Privacy Policy
This policy explains how HSK Reviso collects, uses, and protects your information.
Last Updated: June 9, 2026
1. Information We Collect
HSK Reviso collects the following categories of information, consistent with the App Store privacy labels for this app: Contact Info — Email Address (Linked to You, Used for App Functionality): Your email address, used to create and secure your account and to send you important service communications. User Content — Photos or Videos (Not Linked to You, Used for App Functionality): An optional profile avatar you choose to upload. Avatars are private to your account and are not shared publicly. Usage Data — Product Interaction (Not Linked to You, Used for Analytics, and App Functionality): Your learning activity within HSK Reviso, including vocabulary progress, quiz scores, study sessions, and your interactions with features like text-to-speech pronunciation and customer support. We use this data to power your learning experience and to analyze and improve the service. Diagnostics — Performance Data (Not Linked to You, Used for Analytics): Crash logs and performance metrics, used to identify and fix technical issues.
2. How We Use Your Information
We use the information we collect for the following purposes: Authentication and Account Management: To create and secure your account, verify your identity, and maintain your login session. Service Delivery: To power flashcard reviews, track your HSK progress, personalize your study experience, and provide text-to-speech pronunciation. Customer Support: To respond to your support requests and provide assistance through in-app chat. Product Improvement: To analyze usage patterns, fix bugs, and improve the quality of our service. We never sell your personal data to third parties. We do not use your data for cross-context behavioral advertising.
3. Third-Party Services
HSK Reviso uses trusted service providers to operate the Service. These providers process data on our behalf under strict data-processing agreements. Depending on the feature you use, your information may be processed by: Supabase: Provides authentication, database, and backend services for account information, learning data, avatar images, and customer support messages. Privacy policy: https://supabase.com/privacy RevenueCat: Manages subscription state and validates purchase receipts. Privacy policy: https://revenuecat.com/privacy Apple App Store / StoreKit: Processes all payment transactions. Apple acts as the merchant of record and handles all billing inquiries and refunds. Privacy policy: https://www.apple.com/legal/privacy/ Microsoft Edge Text-to-Speech: Generates pronunciation audio when you tap the speaker icon. The text sent is not associated with your account. Privacy policy: https://aka.ms/EdgeTTSPrivacy
4. Data Security
We implement industry-standard security measures to protect your information: Encryption: All data transmitted between your device and our backend is encrypted using TLS 1.2 or higher. Sensitive data at rest is encrypted using AES-256. Secure Infrastructure: Our backend is hosted on secure cloud infrastructure with physical security controls and automated threat detection. Access Controls: We strictly limit employee access to personal data on a need-to-know basis. Incident Response: In the event of a data breach, we will notify you and the relevant authorities in accordance with applicable law.
5. Cookies
We use essential cookies to: Authentication: Maintain your login session when you sign in. Preferences: Remember your settings such as your preferred study language. You can control cookie settings through your browser. Disabling cookies may affect your ability to sign in or save your preferences.
6. International Data Transfers
Your information may be transferred to, stored, and processed in countries other than your own. When we transfer personal data across borders, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms, to ensure your data remains protected to the standards required by applicable law. By using HSK Reviso, you understand that your information may be transferred to and processed in countries outside of your country of residence.
7. Your Rights
You have the following rights regarding your personal data: Access: Request a copy of the personal data we hold about you. Correction: Request that we correct inaccurate or incomplete data. Deletion: Delete your account and all associated data through your account settings, the in-app Delete Account option, or by contacting us at contact@hskreviso.com. Account deletion is permanent and typically completed within 30 days. Data Portability: Export your learning progress data in a machine-readable format (JSON). Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data in accordance with applicable law. To exercise any of these rights, contact us at contact@hskreviso.com. We will respond within 30 days.
8. California Residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA): Right to Know: You can request what categories of personal information we collect, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it. Right to Delete: You can request that we delete the personal information we have collected from you. Right to Correct: You can request that we correct inaccurate personal information we maintain about you. Right to Opt-Out of Sale or Sharing: HSK Reviso does not sell or share your personal information for cross-context behavioral advertising. We also do not sell or share your personal information to third parties for monetary or other valuable consideration. You do not need to take any action to exercise this right. Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. To exercise any of these rights, contact us at contact@hskreviso.com.
9. Children Privacy
HSK Reviso is not intended for children under the age of 16, or such other age as defined by the data protection laws of your country of residence (for example, 13 in the United States under COPPA where the local minimum is lower). We do not knowingly collect personal information from children below this age. If you believe a child has provided us with personal information, please contact us at contact@hskreviso.com and we will take steps to delete the information promptly.
10. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services: Account Data: Retained while your account is active. If you delete your account, your personal data is permanently deleted from our production systems within 30 days, with backups purged within 90 days. Support Messages: Retained for up to 24 months for quality and training purposes, then anonymized or deleted. Aggregated Analytics: We may retain aggregated, non-personally identifiable statistics (for example, total number of active users) indefinitely. Where we are required to retain data for legal, tax, or accounting reasons, we will retain it for the period required by law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any material changes will be posted on this page with an updated "Last Updated" date. Where changes are significant, we will also notify you through the app or by email before the changes take effect. Your continued use of HSK Reviso after any modifications constitutes acceptance of the updated terms. If you do not agree to the updated terms, you may stop using the service or delete your account at any time.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us: Email: contact@hskreviso.com We aim to respond to all inquiries within 7 days. HSK Reviso is operated by Hanlang Studios.