Privacy

What we store

• Your account: your email address and, if you sign in with Google, the name, the profile picture address and the account identifier Google sends with the sign-in. We also keep the sign-in tokens Google issues to us for your account, and nothing else from your Google account.
• If you joined the waitlist before launch: your email address, which page you joined from, and when you joined.
• Your learning record: every answer you give in a lesson, with its time; what you have told us you already know; the goals and the HSK level you set; the readings you open; the items you mark as not needing review. This record is what the app learns from, and it is yours: the app's whole point is to model what you know.
• Your membership: whether you are a member, which plan (monthly or annual), when it renews or ends, and the identifiers Stripe gives us for your customer record and subscription. We never see or store your card number: you type it on Stripe's own page.
• Your settings: whether you want the daily reminder email, and the hour.
• Email we sent you: a record of each reminder, so reminders are not repeated, and each sign-in link until it is used or, if unused, for up to an hour after it expires.
• If you join as an auditor of our content (by invitation), the ratings you give sentences, under a pseudonym in any export.
• A log of sign-ins and of changes to your account made by us, kept so that we can answer questions about what happened to it.
• Usage: which parts of the app members use, as events from a fixed list (the app opened, a tool opened, a review entered, a clip played), tied to your account so the app can improve; and, for everyone who visits, daily counts of visits keyed by a code made from the day, your address and your browser that changes every day and is never stored with them, so visitors cannot be told apart from one day to the next. No other company's analytics run on the site.
• Errors the app meets in your browser, with the message and the page, so we can fix them.

We do not store your card number, your location, your contacts, or anything you did not type or do in the app. There are no advertising cookies and no tracking by other companies.

Cookies and your browser's storage

One cookie keeps you signed in, for seven days at a time. During a Google sign-in a second cookie holds the sign-in's state for five minutes. That is all: no preference cookies, no advertising cookies, no cookies from other companies. Your browser's own storage holds your unsent answers until they reach us, a couple of display settings, and, if you tried the app before you had an account, that early learning record, before and after it is imported into your account.

Who else sees your data

Five companies run parts of the service, each sees only what its part needs:

• Google, when you sign in with your Google account.
• Stripe, which takes your payment and holds your card; we receive your subscription's status from it, and Stripe may email you receipts of its own.
• Resend, which delivers our email to you (sign-in links, the trial notice, reminders).
• Render, which hosts the app and its database, in the United States (Oregon).
• Amazon Web Services, which stores and serves the recordings you play (the audio files, not anything about you).

The app is run from the United States, so your data is processed there wherever you live.

We do not sell your data and we do not give it to anyone else. If the law requires us to hand something over, we will tell you unless the law forbids it.

Email

We send you a sign-in link when you ask for one. We send a daily reminder only if you turned it on; you can turn it off in Settings at any time. We may email you about your membership (a payment that failed, a change to the price) and, rarely, about the service itself.

Erasing your account

Write to christopher@braidingfutures.com from the address you signed up with and ask for your account to be erased. We erase your account record, your learning record, your membership record, your settings, the email log and the usage events tied to you. We also delete your customer record at Stripe, which ends any subscription; Stripe keeps the payment records the law on payments requires it to keep. If you rated sentences as an auditor, the ratings stay as part of our content under a pseudonym that cannot be traced back to you. We erase within 30 days of your request, and usually within a few days.

Keeping your data

We keep your data for as long as you have an account; an account is never erased without a request. Backups of the database are kept by our host for a short period and then overwritten, so an erasure reaches them within that period.

Children

Radical Mandarin is for adults: you must be 18 or older to make an account. We do not knowingly keep data about anyone younger; if you think we hold some, write to us and we will erase it.

Changes

If this page changes in a way that matters, we will say so on this page with the date, and email members if the change affects what we do with their data.

Questions and requests

Braiding Futures Inc, or christopher@braidingfutures.com. We answer within 30 days.