The platform collects, processes and uses your personal data under Taiwan's Personal Data Protection Act. This policy sets out what we collect, why we collect it, how we protect it, and the rights you can exercise.
1. What we collect
| Category | What it covers |
|---|---|
| Account data | Name or nickname, email, avatar, social account identifier, interface language |
| Learning data | Course progress, practice and test answers, study time, notes, assignments, AI conversations, speaking recordings, written work |
| Technical data | IP address, device and browser information, sign-in records |
| Institution data | Your institution, class, assigned courses and completion status (for institution members) |
2. How we use it
- To provide courses, practice and your learning record — including progress sync and issuing certificates
- Personalised learning: generating review material and targeted practice from your own record
- Teaching support: your class teacher can see your learning record and assignments, for teaching purposes only, and each access is logged
- Improving the service, and anonymised statistical research (Ministry of Education programme evaluation uses aggregate statistics that identify no individual)
3. The AI features and your data
- What you type to the AI tutor, the speaking you record and the writing you submit are used to generate feedback and update your learning record.
- Speaking recordings are retained and made available to teachers on a minimisation basis, and deleted on schedule once marking is finished.
- We do not use personal data that identifies you to train general-purpose AI models for anyone else.
4. Who we share it with
- Your class teacher
- Your learning record, assignments and grades, for teaching purposes
- Your institution's administrator
- Statistics and record summaries only — never the text of AI conversations
- Service providers
- Cloud hosting, video hosting and email delivery — only as far as providing the service requires
- Legal requests
- Judicial or regulatory authorities following due process
Apart from the cases above, we do not sell your personal data or pass it to third parties.
5. Retention and security
- Kept for as long as your account exists; deleted or anonymised within 30 days of you deleting the account, unless the law requires otherwise.
- Encrypted in transit (TLS) and at rest; access is controlled by role and every access is recorded in an audit log.
- In the event of a data breach we notify the regulator and the affected users, as the law requires.
6. Cookies and analytics
The platform uses necessary cookies to keep you signed in and remember your language, and de-identified traffic analytics to improve the service. You can disable non-essential cookies in your browser without affecting the core learning features.
7. Your rights
Under Article 3 of the Personal Data Protection Act you have the following rights over your data, most of which you can exercise directly under Settings → Privacy:
- Enquire, review and obtain a copy — “Download my data” exports everything as JSON
- Supplement or correct — edit it in your account settings
- Stop collection, processing and use, and delete — “Delete account”, with double confirmation
8. Contact us
For anything about your personal data, contact the data protection officer at privacy@huayu.example.edu.tw. Any revision to this policy is announced and sent to registered users 14 days before it takes effect.