Privacy Policy

Practice Hanzi is operated by Xijing Art (Shanghai, China), the controller of your personal data. Write to privacy@practicehanzi.com for anything on this page.

• Your account: your email address, or the identifier and email that Sign in with Apple or Google sends us when you use them. If you choose Apple's “Hide My Email”, we only ever see the relay address.
• Your learning: your level, daily goal and settings; the characters and words in your deck; your review history and writing sessions; your study lists; the books you are following.
• Your plan: whether you have Premium and until when, as reported by the App Store through RevenueCat (below), and a daily count of dictionary searches for the free plan's limit.
• How you use the app: the screens you open, the buttons and items you tap (with their label, such as “Add to Review”), and moments such as finishing onboarding, starting or finishing a review, creating a list or scanning a page. This is linked to your account identifier only. It never includes what you type, your email or your name, and there is no recording of your screen. We use it to see where the app is hard to use and to improve it.
• Crash reports: when the app crashes, a report with the device model, iOS version, app version and the technical error. It does not contain your study content.

We do not sell your data, show advertising, or track you across other apps and websites.

Page scanning reads the characters on a photo with Google's ML Kit text recognition, entirely on your iPhone. The photo is never uploaded to us or to anyone else. The app asks for the camera or your photo library only when you scan.

Pronunciation scoring (Premium) sends your recording to Microsoft Azure Speech Services, which returns a score. Neither Microsoft nor we keep the recording once the score is returned. The app asks for the microphone only when you use it. The audio you hear when you tap a word is pre-recorded and played from our servers; nothing is recorded to play it.

• Our own servers: your account and learning data live in our self-hosted database (Supabase on PostgreSQL) on a server in France. Rules in the database itself keep each account's data visible only to that account.
• Apple handles App Store purchases and, if you use it, Sign in with Apple. Google handles Sign in with Google if you use it.
• RevenueCat, Inc. (United States) receives your App Store purchase receipts and an app user identifier, and tells the app which plan you are on. We never see your card details.
• Microsoft Azure scores pronunciation, as described above.
• PostHog (PostHog, Inc., data hosted in the European Union) receives the app usage described above, to help us understand how the app is used. It is not used for advertising and is not shared with anyone else.
• Sentry (Functional Software, Inc., United States) receives the crash reports described above.
• Resend (Resend, Inc., United States) sends our emails: sign-in links, password resets, and the one launch email described below.
• Stripe, Inc. (United States) processes payments only if you subscribed on this website rather than in the app. It receives what it needs to charge you; we receive a customer ID, subscription status and dates, never your card number. We keep that billing record for as long as your account exists, plus the period tax law requires.

The website counts visits with a self-hosted, cookie-free statistics tool. It sets no cookie, keeps no profile of you and records only anonymous page views.

If you join the waitlist we store your email address, when you signed up, the moment you gave consent, which page you signed up from, and whether you asked to try the app before its public release. Everyone on the list gets one email, the day Practice Hanzi is available; if you ticked the early-access box, you may also get an earlier invitation to try a pre-release version. We send nothing else and share your address with no one.

The lawful basis is your consent, which you can withdraw at any time: write to privacy@practicehanzi.com and we delete your address. You do not need an account to ask. The list is deleted once the launch email has been sent.

Your account and learning data are kept for as long as your account exists. Encrypted daily backups are kept for 14 days, so deleted data disappears from them within two weeks. Snapshots taken before a database migration are kept to protect against data loss.

In the app, open Settings and choose Delete account. This removes your account and everything attached to it: deck, reviews, writing sessions, lists and settings. If you signed in with Apple, it also revokes Practice Hanzi's access to your Apple ID. You can also ask by email.

Deleting your account does not cancel an App Store subscription; Apple bills it, so cancel it in your iPhone's Settings under your name, then Subscriptions.

If you live in the EU, the UK or Switzerland you have the rights of access, rectification, erasure, portability, restriction and objection under the GDPR, and the right to complain to the data protection authority where you live. California residents have similar rights under the CCPA. Write to privacy@practicehanzi.com to use any of them.

Practice Hanzi is not directed at children under 13, and we do not knowingly collect their data.

When we change this policy in a way that matters, we update the date above and tell account holders by email at least 7 days before the change takes effect.