Privacy Policy

This Privacy Policy explains what information the Jiyimobile app and website (together, the “Service”) collect, how it is used, who it is shared with, and the choices you have. Jiyi is a Chinese vocabulary learning app: you build and study word lists, trace characters, practise pronunciation, read AI-generated stories and can optionally share lists with other learners.

Who we are

The Service is operated by Depeur UG (haftungsbeschränkt), Drögenbosteler Str. 5, 27374 Visselhövede, Germany (“we”, “us”), represented by its managing director Jonas Zeschke. We are the data controller for the purposes of the EU/UK General Data Protection Regulation (GDPR). You can reach us at jzeschke@depeur.de.

Registered at the Amtsgericht Walsrode, HRB 212887. VAT ID: DE334231783. Full legal notice: depeur.de/impressum.

Information we collect

• Account & profile. Signing in is optional, but required for publishing lists, syncing and some AI features. When you sign in with Apple or Google, our authentication provider gives us your user identifier and, depending on your choice, your email address and name. If you publish a list, we also store the public username (@handle) you are assigned.
• Learning content. The vocabulary lists, folders, words, study progress and stories you create are stored on your device. They are only sent to our servers if you choose to publish a list or use a feature that requires it.
• Media you provide. Voice recordings (for pronunciation practice), cover images and photos you pick to extract vocabulary. When a feature needs them, these are uploaded to our media storage or sent to a processing provider as described below.
• AI feature inputs. Text, prompts and images you submit to features such as photo-to-vocabulary extraction, explanation generation, story generation and advanced grading are sent to AI model providers to produce that result.
• Voice & pronunciation. When you use pronunciation practice, audio is processed by on-device speech recognition and/or sent to our speech provider to score your pronunciation. We do not use your voice to identify you.
• Purchases. If you buy Jiyi Pro, the purchase is handled by the App Store or Google Play and our subscription provider. We receive your subscription/entitlement status, not your payment card details.
• Diagnostics & analytics. Device and app information, usage events and crash reports, used to keep the app stable and to understand which features are used.
• Session replay (only with your consent).If you opt in, we record how the app’s screens are used (taps, navigation and visible interface content) to find usability problems. Everything you type and every image is masked before recording and never leaves your device readable; recordings are pseudonymous, stored in the EU and deleted automatically after at most 30 days. You can turn this off at any time in the app’s settings.
• Notifications. If you enable reminders, we store a push token so we can deliver them.
• Tracking (iOS). On Apple devices we ask through App Tracking Transparency before using a device identifier for advertising or cross-app measurement. If you decline, we do not use it.

How we use your information

• Provide, personalise and sync the app’s features.
• Generate the AI vocabulary, explanations, stories and grading you request.
• Process pronunciation recordings to give you feedback.
• Operate publishing and let other learners discover shared lists.
• Send reminders you have enabled and important service messages.
• Maintain security, prevent abuse and fix problems.
• Measure and improve the app, and comply with legal obligations.

Our legal bases (GDPR) are: performance of our contract with you (to run the app you ask for), your consent (e.g. notifications, tracking, and microphone/camera/photos access), and our legitimate interests (security and improving the Service).

AI features

Some features generate vocabulary, explanations, stories or scores from your input. The content you provide is sent to our model and speech providers solely to produce that result and is not used by us to identify you. AI output can be inaccurate — please verify important information.

Service providers & sharing

We do not sell your personal data. We share it only with processors that help us run the Service, each handling data only as needed:

• Google Firebase — authentication, push messaging, analytics and crash reporting.
• PostHog (EU cloud, hosted in Frankfurt) — product analytics and, only with your consent, session replay.
• Convex — backend/database for accounts, public lists and entitlements.
• Cloudflare R2 — storage for uploaded audio and images.
• Microsoft Azure — speech (pronunciation assessment and text-to-speech).
• Apple— on iOS, speak-practice audio may be processed by Apple’s speech recognition service when on-device recognition is not available on your device.
• AI model providers (such as Google and OpenRouter) — generating vocabulary, explanations and stories.
• RevenueCat with the Apple App Store and Google Play — subscriptions and payments.
• Apple and Google — Sign in with Apple and Google Sign-In.

We may also disclose information if required by law or to protect our rights and our users.

Public lists

If you publish a list, its title, description, words and your public @handle become visible to other users and can be imported by them. Do not publish anything you want to keep private. You can unpublish a list at any time in the app.

Permissions

The app requests camera, photo library, microphone, speech recognition and notification permissions only for the features that need them. You can grant or revoke each one at any time in your device settings.

Retention & deletion

Content you keep on your device remains until you delete it or remove the app. Account and published data are kept while your account is active. You can delete your account in the app (More → account), which removes your server-side account data and unpublishes your lists, or contact us at jzeschke@depeur.de.

Your rights

Subject to applicable law, you may request access to, correction, deletion, restriction or portability of your personal data, and object to certain processing. Where we rely on consent, you can withdraw it at any time. To exercise these rights, email jzeschke@depeur.de. You also have the right to complain to your local data protection authority.

International transfers

Our providers may process data in countries outside your own, including the United States. Where required, such transfers are protected by appropriate safeguards such as the European Commission’s standard contractual clauses.

Children

The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

Security

We use industry-standard measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, announced in the app.

Contact

Questions about this policy? Email jzeschke@depeur.de.