Privacy Policy

Last updated: May 8, 2026

This Privacy Policy explains how the HanziDragon mobile application ("App", "HanziDragon") collects, uses, and protects information. The App is developed by Olena Bachurina ("we", "our", "us").

Quick summary

HanziDragon does not require an account. Most learning data stays on your device or syncs through your private iCloud. We use a small number of third-party services to keep the App stable and to understand how it is used in aggregate. If you choose to send us feedback through the in-app form, we receive what you submit (including your email, if you provide it).

What we collect, and why

Data you choose to provide

If you use the in-app feedback feature, your submission is processed by our diagnostics provider Luciq and may include:

• Your email address, if you enter it
• The text of your message
• A screenshot, if attached
• Recent in-app activity logs ("user steps") to help us reproduce the issue

We use this data only to respond to you and to fix the issue you reported. Submitting feedback is entirely optional.

Data collected automatically by the App and its service providers

When you use the App, certain data is automatically collected by third-party services:

Firebase Analytics (Google LLC) collects:

• A pseudonymous device-level installation identifier (Firebase Installation ID, Google Analytics App Instance ID) — not your Apple ID or your name
• Product interaction events (such as screens viewed, lessons started or completed, paywall displayed, purchase events)
• Device and OS information (model, OS version, app version, language, country)

Firebase Crashlytics (Google LLC) collects:

• Stack traces and application state at the moment of a crash
• Device and OS information
• A random installation UUID

Luciq (passive collection, in addition to any feedback you submit) collects:

• Crash data
• Performance and session data
• Diagnostic logs (network requests, view hierarchy, user steps)
• A device-level installation identifier

We do not pass your name, email, Apple ID, or any account-level identifier to these services automatically. The data above is tied to a per-install identifier, not to your real-world identity.

Data Apple processes on our behalf

• iCloud sync (CloudKit). If iCloud is enabled on your device, your learning progress (characters practiced, completed lessons, settings) syncs through your private iCloud container. We do not have access to its contents. Apple processes this under its own privacy practices.
• Subscription transactions (StoreKit). When you purchase a subscription, the transaction is processed by Apple. We receive a receipt confirming the purchase but never see your payment details.

Data linked to your identity vs. not linked

To match the App's privacy nutrition label on the App Store:

Linked to your identity

• Email address (when you submit feedback)
• Bug report text and attached screenshots
• Device identifier
• Product interaction events
• Purchase history (subscription events logged in analytics)

Not linked to your identity

• Crash data
• Performance data
• Other diagnostic data

We do not track you

The App does not use the App Tracking Transparency framework, does not collect IDFA, does not display advertising, does not share your data with advertising networks, and does not sell your data to data brokers.

Subscriptions

The App offers optional auto-renewable subscriptions to unlock additional content. Subscription transactions are handled by Apple. We do not access or store your payment information. Apple's terms and the App Store's privacy practices govern the transaction itself.

Children

The App is rated 4+ on the App Store and is intended for a general audience, not specifically for children. We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your jurisdiction). If you are a parent or guardian and believe your child has provided personal information through the in-app feedback feature, contact us and we will delete it.

Data retention

• Analytics data (Firebase): retained at the user-level identifier for up to 14 months, after which it is aggregated.
• Crash and diagnostic data (Crashlytics, Luciq passive): retained for up to 90 days, then aggregated or deleted.
• Bug reports submitted through the in-app feedback (Luciq): retained for up to 12 months unless you ask us to delete them sooner.

International data transfer

Our service providers (Apple, Google, Luciq) are based in the United States. If you use the App from the European Economic Area, the United Kingdom, Switzerland, or another region with data-transfer restrictions, your data may be transferred to and processed in the United States. These transfers are made under appropriate safeguards, including the European Commission's Standard Contractual Clauses where required.

Your rights

Depending on your location, you may have the following rights regarding your personal data:

• GDPR (EU, UK, Switzerland): access, rectification, erasure, restriction of processing, data portability, objection to processing, and the right to lodge a complaint with your local data protection authority.
• CCPA / CPRA (California): right to know, right to delete, right to correct, right to non-discrimination, and the right to opt out of the sale or sharing of personal information. We do not sell or share your personal information for cross-context behavioral advertising.

To exercise any of these rights, email us at the address below. We may ask for information to verify your identity (such as the email address you used when submitting feedback).

The lawful bases on which we rely under the GDPR are:

• Performance of a contract — for delivering subscription content and core App functionality
• Legitimate interests — for analytics, crash reporting, security, and service improvement
• Consent — for optional submissions, such as feedback you choose to send

You can withdraw consent for optional submissions at any time by simply not using the feedback feature. To request deletion of past submissions, contact us.

Security

We rely on industry-standard practices and on the security infrastructure of our service providers (Apple, Google) to protect your data in transit and at rest. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through the App or on our website. Continued use of the App after such changes constitutes acceptance of the updated policy.

Contact

For privacy questions, requests, or concerns, contact us at:

support@hanzidragon.com

Olena Bachurina, developer of HanziDragon.