隐私政策

欢迎使用 ChineseEdu！我们，红兔（西安）教育科技有限公司（以下简称"我们"或"ChineseEdu"），高度重视您的隐私保护，尤其关注未成年人用户的个人信息安全。本隐私政策旨在清晰、透明地说明我们如何收集、使用、存储、共享和保护您的个人信息，并告知您作为用户（或监护人）所享有的相关权利。

请在使用我们的服务前仔细阅读本政策。如果您是未满18周岁的未成年人，请确保在父母或法定监护人的指导与同意下使用本服务。如果您不同意本政策的任何内容，请立即停止使用 ChineseEdu 平台。

1. 我们收集的信息

我们收集的信息是为了为您提供卓越的中文学习体验，并不断优化我们的服务。我们仅在必要范围内收集信息，并对未成年人数据采取额外保护措施。

1.1 您直接提供的信息

• 账户信息：注册时，我们会收集您的姓名、电子邮箱、用户名、密码，以及您选择提供的信息（如出生年份、母语、中文水平等）。
• 若您为6–17岁用户，我们将在注册流程中要求提供监护人邮箱，并发送验证链接以获取监护人同意。
• 个人资料：您可选择上传头像、填写简介等公开信息。未成年用户默认不显示头像及敏感资料，除非监护人明确授权。
• 学习内容：包括课程进度、测验成绩、作业、笔记、与AI助教的对话记录等。
• 对于13岁以下用户，我们将限制AI对话的存储时长，并避免用于个性化推荐以外的目的。
• 支付信息：购买服务时，由第三方支付平台（如 Stripe、Apple App Store、Google Play）处理支付数据。我们不会存储完整的信用卡号或CVV码。
• 沟通记录：您联系客服、参与调研或发送邮件时，我们会保留相关通信内容。

1.2 我们自动收集的信息

• 设备与日志信息：包括IP地址、设备型号、操作系统、唯一设备标识符（如IDFA/AAID）、应用版本、使用行为日志等。
• Cookies 与类似技术：用于记住偏好、分析性能、个性化内容及投放广告。
• 对于未满16周岁（或您所在司法辖区规定的更高年龄）的用户，我们默认关闭非必要Cookie，并禁止基于兴趣的广告投放。

1.3 从第三方获取的信息

• 社交媒体登录：若您通过 Google、Apple 或 Facebook 登录，我们会获取其公开的基本资料（如姓名、邮箱）。
• 若系统识别您为未成年人，将不请求额外权限（如好友列表、位置等）。
• 合作伙伴：可能从可信的分析或营销伙伴处获取汇总或匿名化数据，用于改善服务。不会用于识别特定未成年人身份。

2. 我们如何使用您的信息

我们仅在以下合法基础上使用信息：履行合同、取得同意、合法利益或法律义务。具体用途包括：

• 提供与维护服务（如创建账户、推送课程）；
• 个性化学习路径（如根据水平推荐内容）；
• 改进产品功能与用户体验；
• 发送服务通知（如课程提醒、安全警报）；
• 在获得同意后发送营销信息（未成年人用户需监护人同意）；
• 检测欺诈、滥用或安全威胁；
• 遵守适用法律法规。

3. 我们如何共享您的信息

我们不会出售您的个人数据。仅在以下情形共享：

• 服务提供商：如云服务商、支付处理商、客服系统、数据分析工具（如 Google Analytics、Mixpanel）。所有合作伙伴均签署数据处理协议，禁止将未成年人数据用于自身目的。
• 法律要求：响应法院命令、政府调查等合法请求。
• 业务转让：如发生合并、收购，用户数据可能作为资产转移，但受本政策约束。
• 征得同意：在您（或监护人）明确授权下共享。

4. 国际数据传输

ChineseEdu 是一家总部位于中国的企业，您的数据可能被传输并存储于中国或其他国家/地区。无论数据位于何处，我们都通过以下方式保障跨境传输合规：

• 对欧盟用户：采用 欧盟委员会批准的标准合同条款（SCCs）；
• 对其他地区：实施同等保护水平的技术与组织措施（如加密、访问控制）。

5. 数据安全

我们采用行业标准安全措施，包括：

• SSL/TLS 加密传输；
• 数据库加密存储；
• 定期安全审计与漏洞扫描；
• 员工权限最小化原则。

尽管如此，互联网传输无法保证100%安全。如发生数据泄露，我们将依法及时通知监管机构及受影响用户（包括监护人）。

6. 您的数据权利

根据您所在地区的法律（如 GDPR、CCPA、PIPL 等），您（或监护人）可能享有以下权利：

• 访问与更正：查看或修改您的个人信息；
• 删除权：要求删除账户及关联数据；
• 限制处理：在争议期间暂停数据使用；
• 数据可携权：获取结构化、通用格式的数据副本；
• 反对处理：拒绝基于合法利益的处理（如营销）；
• 撤回同意：随时撤销先前给予的同意。

未成年人用户 的权利可由其 父母或法定监护人代为行使。请通过第11条联系方式提交身份及监护关系证明。

我们将在 30天内 响应您的请求。

7. 数据保留

我们仅在实现本政策目的所必需的期限内保留数据：

• 活跃账户：持续保留；
• 注销账户：30天后匿名化或删除；
• 法律要求：如税务、纠纷等，按法定最短期限保留。

未成年人数据在账户注销后将优先处理删除。

8. 儿童与未成年人隐私（重点条款）

ChineseEdu 服务面向 6周岁及以上用户。我们严格遵守全球关于儿童数据保护的规定：

• 6岁以下儿童：我们 不会故意收集 其任何个人信息。如发现误收集，将立即删除。
• 6至13周岁用户（或您所在国规定的"儿童"年龄上限，如美国为13岁，欧盟部分国家为16岁）：必须通过监护人邮箱验证 获得明示同意；默认关闭个性化广告与非必要追踪；限制数据共享范围；不进行用户画像或自动化决策（除非教育必需且获同意）。
• 14至17周岁用户：可自主使用基础服务；涉及敏感处理（如营销、第三方共享）仍需监护人同意（视当地法律而定）。

如果您是家长或监护人，认为我们未经适当同意收集了您孩子的信息，请立即联系我们（见第11条），我们将迅速核查并采取措施。

9. 第三方链接

我们的平台可能包含指向第三方网站或服务的链接。本政策 不适用于这些第三方。请查阅其各自的隐私政策。

10. 政策更新

我们可能不时更新本政策。重大变更包括：

• 收集目的或方式的重大调整；
• 新增数据共享对象；
• 未成年人保护机制变化。

更新后，我们将：修改"最后更新日期"；在应用内或官网发布通知；对重大变更，向监护人邮箱发送提醒（如适用）。

继续使用服务即表示接受更新后的政策。

11. 联系我们

如您对本政策、未成年人数据处理或行使权利有任何疑问，请联系我们：

红兔（西安）教育科技有限公司
邮箱：service@chineseedu.com
官网：www.ChineseEdu.com

我们承诺在 30天内 回复您的请求。如涉及儿童隐私问题，将优先处理。

Welcome to ChineseEdu! We, RedRabbit (Xi'An) Education Technology Co., Ltd. ("we," "us," or "ChineseEdu"), place great importance on your privacy, with special attention to the personal information security of minor users. This Privacy Policy clearly and transparently explains how we collect, use, store, share, and protect your personal information, and informs you (or your legal guardian) of your rights.

Please read this policy carefully before using our services. If you are under 18 years of age, please ensure you use our services only under the guidance and with the consent of your parent or legal guardian. If you disagree with any part of this policy, please immediately discontinue using the ChineseEdu platform.

1. Information We Collect

We collect information solely to provide you with an exceptional Chinese learning experience and to continuously improve our services. We collect data only to the extent necessary and apply enhanced protections for minors' data.

1.1 Information You Provide Directly

• Account Information: During registration, we collect your name, email address, username, password, and optional details you choose to provide (e.g., birth year, native language, Chinese proficiency level).
• If you are aged 6–17, we will require a guardian's email during registration and send a verification link to obtain explicit parental consent.
• Profile Information: You may optionally upload an avatar or fill in a public bio. By default, minor users' avatars and sensitive profile details are hidden unless explicitly authorized by a guardian.
• Learning Content: Includes course progress, quiz scores, assignments, notes, and conversation logs with AI tutors.
• For users under 13, we limit the retention period of AI conversation logs and refrain from using such data for purposes beyond essential personalized recommendations.
• Payment Information: When purchasing services, payment data (e.g., credit card details) is processed by third-party platforms (e.g., Stripe, Apple App Store, Google Play). We do not store full credit card numbers or CVV codes.
• Communication Records: We retain records when you contact customer support, participate in surveys, or email us.

1.2 Automatically Collected Information

• Device and Log Data: Includes IP address, device model, operating system, unique device identifiers (e.g., IDFA/AAID), app version, and usage behavior logs.
• Cookies and Similar Technologies: Used to remember preferences, analyze performance, personalize content, and deliver ads.
• For users under 16 (or the higher age threshold required by your jurisdiction), non-essential cookies are disabled by default, and interest-based advertising is prohibited.

1.3 Information Obtained from Third Parties

• Social Media Login: If you log in via Google, Apple, or Facebook, we receive basic public profile information (e.g., name, email).
• If the system identifies you as a minor, no additional permissions (e.g., friend lists, location) will be requested.
• Partners: We may receive aggregated or anonymized data from trusted analytics or marketing partners to improve our services. Such data will never be used to identify specific minors.

2. How We Use Your Information

We process your information only on lawful bases: contract performance, consent, legitimate interest, or legal obligation. Specific purposes include:

• Providing and maintaining services (e.g., account creation, course delivery);
• Personalizing learning paths (e.g., recommending content based on proficiency);
• Improving product features and user experience;
• Sending service-related notifications (e.g., class reminders, security alerts);
• Sending marketing communications only with consent (guardian consent required for minors);
• Detecting fraud, abuse, or security threats;
• Complying with applicable laws and regulations.

3. How We Share Your Information

We do not sell your personal data. We share information only in the following circumstances:

• Service Providers: Trusted third parties (e.g., cloud hosting, payment processors, customer support, analytics tools like Google Analytics or Mixpanel). All partners sign data processing agreements and are prohibited from using minors' data for their own purposes.
• Legal Requirements: In response to valid court orders, government investigations, or other lawful requests.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of the transaction, but remains bound by this policy.
• With Consent: When you (or your guardian) explicitly authorize sharing.

4. International Data Transfers

ChineseEdu is headquartered in China. Your data may be transferred to and stored in China or other countries. Regardless of location, we ensure compliance through:

• EU Users: Standard Contractual Clauses (SCCs) approved by the European Commission;
• Other Regions: Equivalent technical and organizational safeguards (e.g., encryption, access controls).

5. Data Security

We implement industry-standard security measures, including:

• SSL/TLS encrypted transmission;
• Encrypted database storage;
• Regular security audits and vulnerability scans;
• Principle of least privilege for employee access.

While we strive to protect your data, no internet transmission is 100% secure. In the event of a data breach, we will promptly notify relevant authorities and affected users (including guardians) as required by law.

6. Your Data Rights

Depending on your jurisdiction (e.g., GDPR, CCPA, PIPL), you (or your guardian) may have the following rights:

• Access & Correction: View or update your personal information;
• Deletion: Request erasure of your account and associated data;
• Restriction: Temporarily halt processing during disputes;
• Data Portability: Receive a structured, machine-readable copy of your data;
• Objection: Object to processing based on legitimate interests (e.g., marketing);
• Withdraw Consent: Revoke previously granted consent at any time.

Minors' rights may be exercised by their parent or legal guardian. Please submit identity and guardianship proof via the contact method in Section 11.

We will respond to your request within 30 days.

7. Data Retention

We retain data only as long as necessary to fulfill the purposes outlined in this policy:

• Active Accounts: Retained while the account remains active;
• Deleted Accounts: Anonymized or deleted within 30 days;
• Legal Obligations: Retained for the minimum period required by law (e.g., tax, dispute resolution).

Minors' data receives priority deletion upon account closure.

8. Children and Minors' Privacy (Key Provisions)

ChineseEdu serves users aged 6 and above. We strictly comply with global child data protection regulations:

• Children under 6: We do not knowingly collect any personal information. If discovered, data will be immediately deleted.
• Users aged 6–13 (or up to the local "child" age threshold—e.g., 13 in the U.S., 16 in some EU countries): Explicit guardian consent via email verification is mandatory; non-essential tracking and personalized ads are disabled by default; data sharing is strictly limited; no profiling or automated decision-making unless educationally essential and consented to.
• Users aged 14–17: May use core services independently; sensitive processing (e.g., marketing, third-party sharing) still requires guardian consent where mandated by local law.

If you are a parent or guardian and believe we collected your child's information without proper consent, please contact us immediately (see Section 11). We will promptly investigate and take appropriate action.

9. Third-Party Links

Our platform may contain links to third-party websites or services. This policy does not apply to those third parties. Please review their respective privacy policies.

10. Policy Updates

We may update this policy from time to time. Material changes include:

• Significant changes to data collection purposes or methods;
• Addition of new data-sharing recipients;
• Modifications to minors' protection mechanisms.

Upon update, we will: Revise the "Last Updated" date; Post a notice on our app or website; For material changes, send an email alert to guardians (where applicable).

Your continued use of the service constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this policy, minors' data processing, or wish to exercise your rights, please contact us:

RedRabbit (Xi'An) Education Technology Co., Ltd.
Email: service@chineseedu.com
Website: www.ChineseEdu.com

We commit to responding within 30 days. Child privacy inquiries will be prioritized.