Privacy Policy

Updated: September 7, 2026

Effective: September 7, 2026

Introduction

HanBound Chinese School (hereinafter referred to as "we") respects and protects the personal information and privacy security of all HanBound Chinese School users. We are committed to maintaining your trust in us and adhering to the following principles to protect your personal information: the principle of consistency of rights and responsibilities, the principle of clear purpose, the principle of consent by choice, the principle of ensuring security, the principle of subject participation, the principle of openness and transparency, etc. Meanwhile, we promise that we will take corresponding security protection measures in accordance with mature industry security standards to protect your personal information.

This Policy is closely related to the products and/or services you use. When you download, install, launch, browse, register, log in to, or use our products and/or services (hereinafter collectively referred to as "using our products and/or services"), we will process and protect your personal information in accordance with this Policy. We try to explain the technical terms involved in this Policy in concise terms for your understanding. Clauses in this Policy that may have a significant relationship with your rights and interests have been distinguished in bold font, please review them carefully.

HanBound Chinese School specially draws the attention of minors under 18 years of age (especially children under 14 years of age) and their guardians: we have specified a dedicated section on minor protection (indicated in bold), please read it carefully.

Before using or continuing to use our products and services, please carefully read and fully understand this Policy, and make appropriate choices according to the guidance of this Policy when necessary. If you do not agree with the content of this Policy, it may result in our products and/or services being unable to operate normally, or failing to achieve the service effect we intend. You should immediately stop accessing/using our products and/or services. Your act of using or continuing to use the products and/or services we provide indicates that you fully understand and agree to all content of this "Privacy Policy" (including updated versions).

About Us

The developer of HanBound Chinese School is: Hangzhou Zhongnan Tika Education Technology Co., Ltd.

Email address: service@zolandtika.com

This Policy will help you understand the following:

• 1. How we collect and use your personal information
• 2. How we share, transfer, and publicly disclose your personal information
• 3. How we store and protect your personal information
• 4. How you manage your personal information
• 5. How you delete your account
• 6. Minor protection
• 7. How we update the Privacy Policy
• 8. How to contact us

• 一、How We Collect and Use Your Personal Information
• 1. Becoming a Registered User

HanBound Chinese School supports email address and third-party login methods. If you choose email address registration or login, you need to provide us with your [email address] so that we can send you verification code information. We collect this information to identify and verify your identity. When you choose to log in with a third-party account such as Google, Facebook, Apple ID, WeChat, etc., you agree that we obtain information you authorize to share from such third parties (including phone number, nickname, avatar, friend list, etc.), and you agree to bind your third-party account with your HanBound Chinese School product account, so that you can directly log in and use HanBound Chinese School products through the third-party account, and achieve data synchronization between different devices through that account. We will use your authorized shared personal information in accordance with agreements with third parties and in compliance with relevant laws and regulations. If you refuse to consent to HanBound Chinese School obtaining your authorized shared information from third parties, you will not be able to register an account and log in through third-party accounts such as Google, Facebook, Apple ID, WeChat, etc., nor achieve data synchronization through that third-party account.

After completing account registration, you may also choose to fill in or change your avatar and nickname according to your own needs to complete your information. However, if you do not provide such information, it will not affect your use of this product and related services.

The above information you provide will be used by us during the period you use the services we provide. When you actively delete your account, we will delete your personal information as soon as possible in accordance with applicable laws and regulations.

• 2. Providing Our Products and Services

This product features include Chinese learning courses, fun exercises, video interaction, learning data recording, character customization, home social interaction, and other main business functions.

We collect and use your information for the purposes described below, in accordance with the principles of legality, legitimacy, and necessity.

• 2.1. Device Information

We will, based on the specific permissions you grant during software installation and use, accept and record device-related information you use, including: IP address, device name, device model, hardware serial number, device identifier, operating system and application version, language settings, mobile terminal random access memory, mobile network information, network access method, network quality data. We will use your device information for identity verification, security prevention, archive backup, and customer security service purposes to improve the security of products and services.

• 2.2. Log Information

When you use all our business functions, the system will automatically collect certain information through cookies or other means and save it as relevant network logs. Such information includes: detailed usage when using this product or service, such as the page address you visit, browser type and settings, carrier, language used, access date and time, device crashes, system activity, web page records visited, and user-triggered event statistics, etc. Such information will help us statistically analyze users' secure internet behavior.

• 2.3. System Permission Calls

To provide services, we will call some of your system permissions. Below we list the business functions corresponding to the requested permissions, the purpose of the call, and the timing of the request. All permissions can be turned off in the system settings function. After turning off, we will not be able to collect corresponding personal information through these permissions. For the specific operation method of system permissions, please refer to the instructions provided by your device system developer.

1) System Permission: Network

Corresponding business: Internet access function

Function scenario description: Used for network downloading or synchronizing application data, updating application configuration

Can it be turned off: Yes, after turning off, APP content cannot be read and updated in real time, and cannot be used normally

2) System Permission: Storage (album, media, and other files)

Corresponding business: Feedback, customer service function

Function scenario description: a. When using the "Feedback" function, read album content; b. When the user uses the "Customer Service" function, read album content, and the user can send album pictures to us

Subscription and Payment Information

When you purchase HanBound Chinese School paid subscription services, we collect and use the following information:

(1) Subscription status information: your subscription type (monthly/annual), subscription effective time, expiration time, auto-renewal status, used to verify your subscription benefits and provide you with corresponding services.

(2) Order information: After completing payment through Apple App Store or Google Play, we may obtain order number, purchase time, product identifier, and other information, used to verify subscription status and handle customer service inquiries.

(3) Payment information: When paying through Apple App Store or Google Play, we do not directly collect or store your credit card number, bank card number, or other payment card information. The payment process is completed by Apple or Google, and the processing of relevant payment information is subject to Apple or Google's privacy policy. We only receive the result of whether the payment is successful and the above order information. We may subsequently integrate other third-party payment channels, and will update the corresponding description in this Policy at that time.

We collect the above information only for providing you with subscription services, verifying subscription status, handling customer service inquiries, and ensuring transaction security, and will not use it for other purposes.

• 3. Providing Security Assurance Services

We will use your information for identity verification, security prevention, archive backup, and customer security service purposes to improve the security of products and services. When our system fails, we will record and analyze information generated during system failures to optimize related services.

The collection and processing of information by the above service providers comply with their own privacy terms and are not subject to this Policy. However, we will also strive to review the business access qualifications of such third parties and strive to require the legality, compliance, and security of such service providers. To maximize the security of your information, we strongly recommend that you check the privacy terms of any third-party SDK service before using it. To protect your legitimate rights and interests, if you find that such SDK or other similar applications have risks, it is recommended that you immediately terminate relevant operations and contact us in time. By clicking to agree to this Privacy Policy, you are deemed to authorize and agree that the SDK technology service provider will obtain and process your permissions and information according to the above table. If you have any objections to this, you may feedback to us through service@zolandtika.com.

Some components of ours may be associated with third-party services that we do not own or control, such as third-party Software Development Kits (SDK) or third-party APIs integrated by our services to provide specific services or achieve specific functions. Some of these third-party services may also require your personal information, such as your location or device information, to provide you with their services. When you use such third-party services, you must comply with their terms of service, and their privacy policies will also apply. From time to time, we will conduct technical inspections and behavioral audits of the SDKs or APIs provided by such partners or service providers, and require them to comply with applicable laws, regulations, and agreements to ensure that they collect and use data legally, compliantly, and in accordance with agreements. The specific circumstances of our services integrating third-party SDKs/APIs are as follows. Please note that third-party SDKs/APIs may have certain changes in data processing types due to version upgrades, policy adjustments, and other reasons. You can visit their official websites for specific details:

1) SDKs used for mobile crash logs and statistics on page visits and click events, such as Bugly and Firebase

Bugly and Firebase are mainly used to collect statistics on users' usage of our application. Firebase is also used for our third-party login via Apple, Google, and Facebook to help us improve our services. We will collect common device information (such as IMEI/IMSI, SIM card serial number/MAC address, android_id, device model, operating system version) and network information. This information helps us develop learning content better suited to users in different regions and helps us locate and handle crash issues.

2) SDKs used for payment, such as Apple In-App Purchase and Google In-App Purchase

We will collect common device information (such as IMEI/IMSI, SIM card serial number/MAC address, android_id), network information, and GPS information for security risk control during user account login and payment.

The SDK used for Chinese language assessment adopts the Alibaba Cloud Speech Assessment SDK. We will collect common device information (audio recordings/audio, application information, device number) for speech recognition and pronunciation quality analysis to evaluate your speaking ability such as pronunciation accuracy and fluency; record your assessment behavior to diagnose system anomalies and ensure service stability; and analyze compatibility issues under different devices/systems to support security risk control.

4) Explanation of the collection and use of OAID by third-party SDKs: 1. To achieve functions such as message push, manufacturer push, application statistics analysis, crash analysis, advertising attribution, promotion effect evaluation, and security risk control, our App may integrate third-party SDKs. Relevant third-party SDKs may collect and use device identification information, including OAID, Android ID, advertising identifiers (such as AAID/GAID), device model, operating system version, application version, network type, IP address, etc. 2. The types of SDKs involved include: message push SDKs, manufacturer push SDKs, statistics analysis SDKs, crash analysis SDKs, advertising attribution SDKs, device identification SDKs, etc. The relevant information is only used to achieve the corresponding SDK functions, such as push channel establishment, message delivery, application operation statistics, crash investigation, promotion effect analysis, advertising attribution, and security risk control.

The collection and processing of information by the above service providers comply with their own privacy terms and are not subject to this Policy. However, we will also strive to review the business access qualifications of such third parties and strive to require the legality, compliance, and security of such service providers. To maximize the security of your information, we strongly recommend that you check the privacy terms of any third-party SDK service before using it. To protect your legitimate rights and interests, if you find that such SDK or other similar applications have risks, it is recommended that you immediately terminate relevant operations and contact us in time. By clicking to agree to this Privacy Policy, you are deemed to authorize and agree that the SDK technology service provider will obtain and process your permissions and information as described above. If you have any objections to this, you may provide feedback to us through service@zolandtika.com.

• 4. Exceptions to Prior Consent

According to relevant laws, regulations, and national standards, in the following circumstances, we will legally collect and use your personal information without your consent:

• 1）Directly related to national security and national defense security;
• 2）Directly related to public safety, public health, and major public interests;
• 3）Directly related to criminal investigation, prosecution, trial, and judgment enforcement;
• 4）Necessary to maintain the life, property, or other major legitimate rights and interests of you or others, but it is difficult to obtain your consent;
• 5）The personal information collected is information you voluntarily disclose to the public;
• 6）Collecting personal information from legally publicly disclosed information, such as legitimate news reports, government information disclosure, and other channels;
• 7）Necessary for signing and performing a contract according to your requirements;
• 8）Necessary for maintaining the safe and stable operation of the services provided, such as discovering and handling product or service failures;
• 9）Other circumstances stipulated by laws and regulations.

• 5. Supplementary Notes

When we want to use information for other purposes not specified in this Policy, we will seek your consent in advance.

When we want to use information collected for a specific purpose for other purposes, we will seek your consent in advance.

• 二、How We Share, Transfer, and Publicly Disclose Your Personal Information
• 1. Information Sharing
  • 1.1. We will not share your personal information with companies, organizations, or individuals other than ourselves, except in the following circumstances:
    • 1）With your explicit consent or authorization obtained in advance;
    • 2）Sharing is necessary according to applicable laws and regulations, legal procedure requirements, or mandatory administrative or judicial requirements;
    • 3）Sharing with authorized partners: Only to achieve the purposes stated in this Policy, some of our services will be jointly provided by us and authorized partners. We may share certain personal information with partners to provide better customer service and user experience. We will only share your personal information for legitimate,正当, necessary, specific, and clear purposes, and only share personal information necessary to provide the service. Our partners have no right to use the shared personal information for any other purpose. Currently, our authorized partners include the following types:
      • ①　Advertising and analytics service authorized partners. Unless we obtain your permission, we will not share your personal identity information (referring to information that can identify your identity, such as name or email address, through which you can be contacted or your identity identified) with partners providing advertising and analytics services. We will provide these partners with information about the coverage and effectiveness of their advertisements, without providing your personal identity information, or we will aggregate such information so that it does not identify you personally.
      • ②　Suppliers, service providers, and other partners. We send information globally to suppliers, service providers, and other partners who support our business. Such support includes providing technical infrastructure services, analyzing how our services are used, measuring the effectiveness of advertising and services, providing customer service, or conducting academic research and surveys.

For companies, organizations, and individuals with whom we share personal information, we will sign strict confidentiality agreements with them, requiring them to process personal information in accordance with our instructions, this Privacy Policy, and any other relevant confidentiality and security measures.

• 2. Information Transfer

We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:

• 2.1. Transfer with explicit consent: After obtaining your explicit consent, within the authorized scope, we will transfer your personal information to the specified other party;
• 2.2. In the event of our acquisition, merger, reorganization, etc. leading to a change in the subject, if personal information transfer is involved, we will require the new company or organization holding your personal information to continue to be bound by this Privacy Policy. Otherwise, we will require that company or organization to re-seek your authorization and consent.

• 3. Information Disclosure

We will only publicly disclose your personal information in the following circumstances:

• 3.1. After obtaining your explicit consent, we may publicly disclose the personal information you specify;
• 3.2. Disclosure based on law: In the case of laws, legal procedures, litigation, or mandatory requirements from government authorities, we may publicly disclose your personal information.

• 三、How We Store and Protect Your Personal Information
• 1. How We Store Information
  • 1.1. Storage Location

We comply with laws and regulations, and the information and materials collected about you will be stored on our servers within the territory of the People's Republic of China. Except in the following circumstances:

• 1）Laws and regulations have explicit provisions;
• 2）Obtain your explicit authorization;
• 3）Your personal proactive behavior such as cross-border transactions through the internet.
  • 1.2. Storage Period

Generally, we only retain your personal information for the shortest time necessary to achieve the purpose. Personal information used to identify your personal identity and reflect relevant activities will be retained until the user deletes the account, unless laws require or allow retention for a longer period. However, in the following circumstances, we will change the storage time of personal information due to legal requirements:

• 1）To comply with applicable laws and regulations;
• 2）To comply with court judgments, rulings, or other legal procedures;
• 3）To comply with requirements of relevant government agencies or legally authorized organizations;
• 4）We have reason to believe that compliance with laws and regulations is necessary;
• 5）For purposes reasonably necessary to enforce relevant service agreements or this Policy, safeguard public interests, and protect the personal and property safety or other legitimate rights and interests of our customers, our products, other users, or employees.

After you terminate using our products, we will stop collecting and using your information, except as otherwise provided by laws and regulations or regulatory authorities.

When our related services cease operations, we will notify you through push notifications and announcements, and delete or anonymize your personal information retained on the server within a reasonable period.

• 2. Data Security Measures
  • 2.1. We will adopt security protection measures meeting industry standards, including establishing reasonable institutional norms and security technologies to prevent your personal information from unauthorized access, use, or modification, and to avoid data damage or loss. For example, our network services adopt encryption technologies such as Transport Layer Security Protocol, providing browsing services through HTTPS and other means to ensure the security of user data during transmission; we use information accessor confidentiality agreements and other means to only allow employees and partners of products and product affiliates who need to know such information to access personal information, and set strict access permission control and monitoring mechanisms for this purpose. Meanwhile, we require all personnel who come into contact with your personal information to fulfill corresponding confidentiality obligations. If they fail to fulfill such obligations, they will be held legally liable or their cooperation with us will be suspended.
  • 2.2. We will take all reasonable and feasible measures to ensure that irrelevant personal information is not collected. We will only retain your personal information for the period necessary to achieve the purposes described in this Policy, unless an extension of the retention period is required or permitted by law.
  • 2.3. The internet is not an absolutely secure environment, and email, instant messaging, and communication methods with other users are not encrypted. We strongly recommend that you do not send personal information through such methods. Please use complex passwords to help us ensure the security of your account.
  • 2.4. The internet environment is not 100% secure. We will do our best to ensure or guarantee the security of any information you send to us. If our physical, technical, or management protection facilities are breached, resulting in unauthorized access, public disclosure, tampering, or destruction of information, resulting in damage to your legitimate rights and interests, we will bear corresponding legal liability.
  • 2.5. In the unfortunate event of a personal information security incident, we will, in accordance with the requirements of laws and regulations, promptly inform you of: the basic situation and impact of the security incident, the measures we have taken or will take, suggestions you can make to independently prevent and reduce risks, remedial measures for you, etc. We will promptly inform you of the relevant situation of the incident by email, letter, phone, push notification, etc. When it is difficult to inform each personal information subject one by one, we will take reasonable and effective methods to issue an announcement. Meanwhile, we will also proactively report the handling of the personal information security incident in accordance with regulatory requirements.
• 四、How You Manage Your Personal Information

In accordance with relevant Chinese laws, regulations, standards, and common practices in other countries and regions, we guarantee that you exercise the following rights regarding your personal information. You may refer to the following steps for related operations:

• 1. Access Your Personal Information

You can access basic information through the following steps:

Enter the APP, click the [Avatar] in the top left corner of the homepage to view personal information.

You can view your subscription information through the following steps: Enter the APP, click [Me] → [Subscription/Membership] to view current subscription type, expiration time, and auto-renewal status.

• 2. Change Your Personal Information

You can change your basic information through the following steps:

Enter the APP, click the [Avatar] area in the top left corner of the homepage;

Click [Avatar] to enter the edit page for personal information editing.

• 3. Delete Your Personal Information

You can send an email to service@zolandtika.com to contact us for personal information deletion;

• 4. Change the Scope of Your Authorization Consent or Withdraw Your Authorization

You can change the scope of your authorization for HanBound Chinese School to continue collecting personal information or withdraw your authorization by deleting information, turning off device functions, or making privacy settings in the website or software.

Each business function requires some basic personal information to be completed. For the collection and use of additional personal information, you may grant or withdraw your authorization consent at any time. When you withdraw consent or authorization, we cannot continue to provide you with the services corresponding to the withdrawn consent or authorization, nor will we process your corresponding personal information. However, your decision to withdraw consent or authorization will not affect the personal information processing previously carried out based on your authorization.

• 5. Responding to Your Above Requests

We will adopt appropriate technical means to ensure that you can query, supplement, correct, or delete your personal data, or apply for us to supplement, correct, or delete relevant information through feedback or complaint channels published by related products or services; after receiving your application, we will process it according to the procedure. To ensure security, according to the procedure, you may need to provide a written request or otherwise prove your identity. We may first ask you to verify your identity before processing your request. We will respond within 15 days. For your reasonable requests, we原则上 do not charge fees, but for multiple repeated requests exceeding reasonable limits, we may charge a certain cost fee depending on the situation. For requests that are unreasonably repeated, require excessive technical means (for example, need to develop a new system or fundamentally change current practices), pose risks to the legitimate rights and interests of others, or are very impractical (for example, involving information stored on backup tapes), we may refuse.

If you are unable to access, correct, or delete your personal information, or you need to access, correct, or delete other personal information generated when using our products, or you believe that we have violated laws and regulations or the agreement with you regarding the collection or use of personal information, you may contact us through the official feedback channels of relevant products or services we publish.

In the following circumstances, we will be unable to respond to your request:

• 1）Directly related to national security and national defense security;
• 2）Directly related to public safety, public health, and major public interests;
• 3）Directly related to criminal investigation, prosecution, trial, and judgment enforcement;
• 4）We have sufficient evidence that you have subjective malice or abuse of rights;
• 5）Responding to your request will cause serious damage to the legitimate rights and interests of you or other individuals or organizations;
• 6）Involving trade secrets.
• 五、How You Delete Your Account

You can delete your account through the following steps:

Enter the APP, you can go through [Me — Settings — Delete Account], and select [Apply for Deletion] under the conditions satisfying account deletion, to delete your account; we will process it for you as soon as possible within 48 hours after receiving your deletion application and verifying your user identity. After account deletion, except for personal information that must be retained by us as explicitly required by law (such as transaction-related information in HanBound Chinese School), your personal information will be removed from HanBound Chinese School.

Special Notice: Deleting your account will not automatically cancel auto-renewing subscriptions you opened through Apple App Store or Google Play. Before deleting your account, please cancel auto-renewal according to the method described in the "Terms of Service" to avoid unnecessary charges. After account deletion, paid subscription fees will not be refunded.

• 六、Minor Protection

We attach great importance to the protection of minors' personal information. We protect minors' personal information in accordance with relevant national laws and regulations. If you are a minor, please carefully read this Privacy Policy in the company and with the help of your parents or guardians, and use our services or provide information to us only with the consent of your parents or guardians. For the collection of minors' personal information with the consent of parents or legal guardians, we will only use or publicly disclose such information when permitted by law, explicitly consented by parents or legal guardians, or necessary for the protection of minors.

If we find that we have collected minors' personal information without prior verifiable parental consent, we will try to delete the relevant data as soon as possible. If you are the guardian of a minor and have any questions about the minor's use of our services or the user information provided to us, please contact us in time according to the contact information provided in Article 9 of this Policy.

• 七、How We Update the Privacy Policy
• 1. To provide you with better services, we will update the terms of this Policy according to product updates and relevant laws and regulations. These updates will form part of this Policy. Without your explicit consent, we will not reduce your rights under the currently effective version of this Policy.
• 2. In case of Policy updates, we will notify you through APP client push notifications or other reasonable means, so that you can timely understand the latest version of this Policy.
• 八、How to Contact Us

If you have any complaints, suggestions, or questions regarding personal information protection issues, or if you have any questions about this Policy, you may contact us through the following method. We will review the relevant issues as soon as possible and respond within 15 working days after verifying your user identity: service@zolandtika.com.