Privacy Policy

中文Version 2026-09-21 · Applies to clavissinica.com and hsk.clavissinica.com

1. Who we are

This website is operated by Clavis Sinica Limited, a company registered in New Zealand (company number 7893816) ("we", "us"). We handle personal information under the New Zealand Privacy Act 2020 and, where it applies to users in the EU and UK, the GDPR.

2. What we collect

• Account: email address, account type (parent, student, teacher), interface language, sign-up time, and when you confirmed you are 13 or older. There are no passwords; you sign in with a one-time link sent to your email.
• Learning records: practice progress, quiz answers, your mistakes list, learning goals.
• Text you submit for analysis: characters, words, sentences or passages you ask us to analyse on the website or in the browser extension.
• Payments: handled by Stripe. We never see or store card numbers; we keep only the Stripe customer ID, plan, subscription status and renewal date.
• Access logs: our web server records IP address, time, page requested and browser identifier for security and troubleshooting. Kept for 14 days.
• Sign-in cookies: two essential cookies keep you signed in: cs_at (2 hours) and cs_rt (30 days). We use no analytics scripts and no advertising or tracking cookies.

3. How we use it

Only to sign you in, provide analysis, practice and quizzes, save your progress, handle subscriptions and payments, reply to you, and keep the service secure. We do not sell personal information, use it for advertising, or build marketing profiles.

4. Children

• You must be 13 or older to sign up yourself. The first time you sign in with an email address, you confirm "I am 13 or older".
• Children under 13 can only be added by a parent or guardian, under the parent's own account. The parent must agree to this policy when adding a child; we record when they agreed and which version of the policy it was.
• We collect as little as possible about children: no email and no phone number. We keep only the name the parent enters (a nickname is fine), an optional birth year, learning records, and the child's sign-in name and code. The code is stored only as a hash; we cannot read it.
• Used only for learning. Children's data is not used for marketing or profiling, is never sold, and is not shared with anyone except the service providers in section 5 that we need to run the service.
• Class rosters hide real names by default. Teachers see a child's sign-in name; the real name is shown only when the teacher specifically asks.
• Parents can see, correct or delete their child's data at any time by writing to hello@clavissinica.com.
• If we learn that a child under 13 has signed up on their own, we will delete that account.

5. Who else handles it

We share only what is needed to run the service, and only with these providers:

Read-aloud: the speaker button uses your browser's or operating system's built-in voices and does not go through our servers. Some browsers' online voices may send the text being read to that browser's provider.

This processing may take place outside New Zealand, for example in Singapore or the United States. We only use providers that give personal information reasonable protection.

6. How long we keep it

• Account, child profiles and learning records: until you ask us to delete them.
• Sign-in links: valid once, for 15 minutes, then cleared.
• Sign-in sessions: up to 30 days; signing out ends them.
• Web server access logs: 14 days.
• Payment and invoice records: for as long as New Zealand law requires.

7. Your rights

You can ask to see, correct or delete your personal information (parents can do this for their child), or ask for a copy of it. For now, all requests are handled by email: write to hello@clavissinica.com from the email address you signed up with, so we can confirm it is you. We will reply within 20 working days.

If you are unhappy with how we handle your information, you can complain to the New Zealand Office of the Privacy Commissioner (privacy.org.nz). Users in the EU and UK can also contact their local data protection authority.

8. Changes

When we update this policy, we change the version date at the top. We will announce significant changes on the website in advance, and email affected parents about any change that concerns children's data.

9. Contact

Clavis Sinica Limited · New Zealand · hello@clavissinica.com