1. Scope and operator
This policy explains how Open Hanzi, operated by Wenyong He in Calgary, Alberta, Canada, handles information. Open Hanzi and Open AtoZ have separate account systems. This policy applies to the Open Hanzi app and its supporting account and learning services.
Contact for privacy questions and requests: wenyongqd@gmail.com.
The app is intended for general language learners and is not marketed as a children’s app.
2. Account and learning information
- Account information: email address, account identifier, Apple sign-in information you authorize, sessions and security records. Email verification messages are delivered through Resend.
- Learning information: vocabulary progress, review schedules and evidence, exercise responses, notes, personal vocabulary, imported entries, generated learning material, study plans and preferences.
- Purpose: authentication, account security, providing learning features, restoring your learning state and synchronizing it across devices for this app. Learning information is saved locally and synchronizes with the app’s account service when connected.
- Hosting: our account and learning services use Fly.io infrastructure and SQLite storage. Session credentials are kept in the device’s secure storage.
3. Purchases
Apple processes in-app payments. RevenueCat helps verify purchases, subscription status and restored access. We process the associated app account identifier, products, transactions and entitlement status; we do not receive your complete payment-card details. RevenueCat may also process SDK and device information needed to operate its service.
Subscription eligibility and any free trial are determined by Apple and the verified purchase information.
4. Online AI and voice
Online features share only the content relevant to the requested function, which may include your question, transcripts, target words, exercise instructions, recent conversation and text to be spoken. Speech recognition may transmit microphone audio. The service used depends on the feature, language and availability.
- DeepSeek: conversation, translation, learning guidance, query intent and generated learning material. Requests pass through our Expression service.
- Google Gemini: generating speech from reply text and language instructions.
- TypeSafe / Jev: expression feedback using the submitted transcript, target words and exercise instructions.
- Groq: transcription of submitted speech-spelling and dictation recordings.
- ElevenLabs and Seed ASR / ByteDance: streaming speech recognition, depending on language and service configuration. Apple Speech is used by other supported recognition paths and may use Apple’s online services.
- The coabl.app speech service: online fallback pronunciation for words or sentences that cannot be played locally. Relevant text and language information are sent to that service.
Our service processes these requests and operational information such as device or account bindings, request identifiers, quota counters and error/status information to authorize, deliver and protect the service. Some expression request and result records may contain submitted text, transcripts, prompts or scores and are periodically cleaned up. Live streaming reply bodies are not written to the Live request database; content you choose to save as learning material may still be stored and synchronized.
Providers process requests under their applicable terms and privacy practices. This policy does not promise that every provider has zero retention or excludes all model training. Avoid unnecessary sensitive personal information in questions or recordings.
On iOS, the app asks you to enable online AI and voice before those requests can be sent. You can decline and continue with features that do not depend on online AI. Change or withdraw this choice in the app’s Settings → Online AI & voice. This choice is stored separately for each app account and is distinct from microphone permission.
5. Device permissions and local features
Microphone access supports voice features that you choose to start. Declining it does not prevent features that do not require recording. Learning reminders are optional local notifications. Device motion may adjust the visual movement of the word cloud; we do not upload motion readings through our learning sync. You can change device permissions in iOS Settings.
Supported local vocabulary, E5 semantic processing and Soprano pronunciation run on the device. This does not mean that every search, voice or AI feature is offline.
When needed for handwriting practice, the app downloads character stroke data from jsDelivr’s hanzi-writer-data package and caches it locally. The CDN receives the character request and ordinary network information.
6. Retention and deletion
Account-linked cloud learning information is retained to provide your account and synchronization until you delete it or request deletion, subject to necessary security, legal and backup obligations. Operational request records are periodically cleaned up; we do not promise a fixed maximum retention period for every provider or backup.
To delete your account, open Settings → Account → Delete account in the app and verify your identity again. This removes the account, sessions and associated cloud learning records. Current versions retain offline databases in storage isolated to the original account; other app accounts cannot read them. Deleting the app removes its local app data.
App account deletion does not cancel an Apple subscription or erase Apple’s purchase records. Manage subscriptions in your Apple Account settings. RevenueCat or other service providers may retain necessary transaction, operational or compliance records under their policies. For additional access, correction, deletion or consent-withdrawal requests, contact wenyongqd@gmail.com.
7. Sharing, security and your choices
We use service providers for authentication, hosting, email delivery, purchases and the online features described above. These providers may process information outside your country. We do not operate advertising trackers or sell your learning records for advertising. No advertising identifier or advertising SDK is used by our app code.
We use safeguards such as secure session storage, authenticated requests and separation of account data. No transmission or storage method is completely secure. You may choose not to use optional online features, change device permissions, delete your account or contact us about your information. If a child has supplied personal information without appropriate authorization, a parent or guardian should contact us.
8. Changes and contact
We update this policy when features or information practices change and revise the date above. If a change requires a new permission or consent, that must be obtained before the changed collection or sharing takes place.
Wenyong He
Calgary, Alberta, Canada
wenyongqd@gmail.com