Draft pending professional review. This text is not final yet.
Data controller
The controller of your data is MyChineseStory.com. For any privacy question, write to us at hello@mychinesestory.com.
What data we process
Account data: first name, surname, email and password (the password is stored encrypted and we never see it). If you sign in with Google, Google gives us your name, email and profile picture; we never receive your Google password.
Learning preferences: level, topics, pace and delivery days, website and translation language, and time zone.
Reading activity: stories received and read, words looked up, answers to questions and reading time. We use it to choose your stories, calculate your progress and show you your vocabulary.
Subscription and purchases: plan, amounts, dates and status. Card details are handled directly by Stripe; we never see or store them.
Contact and newsletter: the data you send us through the contact form and, if you subscribe, your email, language and the date and wording of the consent you gave.
Technical data: to prevent abuse of our forms we store an irreversible fingerprint (hash) of your IP address, not the address itself.
Purposes and legal bases
Providing the service you signed up for (account, deliveries, reading, progress and library): performance of the contract.
Handling payments and invoices: performance of the contract and compliance with legal obligations.
Sending service notices, such as a new story or your progress: performance of the contract. You can switch off new-story and progress emails in your account or from the link in each email.
Sending the newsletter: your consent, which you can withdraw at any time.
Answering your messages: your request and our legitimate interest in helping you.
Protecting the website against abuse and improving the method with aggregated, anonymous data: legitimate interest.
A learner's level may go up automatically when they complete the vocabulary of their level; this has no legal effects and you can change your level whenever you like.
Who we share it with
Only with providers that deliver services to us and process data on our instructions: Supabase (database and account access, with servers in the European Union), Resend (sending the platform's emails; a US company that applies the European Commission's standard contractual clauses and the EU-US Data Privacy Framework), Zoho (the hello@mychinesestory.com mailbox, with servers in the European Union) and [website and API hosting, to be chosen].
Payments: charges are handled by Stripe through its Link service, which acts as the seller to you. To do so we share your email, your name and what you are buying, and Stripe collects your card details and billing address on its payment page, which it needs to calculate taxes. Stripe processes that data as a controller, under its own privacy policy (stripe.com/privacy).
To create stories, their audio and their illustrations we use artificial intelligence services (Anthropic, Microsoft Azure and fal.ai). These services do not receive any learner's personal data.
We do not sell your data or pass it on to third parties, unless required by law.
If a provider processes data outside the European Economic Area, it does so with the safeguards required by the GDPR, such as the European Commission's standard contractual clauses.
How long we keep it
For as long as you have an account. If you delete it, we delete your data, except what we must keep by law (for example, invoicing data for the periods required by tax and commercial law), which will be blocked.
Newsletter data until you unsubscribe. Contact messages for one year at most.
Your rights
You can ask us to access, correct or delete your data, object to or restrict its processing, receive it in a portable format or withdraw your consent by writing to hello@mychinesestory.com.
If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Minimum age
You must be of legal age to take out a subscription or buy stories. Minors need the permission of their parents or guardians.