This Privacy Policy explains what data the HSK 1 Lan app ("the App") and this website process, for what purposes, and your rights. We take your privacy seriously: the App is built to work without accounts, without advertising profiles and without tracking.
1. Who is responsible
The data controller is Oriol Vaquero Moreno (Spain), operating under the name "HSK 1 Lan". For any privacy question, contact us at hsklaninfo@gmail.com.
2. Quick summary
- We do not ask you to register, nor for your name or email, to use the App.
- We do not use advertising or trackers that profile you or follow you across apps.
- We use only anonymous, aggregated usage statistics (Aptabase) to improve the App.
- If the App crashes, we receive an anonymous technical error report (Sentry) so we can fix it, with no personal data.
- Most of your data (progress, settings) is stored only on your device.
- This website uses no cookies and no trackers.
3. What data we process
a) Stored only on your device
Your study progress, learned items, settings and reminder preferences are stored locally on your device. We have no access to them.
b) Sent to our server
To check your answers and serve content, the App may send to our server: the answer you type, the phrase or word being practised, the language, and an anonymous purchase identifier (which cannot identify you personally).
c) AI validation
In the advanced phrase correction (a paid feature), your answer and the correct answer are sent (through our server) to our AI provider (Mistral AI, based in the European Union) to evaluate whether your translation is valid. No data that identifies you is sent.
d) Subscriptions and purchases
Purchases are handled through Apple App Store or Google Play and our provider RevenueCat, which tells us whether your subscription is active via an anonymous identifier. We never receive or store your card details. They are processed by Apple or Google.
e) Notifications and audio
Reminders are local notifications on your device. Pronunciation uses your device's own speech synthesizer. Neither sends any data.
f) Anonymous usage statistics
To understand how the App is used and improve it (for example, which screens are viewed or where the tutorial is abandoned), we use Aptabase, a privacy-friendly analytics tool. This data is anonymous and aggregated: it contains no information that identifies you, no advertising profiles and no cross-app tracking.
g) Crash and error reports
If the App crashes or hits an unexpected error, we receive an automatic diagnostic report through Sentry (stored in the European Union) to help us fix it. This report contains technical information only (the error type and stack trace, your device model, operating system, app version and language) and no data that identifies you (no name, no account, and your IP address is not stored). We use it solely to improve the App's stability.
4. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Running the App and checking your answers | Performance of the service you request |
| Advanced AI validation (premium feature) | Performance of the contract / your request |
| Managing subscriptions and restoring purchases | Performance of the contract |
| Anonymous statistics and security | Legitimate interest |
| Diagnosing crashes and improving stability | Legitimate interest |
5. Providers that process data on our behalf
- Mistral AI (EU): AI validation of answers.
- Aptabase (EU): anonymous, aggregated usage statistics.
- Sentry (EU data region): anonymous crash and error diagnostics.
- fly.io: hosting and backend infrastructure.
- RevenueCat (USA): subscription management.
- Apple and Google: payment processing and distribution.
Some providers are located outside the European Economic Area (e.g. the USA). In those cases, transfers are covered by the EU Standard Contractual Clauses and/or the Data Privacy Framework.
6. Cookies
This website is a static informational site and uses no cookies and no trackers. The App is not a web browser and does not use cookies either. Therefore no cookie consent banner is required.
7. Retention
Local data stays on your device until you delete the App or reset your progress. Data sent to the server is kept only as long as necessary to provide the service and then deleted or anonymised.
8. Your rights
You have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to portability. As we use no accounts, you control most of your data directly from your device (by deleting the App or resetting your progress). To exercise any right over data on our server, email us at hsklaninfo@gmail.com. You may also lodge a complaint with your data protection authority.
9. Children
The App is not directed to children under 13, and we do not knowingly collect data from children under that age. If you believe a child has provided us data, contact us and we will delete it.
10. Security
We apply reasonable technical measures (encryption in transit, data minimisation) to protect the information. No system is 100% infallible, but we handle data with due care.
11. Changes to this policy
We may update this policy. We will publish the current version with its update date, and indicate significant changes in the App.
12. Contact
For any privacy question: hsklaninfo@gmail.com.