, quiz results, study reports.
- Voice & Audio Data: your recordings for pronunciation practice and the derived features needed for feedback (e.g., pitch/f0, intensity, duration, pauses).
- Device & Logs: browser/device info, IP (for security/abuse prevention), error logs, and performance metrics.
- Communications & Feedback: content you provide when contacting us (e.g., support requests, surveys).
2. How We Use Data
- To provide, maintain, and improve features (learning loops, AI question generation, quizzes, pronunciation practice, speech reports).
- To personalize your experience (difficulty/scene recommendations, question generation, feedback visualizations).
- For account and security purposes (authentication, risk control, troubleshooting, abuse prevention).
- To meet legal obligations and respond to rights requests (deletion, record retention).
- For analytics and model improvement using de‑identified and aggregated data.
3. Legal Bases (where applicable)
- Contract necessity: to deliver the Services you request.
- Consent: e.g., optional email notifications or experimental features.
- Legitimate interests: e.g., improving Services and ensuring security without overriding your rights and freedoms.
4. Cookies & Local Storage
We use cookies, localStorage, or similar technologies to store session tokens, language, and UI preferences to support sign‑in and a better experience. You can manage these in your browser settings, which may affect functionality.
5. Sharing & Processing
We do not sell your personal data. We may work with bound processors to deliver the Services and share data only to the extent necessary for them to perform their duties:
- Identity, database, and object storage providers (for secure account, question bank, document, and audio storage).
- Speech and NLP providers (for TTS/ASR/scoring and question generation capabilities).
- Logging and monitoring (for troubleshooting and performance monitoring only).
We require processors to follow confidentiality, security, and compliance obligations and to refrain from using your data for unrelated purposes.
6. Data Retention
We keep personal data for as long as necessary to fulfill the purposes in this Policy. When you request deletion or when retention is no longer required, we delete or anonymize data as mandated by applicable law, while retaining any records required for legal obligations or dispute resolution.
7. Security Measures
- Industry‑standard protections for data in transit and at rest with least‑privilege access control.
- Ongoing log auditing and risk assessments to mitigate unauthorized access, disclosure, alteration, or destruction.
8. International Transfers
Your data may be processed or stored outside your country/region. We apply appropriate safeguards required by applicable data‑protection laws (e.g., standard contractual clauses or equivalent mechanisms).
9. Children & Minors
The Services are not intended for children under 13. Minors should use the Services only with parental/guardian consent and supervision.
10. Your Rights & Requests
- Access & Rectification: view and update your account and learning data.
- Deletion: delete your account or specific content where permitted by law (irreversible).
- Withdraw Consent: withdraw consent‑based processing without affecting prior lawful processing.
- Complaints: lodge complaints with a competent supervisory authority.
To exercise these rights, use in‑app “Settings → Support”. We respond within statutory timeframes.
11. Changes to this Policy
We may update this Policy from time to time. Material changes will be communicated in‑product or via other reasonable means. Continued use after the effective date constitutes acceptance of the updated Policy.
12. Contact Us
If you have questions or requests regarding this Policy, contact us via in‑app support. If you cannot sign in, use the contact channel shown on the sign‑in page (e.g., WeChat).