Privacy Policy

Effective date: 2026-05-19

This Privacy Policy explains how LearnChinese collects, uses, stores, and protects personal data.

1. Who we are

LearnChinese (“the Service”) is operated by SimpleStayChina Limited, a Hong Kong limited company.

For privacy questions or requests, contact: privacy@rolko.xyz.

For data protection purposes, SimpleStayChina Limited is the controller of the personal data described in this policy.

2. What we collect and why

Account data

We collect your email address and authentication identifiers through Supabase Auth. We use this to create your account, keep you signed in, and secure access to your data.

Lawful basis: contract.

Learning content

We store learning content you create or save, including vocab items, words, texts, transcripts, review history, and learning progress. We use this to provide learning, review, translation, and progress-tracking features.

Lawful basis: contract.

Text processed by the Chrome extension

When the Chrome extension is active, it may process page text, subtitles, captions, or related language content to provide learning features such as tokenization, word lookup, translation, saving, and review.

Text is sent to our server or processing services only as needed to provide the features you use, such as saving content, translating text, looking up words, or syncing your learning data.

Lawful basis: contract and legitimate interests.

Page URLs

When you explicitly save content from a page, we may store the page URL with that saved content so you can identify the source later.

Lawful basis: contract.

Translation and language-processing services

Some text may be processed by translation, language-processing, or infrastructure services to provide app functionality. We use these services only to operate the Service and provide the features requested by users.

Lawful basis: contract.

Billing data

If you subscribe to a paid plan, Stripe processes your payment. We store Stripe customer, subscription, and payment-status identifiers. We do not store your card number.

Lawful basis: contract and legal obligation.

Operational logs

We collect standard technical logs such as IP address, user-agent, timestamp, request metadata, and error logs. We use these for security, debugging, abuse prevention, and service reliability.

Lawful basis: legitimate interests.

3. Chrome Extension Limited Use Disclosure

The Chrome extension only uses page text, subtitles, captions, URLs, and related browsing-context data to provide the learning features requested by the user.

  • ✓We do not sell this data.
  • ✓We do not use it for advertising.
  • ✓We do not use it to build advertising profiles.
  • ✓We do not transfer it to third parties except as necessary to provide the Service, process payments, operate translation or language-processing features, maintain security, comply with law, or run the infrastructure described in this policy.

4. Where data is stored

Application data is stored in Supabase Postgres hosted in an EU region. Row-level security is used so each user can only access their own rows.

The Service is also hosted and operated using infrastructure and service providers listed below. Some providers may process data outside Hong Kong, the UK, or the EEA. Where required, we rely on appropriate safeguards such as contractual protections, standard contractual clauses, or equivalent transfer mechanisms.

5. Third-party service providers

We use the following service providers:

  • Supabase — authentication, database hosting, and storage.
  • Stripe — subscription billing and payment processing.
  • Vercel — application hosting, deployment infrastructure, edge requests, and operational logs.
  • Translation and language-processing providers — translation, text analysis, language lookup, or related learning functionality.
  • Ollama — optional local AI processing on the user's own machine when they enable the local LLM feature.

We do not sell personal data and do not share personal data with third parties for advertising.

6. Cookies

We use strictly necessary cookies and similar technologies.

These include:

  • Supabase session/authentication cookies to keep you signed in.
  • Stripe cookies or similar technologies during checkout and billing flows.
  • Security or session-related cookies needed to operate the Service.

We do not use advertising cookies.

7. Retention

We retain account data and learning content for the lifetime of your account.

You can delete your account from the dashboard. When you delete your account, we delete or anonymise your account and associated learning content within 30 days, unless we need to retain limited information for legal, billing, security, fraud-prevention, or dispute-resolution purposes.

Stripe billing records may be retained for as long as legally required.

Operational logs are retained only for as long as reasonably necessary for security, debugging, and service reliability.

8. Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Export your learning content.
  • Object to certain processing based on legitimate interests.
  • Request restriction of processing.
  • Withdraw consent where processing is based on consent.

You can exercise these rights through the dashboard where available, or by emailing privacy@rolko.xyz.

9. Account deletion

You can delete your account from the dashboard. You may also request deletion by emailing privacy@rolko.xyz.

After deletion, we delete or anonymise your account and associated learning content within 30 days, unless retention is required for legal, billing, security, fraud-prevention, or dispute-resolution reasons.

10. Children

The Service is not intended for children under 13, and we do not knowingly collect personal data from children under 13.

11. Security

We use technical and organisational measures designed to protect personal data, including authentication controls, database access controls, row-level security, HTTPS, and restricted operational access.

No online service can guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and, where appropriate, notify users through the Service or by email.

13. Complaints

If you have concerns, please contact us first at privacy@rolko.xyz.

Depending on your location, you may also have the right to complain to your local data protection authority.

14. Contact

For privacy questions or to exercise your rights, contact:

privacy@rolko.xyz