Privacy Policy

This policy applies to the Hanziro application ("the App") and the website hanziro.com, published and operated by Hanziro.

1. Data We Collect

The App does not require registration with a name, phone number, or password. We only store:

• Installation identifier: a random code generated when you first open the App, used to associate your learning progress with you. This code is not your device's IMEI or advertising ID.
• Learning data: completed lessons, accuracy, time spent on lessons, words learned and due for review, XP points, gems, and study streak.
• Recovery code: we only store a one-way hash of the code, not the original code — no one, including us, can read your code back.
• Email (optional): only when you proactively link an email to recover your account. One-time verification codes (OTPs) sent via email are also stored only in hashed form.
• Security logs: IP address and browser/app information (user agent) during sign-in and account recovery events — to detect unusual access.

We do not collect contacts, location, photos, microphone audio, or advertising IDs, and we do not use third-party advertising or tracking tools.

2. How We Use Your Data

• Store and sync your learning progress so you can restore it when reinstalling the App or switching devices.
• Suggest review content based on the words you frequently miss.
• Send verification codes when you link an email or recover your account.
• Protect accounts and systems from unauthorized access and abuse.

We do not sell or rent personal data and do not use your data for advertising.

3. Third-Party Data Processors

We use certain service providers, strictly to the extent necessary:

• Resend — sends emails containing verification codes (receives only the email address and message content).
• Cloudflare — content delivery network and protection for the website and API servers.
• Backblaze B2 — hosts lesson audio files (contains no personal data).

Pronunciation in the App may use the text-to-speech (TTS) engine built into your device; this runs locally on your device, and we do not receive any data from it.

4. Storage and Security

• All data transmitted between the App and our servers is encrypted (HTTPS).
• Sign-in secrets on your device are kept in the operating system's secure storage.
• Data is retained for as long as the account exists. When you request deletion, your data is deleted as described on the account deletion page.

5. Your Rights

You have the right to request to view, correct, or delete your data. Instructions for deleting your account and data: hanziro.com/delete-account/. Send all other requests to support@hanziro.com.

6. Children

The App is not directed at children under 13 and does not knowingly collect data from children. If you believe we have inadvertently stored data from a child, please contact us so we can delete it.

7. Changes to This Policy

When this policy changes, we will update it on this page and record the update date at the top of the page. Material changes will be announced in the App.

8. Contact

Hanziro — Email: support@hanziro.com