Skip to content
文人天下 logo文人天下
Donate ♥Log inSign up

Privacy Policy

Last updated: 24 May 2026

文人天下 (“we”, “our”, “us”) is operated by an individual based in Australia. We are committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and, where applicable, the EU General Data Protection Regulation (GDPR) and the UK GDPR.

This policy explains what data we collect, why we collect it, who we share it with, and the rights you have over your data.

1. Who We Are

文人天下 is an individual-operated Mandarin Chinese learning platform. The operator’s contact email is rightspot.net@gmail.com. For GDPR purposes, the operator is the data controller.

2. Minimum Age

Account holders must be aged 18 or over. Parents and guardians may create and manage an account on behalf of a child of any age. By registering, the account holder confirms they are at least 18 years old and, where the account is used by a child, that they have parental or guardian authority to agree to these terms on the child’s behalf.

We do not knowingly collect personal data directly from children. All data is collected from and managed by the adult account holder. If we become aware that an account was registered by someone under 18 without parental oversight, we will close the account and delete the associated data promptly.

3. Data We Collect

When you create an account we collect:

  • First name, last name, and display name
  • Email address
  • Date of birth, gender, nationality, and city
  • Occupation and purpose of learning (optional)
  • Marketing consent preference

As you use the platform we also store your learning progress (character bank level, practice history, game scores, favourite content, review-later list) and login activity (login count, last login date).

If you subscribe or donate, Stripe collects your payment card details directly. We never see or store raw card numbers. Stripe shares with us a customer ID, subscription ID, and payment status.

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

  • Contract performance — to operate your account and deliver the service you have subscribed to.
  • Legitimate interests — to detect and prevent abuse, maintain platform security, and improve the service.
  • Consent — to send marketing emails (you may withdraw consent at any time).
  • Legal obligation — to comply with applicable laws and respond to lawful requests.

5. How We Use Your Data

  • To create and manage your account
  • To track and display your learning progress
  • To process your subscription payment via Stripe
  • To send learning-related emails if you have given marketing consent
  • To detect and prevent abuse of the platform
  • To comply with legal obligations

We do not sell your personal data to third parties.

6. Third-Party Data Processors

We use the following processors to operate the platform:

  • Firebase Authentication & Google Firestore (Google LLC, USA) — secure sign-in and cloud database. Data may be stored on servers outside your country. Google LLC participates in the EU–US Data Privacy Framework.
  • Stripe (Stripe, Inc., USA) — payment processing for subscriptions and donations. Stripe is a PCI-DSS-certified payment processor and acts as a data controller for payment card data. See stripe.com/privacy.
  • Vercel (Vercel Inc., USA) — web hosting and serverless functions. Request logs may be retained for a short period for debugging.
  • Google Gemini — AI-assisted content generation (admin tools only). No personal data belonging to members is sent to this service.

Where processors are located outside the EEA or UK, transfers are protected by Standard Contractual Clauses or an adequacy decision.

7. Cookies

We use only technically necessary cookies. We do not use advertising or tracking cookies. The cookies we set include:

  • Session / authentication cookies set by Firebase Authentication to keep you logged in.
  • Stripe session cookies set during the checkout flow to process your payment securely.

We store your cookie consent choice in your browser’s local storage (not a cookie itself). No cookie analytics or third-party trackers are loaded.

8. Subscription Payments & Refunds

Subscriptions are billed monthly at AUD $13/month after a 7-day free trial. You may cancel at any time from your profile › Membership page. Cancellation takes effect at the end of the current billing period — you retain access until then.

Under the Australian Consumer Law (ACL), you may be entitled to a refund for any unused future subscription period if you cancel in circumstances that give rise to a consumer guarantee claim. Refunds are not generally available for the current billing period already in use. If you believe you are entitled to a refund, please contact us at rightspot.net@gmail.com and we will assess your request on a case-by-case basis.

9. Data Retention

Your data is retained for as long as your account is active. If you close your account, it is soft-deleted and permanently removed — including all Firestore records and your authentication credentials — after a 90-day grace period. You may reactivate your account at any time within this window.

On the day of permanent deletion you will receive a final confirmation email. Stripe retains billing records for the period required by law, independently of our deletion.

10. Newsletter & Marketing Emails

We only send marketing emails to users who gave explicit consent during registration or later opted in. You may withdraw consent at any time via the unsubscribe link in any email or from your profile settings. Withdrawal takes effect immediately.

11. Your Rights

Depending on your location, you have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Portability— download a machine-readable copy of the data you provided to us (your profile, favourites, review-later list, and game scores). This is available from your profile › Membership page. Platform content (characters, conversations, lessons) is our intellectual property and is not included in portability exports.
  • Erasure (“right to be forgotten”) — close your account and your data will be permanently deleted after 90 days.
  • Restriction & objection — contact us to restrict processing or object to processing based on legitimate interests.
  • Withdraw consent — for marketing emails, withdraw at any time without affecting the lawfulness of prior processing.
  • Complaint — if you are in the EU/UK you have the right to lodge a complaint with your local data protection authority.

To exercise any right, email us at rightspot.net@gmail.com. We will respond within 30 days.

12. Changes to This Policy

We may update this policy from time to time. We will notify registered members by email of any material changes. Continued use of the platform after the effective date of changes constitutes acceptance of the updated policy.

13. Contact

Questions or concerns? Email us at rightspot.net@gmail.com.