Legal

Privacy policy

HanFlash is built for focused HSK practice. This policy explains how we collect, use, and protect information when you use the app.

Last updated: February 8, 2026Terms of service Copyright & licensing

What we collect

Account + study data

Email, profile name, study progress, and feature preferences.

Where it lives

Secure database + device

Server storage for accounts and sync; local storage for offline use.

How we use it

Personalize learning

Authenticate, sync across devices, and improve study experiences.

Your control

Access + delete

Update your profile, clear local data, or request deletion.

Information we collect

Data categories

We collect only what we need to run the study experience and keep your progress synced.

Account data

Email address and display name.
Password hashes (we never store plaintext passwords).
Session tokens to keep you signed in.

Study data

Favorites, reading progress, and saved stories.
Spaced-repetition (SRS) state and review timing.
Study history metrics (cards reviewed, ratings, session length).

Usage + device data

IP address and user agent for security and fraud prevention.
Account events like login, logout, password reset, and profile updates.

Local device storage

Visibility toggles, filters, and UI preferences.
Local-only analytics events stored in your browser.
Offline session history and cached learning state.

How we use data

Purpose-built for learning

Your information helps us deliver a focused HSK practice workflow.

Visit your profile

Create and manage your account.
Sync favorites, SRS state, and reading progress across devices.
Personalize your learning flow and remember settings.
Maintain security, prevent abuse, and troubleshoot issues.
Understand feature usage through local-only analytics.

Sharing

When information leaves the app

We do not sell personal data. We only share information in limited situations needed to run the service.

Infrastructure providers that host and run the service (hosting and database).
Legal or safety requirements when we are required to comply with law.
Business transfers if the service is acquired (we will notify you).

Your choices

Control your data

You can manage your account data directly in the app or by contacting us.

Update your display name from the profile screen.
Sign out anytime to clear active sessions.
Clear browser storage to remove local preferences and study history.
Email us to request access or deletion of your account data.

Security & retention

Keeping data safe

We apply standard safeguards and retain data only as long as needed to provide the service and meet legal requirements.

Passwords are stored as salted PBKDF2 hashes.
Session cookies are httpOnly and set to secure in production.
Access to production data is limited to maintainers and trusted providers.

The service is not intended for children under 13. If you believe a child has provided personal information, contact us and we will delete it.

Contact

Reach the privacy team

Email questions or data requests to fahadkawsarahmed@gmail.com.

When information leaves the app

We do not sell personal data. We only share information in limited situations needed to run the service.

Infrastructure providers that host and run the service (hosting and database).

Legal or safety requirements when we are required to comply with law.

Business transfers if the service is acquired (we will notify you).