Privacy policy
Last updated Oct 14, 2026
This policy explains which personal data Hanzi Pass (hanzipass.com) collects, why, and the choices you have. We collect only what test preparation needs.
What we collect
- Your answers in mock tests, practice, vocabulary quizzes and writing, with scores and timing — to grade, predict your level, suggest what to practise and show your history.
- If you create an account: email, name and profile picture from the sign-in provider (Google, Apple or email), your target exam and level, and the test date you choose.
- If you are not signed in: a random identifier in a cookie, so your results stay with this browser until you sign in.
- Speaking (shadowing) recordings if you use that feature; they are deleted after the period shown on the practice page.
- If you buy Premium: the plan, payment status and transaction reference. We never see or store full card numbers.
- Technical data such as IP address and browser type in server logs, for security and troubleshooting.
AI writing and speaking feedback
When you submit writing for grading, the text is sent to an AI model provider (Anthropic or OpenAI) only to grade it and write feedback. It is sent without your email or name and never used for advertising.
Analytics
With your consent we use Google Analytics to understand how the site is used. Analytics cookies are set only after you accept, and you can change your choice at any time with the button below. We use no advertising cookies.
Service providers
Some providers process data on our behalf:
- Firebase Authentication (Google) — accounts and sign-in.
- RevenueCat and Paddle.com (our reseller and Merchant of Record for card payments) — card payments and subscriptions.
- SePay — matching bank transfers to orders (Vietnam).
- Anthropic / OpenAI — writing feedback; Google Cloud / Microsoft Azure — Chinese audio; speech recognition (HSKK scoring).
- DigitalOcean — hosting; Cloudflare — delivery network, audio storage (R2) and protection.
- Google Analytics — usage statistics, only with your consent.
Shared results and classes
Your results are private. If you share one, anyone with the link sees the score, predicted level, test name and the display name you chose — never your answers or email. If you join a class of a school, the teacher sees your name, scores on assigned tests and your practice activity.
How long we keep data
Account data is kept while your account exists. Unfinished test attempts are deleted after 7 days, recordings after 7 days (free) or 90 days (Premium). Payment records are kept as long as accounting law requires.
Your rights
You can access, correct or delete your data and withdraw analytics consent at any time. To delete your account and all its data, write to us from the account email. Depending on where you live, you may also complain to your data protection authority.