This privacy notice explains how Enigma Byte, LLC ("Enigma Byte", "we", "us", or "our"), the company that operates HanyuGuide, processes personal information through HanyuGuide. It applies to the HanyuGuide website, mobile app, and AI assistant connections.

Data Collection and Usage

Website analytics is performed with Cloudflare Web Analytics. From our due diligence, we believe these are the best analytics options for our users' privacy and business needs.

Cloudflare Turnstile is used on registration to prevent bots from registering for accounts. Your IP address will be sent to Cloudflare in this process. Turnstile does not harvest data for ads retargeting.

We use Sentry to investigate errors and reliability problems. Automatic collection of default personally identifiable information is disabled. Error reports can still contain technical information, such as error messages, stack traces, app or browser versions, device and operating-system information, and diagnostic context. Disabling default personal-data collection does not mean that every diagnostic report is anonymous.

HanyuGuide stores first-party demo funnel events, such as demo completion and post-demo clicks, under a random visitor ID kept in a cookie for up to 30 days. When you practice in a demo or on a public flashcard page without an account, we also store each card you are shown and your answer: the word, whether you marked it as known, when the card appeared and when you answered, the level you chose, and the site language. We use this to learn which words and demo lengths help people keep learning. If you create an account with the same visitor ID, those events may be associated with your account so we can understand whether the demo helped you decide to sign up. When you open the pricing page or start a checkout, we store that event under the same visitor ID with the HanyuGuide page you came from, the plan you chose, its currency and discount, and how many days ago you signed up, so we can learn which pages help people decide to subscribe. Payment details stay with Stripe.

If you arrive at HanyuGuide from a Meta ad, our servers share conversion events with Meta, such as signing up or making a purchase, so we can measure our ads. These events include the ad click identifier, hashed identifiers such as your email address, and technical details such as your IP address and browser. We do not use the Meta Pixel. Visitors who did not come from a Meta ad and classroom-managed student accounts are not shared. See the Meta Privacy Policy.

If you arrive at HanyuGuide from a Google ad, our servers share the same kinds of events with Google Ads, such as starting a lesson, signing up, or making a purchase, so we can measure our ads. These events include only the ad click identifier Google added to the link, the event time, and for purchases the amount and currency. We do not use the Google tag. Visitors who did not come from a Google ad and classroom-managed student accounts are not shared. See the Google Privacy Policy.

When you use reading and dictionary tools, HanyuGuide may process Chinese terms from the text you provide to detect new or missing dictionary words. Missing-word detection is limited to Chinese terms; punctuation, Latin text, and mixed non-Chinese text are not stored as dictionary requests.

Your email is collected on signup and login unless your account is a classroom-managed student account that uses a username instead. We may occasionally use your email address to contact you regarding your experience with HanyuGuide, including product updates, feedback requests, and important service announcements. When you opt in to non-essential communications, we may sync your email address, locale, timezone, trial timing, and subscription-suppression status to Resend so Resend can deliver those messages and manage unsubscribe preferences. You may opt out of non-essential communications at any time. The only slightly non-intuitive pieces of data we need are the timezone (which is available to any webpage you visit), which we use to calculate daily study statistics, and the country code (based on your IP address), which we store on your account to calculate PPP pricing and to understand which countries our learners come from. Your study history is stored when you study while logged in. This is necessary for proper functioning of the app and to improve HanyuGuide's educational features. On account deletion, study data and other non-personal data is anonymized. Your email is deleted with your account record.

Google sign-in

If you choose to sign in with Google, Google provides HanyuGuide with your email address, whether Google has verified that email, and a unique identifier for your Google account. Google may also return basic profile information, such as your name and profile picture, during sign-in. We use the account identifier, email, and verification status to create or sign you in to your HanyuGuide account, keep Google sign-in connected to the correct account, and protect the sign-in process. HanyuGuide stores the Google account identifier, the email address Google provided, its verification status, and when the identity was last used. We do not store Google access or refresh tokens, and we do not retain other Google profile details. The stored Google sign-in record is deleted when your HanyuGuide account is deleted. We do not request access to Gmail, Google Drive, contacts, or calendars, or share your Google account identifier for advertising. Any later use of your HanyuGuide account email, including service messages and optional communications, follows the email practices described above.

Educators may provide student names or classroom display names, optional school email addresses, classroom placement, assignments, and seat information when they manage a classroom dashboard. Educators must confirm that they are authorized to provide student information before using those student-management tools. Classroom-managed username accounts use an internal email address only so the login system can operate; that internal address is not a student contact address.

For classroom-managed students, HanyuGuide uses student data only to provide, support, secure, and improve the educational service. Student study activity may be used to improve spaced repetition scheduling, assignment progress, curriculum quality, and learning recommendations, but HanyuGuide does not use student data for targeted advertising, resale, unrelated commercial profiles, or direct marketing to classroom-managed students. Additional classroom terms are available in the Student Data Addendum.

AI Assistant Connections

HanyuGuide offers tools that AI assistants such as ChatGPT and Claude can call through the Model Context Protocol (MCP). Using them requires connecting a free HanyuGuide account; dictionary lookup, pinyin conversion, character strokes, and HSK quiz words are free for every account. When an assistant calls a tool, it sends HanyuGuide only the tool request it prepares, such as the word or text to look up, an HSK level, and a language code. We do not receive your conversation with the assistant. We use the request to return the result, and we use the connected account and the connection's IP address to apply rate limits and prevent abuse.

If you choose to connect a HanyuGuide account, you sign in on HanyuGuide and approve the permissions the assistant requests. We store a record of that authorization: the connecting app, the permissions you approved, and when access expires. Expired and revoked authorizations are removed regularly. With your approval, the assistant can read your study context, such as recently studied and difficult words, a study summary, and your personal study lists, and, if you granted list permissions, add, move, or remove words and create, rename, reorder, archive, or restore personal lists. Connected assistants cannot change your study progress, preferences, or billing.

Results HanyuGuide returns to an assistant are then processed by that assistant's provider under its own privacy policy, for example OpenAI or Anthropic. You can disconnect HanyuGuide in your assistant's settings at any time, or email hey@hanyuguide.com and we will revoke the connection.

Mobile App

On-device study and optional account connection

You can use on-device study without creating a HanyuGuide account, subject to the app’s subscription requirements. Study history, saved word lists, learning preferences, and downloaded pronunciation recordings are stored on your phone. Connecting an account through email codes or Google is optional. If you choose to transfer phone progress to an account, the selected words, lists, and study progress are sent to HanyuGuide. Account-based study uses our servers to provide and save your learning activity.

The app downloads pronunciation audio ahead of your study queue and reuses cached recordings. Online dictionary lookups and example requests send the requested search text or word to HanyuGuide. Requests to our servers and audio hosting providers also involve technical connection information, including an IP address. Audio playback does not record your voice.

Apple purchases and RevenueCat

Apple processes purchases made through the App Store. HanyuGuide uses RevenueCat to validate purchases, determine subscription access, restore purchases, and understand subscription activity. RevenueCat processes purchase history, product and transaction identifiers, subscription status and dates, and an app user identifier. Without a connected account, this identifier is generated by RevenueCat. When you connect an account, we provide your HanyuGuide account identifier so purchase access can be associated with that account. We do not receive your full payment-card details from Apple.

See RevenueCat’s Privacy Policy and Apple’s Privacy Policy for their practices.

Notifications and widgets

Study reminders are optional and scheduled on your phone using your study activity. Allowing study reminders does not opt you into promotional notifications. If you separately enable offers, we register a push token with Expo and store a device registration identifier, the push token, and your promotional consent status and time. These records let us address notifications to your device and honor your choices. Remote notifications use Expo’s push service and Apple’s notification service, which process delivery tokens and notification content.

You can turn study reminders and offers off separately in the app’s Settings, or control notification permission in iOS Settings. Turning offers off records your opt-out; it does not automatically delete the registration record. Widgets and Live Activities share the upcoming word and study-session information with the app’s iOS extension on your device. Information shown on your Lock Screen may be visible to anyone who can see that screen. You can remove widgets and control Live Activities in iOS.

Diagnostics and app updates

The mobile app sends error reports to Sentry with default personal-data collection disabled; we do not set your account identity in mobile Sentry reports or enable session replay. The app also contacts Expo to check for and download compatible app updates. Those requests include technical information needed to deliver the correct update, such as the app platform and runtime version, and expose connection information such as an IP address. Our mobile app does not use an advertising SDK to track you across other companies’ apps and websites. See the Sentry and Expo privacy policies.

Your data and deletion choices

You can request deletion of a connected HanyuGuide account from Settings → Account → Delete account. Account deletion does not erase the separate progress stored on your phone, cancel an Apple subscription, or automatically erase records held by Apple or RevenueCat. Removing the app deletes its local study files from that installation; copies may remain in device backups according to your backup settings. Purchase records may remain with the payment and subscription providers under their retention policies and legal obligations. Contact hey@hanyuguide.com to request access to or deletion of service records, including a push registration or purchase-linked records; we may need information to verify and locate those records.

Security

We use commercially reasonable safeguards to protect personal information, including student data. No method of transmission over the internet or electronic storage is 100% secure, so we cannot guarantee absolute security.

Links to Other Sites

Our Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

HanyuGuide may be used by students when access is created or approved by an authorized educator, parent, guardian, tutoring provider, or organization. We do not knowingly collect personal information from children under 13 outside an authorized classroom or guardian-supported context. Students under 13 should not create independent self-service accounts. If you believe a child under 13 has provided information without appropriate authorization, please contact us so we can review and take appropriate action.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately, after they are posted on this page.