Information we collect
When you create an account, we receive your email address, authentication details, chosen reading level, target-language preference where available, reading preferences, and account settings. If you use the website while signed in, we may record reading history so your account can show your progress.
When you subscribe, we store subscription status and provider references needed to give you access and help with billing. Stripe handles payment-card details; we do not store your full card number.
For daily email, we record delivery level, consent and unsubscribe status, and operational events such as delivery, bounce, complaint, or suppression. If you contact us, we receive the information you include in that message.
If you use the public withdrawal function, we store your name, receipt email, subscription or contract reference, optional details, the exact withdrawal confirmation, the received time, and receipt delivery state. To limit automated abuse, we also store an HMAC-keyed, one-way fingerprint derived from the network address or signed-in account identifier. The raw network address is not stored in the withdrawal-request ledger.
How we use it
We use this information to:
- create and secure your account;
- manage paid access and your selected delivery level;
- send the edition you requested and honor email preferences;
- show reading history and saved preferences;
- prevent abuse, diagnose failures, and support customers; and
- meet accounting, security, and legal obligations.
We do not sell personal information. We do not use subscriber data to train our article-generation system.
Services that process data for us
We use Supabase for accounts and the product database, Stripe for subscriptions and payment processing, Resend for account email, daily lessons, withdrawal receipts, and subscription confirmations, and Netlify to host the application. Those providers process information under their own privacy and security terms.
OpenAI helps generate draft educational articles from editorial fact packets. Subscriber account, payment, and email-delivery data is not included in those generation requests.
Cookies and local settings
We use essential authentication cookies to keep signed-in sessions working. Reader controls such as pinyin and word-spacing choices may also be saved on your device. We do not currently run advertising trackers.
Retention and security
We keep account and subscription records while needed to provide the service, resolve disputes, maintain security, and meet accounting or legal obligations. Delivery records are kept only as long as they remain operationally or legally useful. Unsubscribing does not remove the minimum suppression record needed to respect that choice.
We use access controls, signed provider webhooks, and restricted administrative tools to protect data. No online service can promise perfect security.
When an applicable, verified erasure request is completed, we can redact the personal-data payload from a closed withdrawal record while retaining the minimum request identifier, handling audit, statuses, and timestamps needed to document what occurred.
Your choices
You can change your delivery level and email preference in settings. Every morning edition also includes an unsubscribe option. You may ask us to access, correct, or delete personal information, subject to records we must keep for legitimate security, accounting, or legal reasons.
To make a privacy request, email support@worldinmandarin.com. Please write from the address on your account so we can verify the request.
Changes and questions
We may update this notice as the service changes. Material changes will be published here with a new date. For other customer questions, visit Support & refunds.