Privacy policy
XiaoZhuJian makes Mandarin flashcards: you give it a word, a sentence or a document, and it writes a card with a sentence, pinyin, a translation and spoken audio, then schedules the card for review. This page says what XiaoZhuJian keeps about you to do that, who else handles it, and how to have it removed. It covers the website at https://xiaozhujian.study, the installed web app, and the iOS app with its Share and Translate extensions.
What XiaoZhuJian keeps
- Your account. The email address you sign up with, and, when you sign in with Google or Apple, the name and address that provider sends. Sign-in itself is handled by Firebase Authentication (Google); XiaoZhuJian never sees your password.
- What you make. The words and sentences you type, the text you share from other apps, the documents you import, and every card, note and stack made from them, with the settings they were made with (level, style, voice, which Chinese). Each card's audio is stored as a file.
- Your settings and progress. Your preferences, your review history and schedule, and counts of how many cards you have made today and this month, which is how your plan's allowance is applied.
- Your subscription. Whether you are on Basic, Premium or Max, and the identifier Stripe gives your customer record. Payment details are entered on Stripe's own pages; XiaoZhuJian never receives or stores a card number.
- Feedback. The thumbs, reasons and comments you choose to send about a card or about the app.
- Diagnostics. When something breaks, an error report goes to Sentry with the request's id and the page's state, not your address or your text. The browser also sends a handful of page-speed measurements, kept for 90 days.
Who processes it
XiaoZhuJian runs on servers rented from Render, with its database there. Beyond that, the following services receive data in order to do their one job. None of them is given your data for advertising, and XiaoZhuJian shows no ads and uses no advertising or tracking SDKs, on the web or in the app.
| Service | What it receives | Why |
|---|---|---|
| Firebase Authentication (Google) | Your email address and sign-in credential | Signing you in |
| Alibaba Cloud Model Studio (Qwen), Singapore region | The text a card is made from, and your level and style settings | Writing the card's sentence, speaking it, and transcribing the audio to time its words |
| OpenAI | The text a card is made from when your account has chosen an OpenAI model, and the text of documents you import | Writing cards, and reading imported documents |
| Anthropic | Your recent review results and your cards, with an opaque learner id and no name or address, only for accounts enrolled in the nightly tutor | Proposing what to study next |
| Stripe | Your email address, and the payment details you enter on Stripe's pages | Subscriptions and payment |
| Cloudflare R2 | The audio files of your cards | Storing and serving audio |
| Resend | Your email address and the message | Sending account emails: confirming your address, the welcome, a lapsed subscription, the weekly review summary you can turn off |
| Sentry | Error reports, without your address or your text | Finding and fixing crashes |
Only one email is promotional, the reminder about an unfinished checkout, and it carries an unsubscribe link. Receipts and messages about your subscription are sent regardless, because they are about money you are being charged.
The iOS app
The iOS app shows the same website inside an app, so everything above applies. Its two extensions, Share and Translate, send the text you selected to XiaoZhuJian's server, signed in as you, to make a card; nothing is made until you tap Make card. The quick translation shown above the card is produced on your device by Apple's Translation framework and is not sent to XiaoZhuJian. The extensions read your signed-in session from a keychain shared with the app, and keep nothing else.
Cookies and storage on your device
XiaoZhuJian sets no advertising cookies. Two first-party cookies exist: one that lets a newly installed home-screen app stay signed in, and one that lets the app's icon show how many cards are due. Your browser also keeps preferences such as your theme and which page you were on. Signing out clears what names your account.
How long, and how to delete
Your cards, notes and stacks are kept until you delete them, which you can do one by one or in bulk from the app; the audio of a deleted card is removed from storage shortly after. To close your account and have everything about you removed, write to hello@xiaozhujian.study from the address you signed up with. Billing records are kept as long as the law requires.
Children
XiaoZhuJian is not directed at children under 13, and does not knowingly keep data about them. If you believe a child has made an account, write to hello@xiaozhujian.study and it will be removed.
Changes
When this page changes in a way that matters, the date at the top moves and signed-in users are told in the app. Questions go to hello@xiaozhujian.study.