HanQuest ("the app") is a Chinese-learning game operated by lenna ("we", "us"), Honghuayuan Community, Nantou Subdistrict, Nanshan District, Shenzhen, Guangdong, China（中国广东省深圳市南山区南头街道红花园社区）. This policy explains what we collect, why, who we share it with, and how you can delete it. Questions: privacy@hanquest.app.
We collect the email you sign up with and the learning progress the game needs to work. Sentences you type to AI characters are sent to our AI provider to generate a reply. Microphone audio is handled by your phone's own speech recognition and never reaches our servers. We don't sell your data, we don't show ads, and you can delete your account and all of its data from inside the app at any time.
| Data | Why | Kept |
|---|---|---|
| Email address and a one-way hash of your password (bcrypt — we never store the password itself) | To create your account and let you log back in on another device | Until you delete your account |
| Profile: display name, chosen avatar, learning goal, level, XP, coins, streak | To run the game and show your progress | Until you delete your account |
| Learning records: which words/characters/grammar you've seen and mastered, review due dates, chapters completed, daily quests, cards collected, achievements, items owned | To schedule reviews (spaced repetition) and unlock the map | Until you delete your account |
| AI conversation text: what you type to an in-game character, plus the scene context | To generate the character's reply and judge whether you got the point across | Cached for about 1 hour to save cost, then dropped; not stored as chat history |
| AI usage counters: which feature was used, model name, token counts, timestamp | To enforce a daily fair-use limit and monitor our own costs | Retained for cost accounting; unlinked from you when you delete your account |
| On your device only: your login token and a cached copy of your progress (stored in the OS's app preferences) | To keep you logged in and let the app work offline | Removed when you log out or delete the app |
We do not collect your contacts, photos, precise location, or advertising identifiers. The app contains no advertising SDK and no behavioural-analytics or ad-tracking SDK.
When the app or our server hits an unexpected error, a diagnostic report is sent to Sentry (our error-monitoring provider) so we can fix it. A report contains the error and its stack trace, the app version, and the device model and OS version. We have configured Sentry not to attach personal identifiers: no email, no account id, no IP address, and we do not include the sentences you typed. Crash reports are retained by Sentry for up to 90 days.
Pronunciation practice needs microphone permission. The audio is processed by your device's built-in speech recognition (Apple Speech on iOS, Google's speech service on Android) — depending on your device settings this may happen on-device or on Apple's/Google's servers under their privacy policies. We receive only the recognized text, the comparison with the target sentence happens locally on your phone, and we do not upload or store your audio recordings. You can deny or revoke microphone access in system settings; everything except pronunciation practice keeps working.
We use a small number of processors and share only what each one needs:
We do not sell personal data, and we do not share it for cross-context behavioural advertising. We may disclose data if legally required, or to protect the rights and safety of our users.
In the app: Me → Settings → Account → Delete account. This immediately and permanently deletes your account, profile, and every learning record listed above; AI usage counters are unlinked from you and kept only as anonymous cost totals. It cannot be undone.
You can also request deletion by emailing privacy@hanquest.app from your account's email address — see Delete account. Backups containing your data are rotated out within 14 days.
Depending on where you live you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. For users in the EEA/UK, our legal bases are: contract (running the account and the game), legitimate interests (security, abuse and cost control), and consent (microphone access). Write to privacy@hanquest.app to exercise any of these; we reply within 30 days. You may also complain to your local data protection authority.
Traffic between the app and our servers is encrypted with HTTPS. Passwords are stored only as bcrypt hashes. Access to your account requires a signed token that is checked on every request, and each account can read and write only its own data. No system is perfectly secure, but we limit what we collect precisely so there is less to lose.
HanQuest is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will delete it.
If we change this policy we'll update the date above and, for material changes, notify you in the app before they take effect.
lenna, Honghuayuan Community, Nantou Subdistrict, Nanshan District, Shenzhen, Guangdong, China（中国广东省深圳市南山区南头街道红花园社区）
privacy@hanquest.app