Privacy Policy

1. Who We Are

Deer Tutor provides English learning, AI tutoring, vocabulary context, grammar explanations, exam drill, writing, speaking, text summary, and related membership services across Web, iOS, and Mac.

Privacy requests can be sent to xmf29202589@gmail.com. General support requests can be sent to xmf29202589@gmail.com.

2. Data We Collect

• Account data: nickname, email, password hash when a password is set, login state, role, language, theme, and security tokens.
• Verification and security data: email codes, password reset tokens, login time, session cookies, CSRF cookies, device context, and basic logs.
• Learning data: study records, questions, answers, accuracy, chat messages, AI feedback, review history, word lists, grammar points, writing submissions, and text summaries.
• Speech and video data: recordings, transcripts, speech features, user-submitted video links, subtitles, term occurrences, video/book materials, and notebooks.
• Membership data: Apple in-app purchase or manual activation products, plans, transaction identifiers, status, purchase/expiry/revocation dates, and validation results.

3. How We Use Data

• Create and protect accounts, restore sessions, prevent abuse, and block unauthorized access.
• Generate learning content, AI explanations, personalized review, speaking/writing feedback, and progress tracking.
• Process membership access, subscription status, payment confirmation, support, and administrator actions.
• Maintain product reliability, diagnose errors, improve learning workflows, and comply with legal obligations.

4. AI and Third-Party Services

To generate explanations, feedback, transcription, speech, or learning materials, we may send necessary content to configured AI, speech, email, payment, hosting, and database providers, such as OpenAI, DeepSeek, Qwen/Tongyi-related services, Apple App Store, email providers, YouTube, Bilibili, or equivalent providers.

We do not sell personal data. Providers may process data only as needed for service delivery, security, compliance, and support.

5. Cookies and Local Storage

The Web product uses login cookies, refresh cookies, CSRF cookies, interface language cookies, and local storage for language and theme preferences. These are used for login, security, and interface preferences, not for sale or cross-site advertising.

6. Retention

Account and learning records are generally kept until the account is deleted, you request deletion, or the service no longer needs them. Transaction, tax, security, and audit records may be retained as required by law, platform rules, and dispute handling.

7. Your Rights

You may request access, correction, export, or deletion by emailing xmf29202589@gmail.com. Include your account email or nickname and the scope of data you want handled. We will verify the request and respond within a reasonable period.

If your location grants additional rights, such as objection, restriction, or withdrawal of consent, we will handle those requests under applicable law.

8. Children

The product is not directed to children under 13. If you believe a child provided personal data without guardian consent, contact us so we can delete the relevant information.

9. International Processing and Security

Data may be processed outside your location depending on our providers and infrastructure. We use reasonable technical and organizational safeguards, but no system can guarantee absolute security.

10. Changes

We may update this policy as the product, law, or providers change. Material changes may be communicated through in-product notices, webpage updates, or other reasonable methods.