Canonical: https://xuechinese.yudis.dev/privacy/ Publisher: Xue Chinese Reviewed: 2026-11-06 # Privacy Policy Last updated: October 20, 2026 This Privacy Policy describes how Yudistira Ashadi, operating Xue Chinese ("we", "us", or "our"), collects, uses, and shares information about you when you use the Xue Chinese mobile application and related services (the "Service"). Yudistira Ashadi is the contact for privacy, support, and account deletion requests. ## Information we collect ### Account information When you create an account with Google or Apple, we store the email address, display name, and profile image your provider makes available to us. If you choose Apple's Hide My Email, this can be a private relay address. We do not receive or store your Google or Apple password. For Sign in with Apple, we also retain an encrypted authorization token so we can revoke the app's authorization when you delete your account. ### Learning data To provide the Service we store your learning progress, including: - Your selected and placed HSK levels and learning goal - Lesson completion status, current step, and practice scores - Unit quiz and exam attempts and results - Streak data (current streak, longest streak, last activity date) ### Subscription information If you subscribe to Xue Chinese Pro, payment is processed through Google Play on Android or the Apple App Store on iOS, where available. We do not receive or store your payment card details. Subscription state is managed via RevenueCat, which receives a pseudonymous user ID, your purchase events, and technical details such as the app and operating-system versions. ### Technical information Our servers automatically receive standard request information (IP address, user agent, timestamps) when you use the Service. This is used for security, abuse prevention, and operating the Service. ## How we use your information - To operate and provide the Service - To track your learning progress and personalize the curriculum - To verify and manage your subscription entitlement - To respond to support requests - To detect and prevent abuse, fraud, or violations of our Terms We do **not** sell your personal information. We do not use your data for advertising. ## Third-party processors Information is shared as needed with the following providers: - **RevenueCat** -- subscription management (pseudonymous user ID, purchase events, and app/device version details) - **Google and Apple** -- account authentication and subscription payment processing through Google Play or the App Store - **Cloudflare** -- application hosting, database hosting, security, and network delivery The Google Sign-In SDK processes account and technical information for authentication and operation of Google's sign-in service. The SDK version included in the iOS app declares name, email address, phone number, approximate location, account and device identifiers, usage information and other data in its privacy manifest. Its declared purposes include app functionality and, for some technical categories, analytics. These declarations include information handled by Google's SDK and services; they do not mean that Xue Chinese requests phone or location permissions or stores all of those fields in its database. Google's processing is also described in the [Google Privacy Policy](https://policies.google.com/privacy). ## Data retention We keep your account data for as long as your account is active. You can request deletion using the options below. Successful in-app account deletion removes your account, authentication sessions, learning records, and local subscription entitlement snapshot from our active application database. It also removes your account identifier from local subscription webhook events. A separate job requests deletion of the linked RevenueCat customer record. That job retains your pseudonymous account identifier until the request is accepted or the customer is confirmed absent; failed requests may require manual follow-up. Subscription event metadata can remain in our database without your account identifier. RevenueCat accepting a deletion request does not mean that provider-side erasure has completed. Cloudflare Workers Logs are enabled for the production service, sampled at 100%, and retained in the Cloudflare dashboard for three days. The production database supports Cloudflare D1 Time Travel, which provides a seven-day recovery window on the current Workers Free plan; data in that window may remain recoverable after deletion from the active database. Google Play and Apple may retain their own transaction records. We delete account-deletion request emails and attachments that identify you within 30 days after completing the request, unless a specific legal or dispute reason requires longer retention. Other support emails are retained only as needed to handle the support matter and are not covered by this account-deletion email period. The 30-day rule applies to the request emails under our control; it does not mean that processor-side or recoverable backup copies are erased immediately. Contact us with questions about a request or records that may need to be retained. ## Account deletion You can also use our dedicated [Xue Chinese account deletion page](https://xuechinese.yudis.dev/delete-account/) to submit a request without using the app. To delete your account, open the Xue Chinese app, go to **Profile -> Account Actions -> Delete account** and confirm. To request deletion of your Xue Chinese account and associated data without installing or opening the app, email [distra96@gmail.com](mailto:distra96@gmail.com?subject=Xue%20Chinese%20account%20deletion%20request) with the subject "Xue Chinese account deletion request". Include the email address used for your Xue Chinese account; do not send passwords or payment card details. We may ask you to verify that you own the account. Deleting your account does not automatically cancel a paid subscription -- you must cancel through the Google Play or Apple subscription settings for the store where you subscribed. ## Adult learners Xue Chinese is intended for adult learners aged 18 and over. The Service is not directed at people under 18. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal information, contact us so we can review the request. ## Your rights Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these rights directly in the app, or by contacting us at the address below. ## Security We use industry-standard measures to protect your data in transit (TLS) and at rest. No method of transmission or storage is 100% secure; if you become aware of any unauthorized access to your account, contact us immediately. ## Changes to this policy We may update this Privacy Policy from time to time. If we make material changes we will notify you in the app or by email before the changes take effect. ## Contact us If you have questions about this policy or our handling of your data, contact us at [Yudistira Ashadi (distra96@gmail.com)](mailto:distra96@gmail.com). Provider: Yudistira Ashadi.