Privacy Policy
Effective date: 12 July 2026 · Last updated: 12 July 2026
This Privacy Policy explains how HSK Digital LLC, a Wyoming (USA) limited liability company operating as HSK University ("HSK University", "we", "us", or "our"), collects, uses, shares, and protects your personal data when you use our website, apps, and services (together, the "Service").
We keep this policy in plain language on purpose. If anything is unclear, email us at support@hskuniversity.com.
1. Who we are
HSK University is a Chinese-language learning platform built around the official HSK proficiency exam. The data controller responsible for your personal data is HSK Digital LLC, a Wyoming (USA) limited liability company operating as HSK University, with a registered address at 30 N Gould St Ste N, Sheridan, WY 82801, USA. You can reach us at support@hskuniversity.com.
2. Data we collect
We collect only what we need to provide and improve the Service.
| Category | Examples |
|---|---|
| Account data | Email address, display name, and (if you sign in with Google) your Google profile name and photo. Passwords for email sign-up are handled and stored by our authentication provider — we never see or store your plaintext password. |
| Learning data | Your progress, lesson history, flashcard reviews, mock-exam results, and study statistics. |
| Community content | Posts, comments, group and direct messages, friend connections, and any profile details you choose to add, if you use community features. |
| Subscription & payment data | Your subscription tier and status, and billing identifiers. Card and payment details are collected and processed by our payment provider (LemonSqueezy) — we do not receive or store your full card number. |
| AI interaction data | Text and audio you submit to AI tutor, AI chat, and voice features, processed to generate responses. |
| Usage & device data | Standard technical data such as IP address, device and browser type, pages viewed, and interactions, collected via analytics. |
3. How we use your data
- To create and manage your account and authenticate you.
- To provide the Service — lessons, mock exams, flashcards, AI tutor/chat/voice, podcasts, and community.
- To process subscriptions, payments, and manage your plan and quotas.
- To send you service and transactional emails (e.g. sign-up confirmation, password reset, account notices).
- To measure, understand, and improve how the Service is used, and to fix problems.
- To keep the Service secure and prevent abuse, fraud, and violations of our Terms.
- To comply with our legal obligations.
4. Legal bases for processing (GDPR)
If you are in the EEA or UK, we process your personal data on these legal bases:
- Contract — to provide the Service you sign up for (account, lessons, subscriptions).
- Legitimate interests — to improve, secure, and support the Service, balanced against your rights.
- Consent — for non-essential analytics/cookies where required, which you can withdraw at any time.
- Legal obligation — where we must retain or disclose data by law.
5. Who we share data with
We do not sell your personal data. We share it only with service providers ("processors") that help us run the Service, under agreements that require them to protect it:
| Provider | Purpose |
|---|---|
| Google Firebase | Authentication, database, hosting, and backend functions |
| Google (Vertex AI / Gemini) | AI tutor, AI chat, lesson AI, and audio generation |
| Google Analytics & reCAPTCHA | Usage analytics and protection against bots and abuse |
| ElevenLabs | AI voice tutor speech |
| LemonSqueezy | Subscription payments (Merchant of Record) and billing |
| Stripe | Tutor session payments, payouts, and account top-ups |
| Resend | Transactional and account emails |
| PostHog | Product analytics and feature-usage insights |
| Sentry | Error and performance monitoring |
| Tenor | GIF search in community features |
We may also disclose data if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users or the Service. If we are involved in a merger or acquisition, data may transfer as part of that transaction, subject to this policy.
6. Cookies & analytics
We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used (via Google Analytics 4 and PostHog). Essential cookies are needed for the Service to work; you can control non-essential cookies through your browser settings and, where required, our consent controls.
7. Data retention
We keep your personal data for as long as your account is active and as needed to provide the Service. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records to comply with legal, tax, or accounting obligations, or to resolve disputes.
8. Security
We use reputable infrastructure providers and technical and organizational measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to notify you and regulators of breaches where the law requires.
9. International data transfers
We operate globally and our providers may process data in the United States and other countries. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
10. Your privacy rights
If you are in the EEA or UK (GDPR)
You have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. You may also lodge a complaint with your local data protection authority.
If you are in California (CCPA/CPRA)
You have the right to know what personal information we collect, to request deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information. We will not discriminate against you for exercising these rights.
To exercise any of these rights, email support@hskuniversity.com. We will respond within the timeframes required by law and may need to verify your identity first.
11. Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13. Where local law sets a higher age of digital consent (such as 16 in parts of the EEA), users below that age should use the Service only with the consent and involvement of a parent or guardian. If you believe a child has provided us personal data, contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.
13. Contact us
Questions, requests, or complaints about this policy or your data? Contact:
HSK Digital LLC
30 N Gould St Ste N, Sheridan, WY 82801, USA
support@hskuniversity.com
See also our Terms of Service.