HSK AI processes only the information needed to provide learning, account, security and subscription features.
Account identifiers from the Telegram, Google or Apple method you choose; your in-app display name and avatar choice; course progress, XP, streaks, mistakes, learning settings, subscription state, invitations and service diagnostics. Google or Apple can create an account without Telegram.
For the public website, we store daily aggregate counts of visits to the home or download page carrying campaign source labels such as Instagram, TikTok or YouTube. The counts do not include a cookie, visitor ID or account ID, and repeat visits are counted again.
Provider subject identifiers are stored as keyed hashes. A provider may also supply an email address for display and account-security purposes. Email is not used to merge unrelated accounts.
Additional sign-in methods are connected only from an authenticated HSK AI account. Progress and purchases belong to that HSK AI account. Using an unrelated sign-in method does not transfer another account's progress or purchases.
When you submit a manual payment, we process its amount, status and receipt for review. Invitations record the referring account and qualification needed for the existing reward rules. Some approved accounting records are retained after account deletion as described on the deletion page.
Microphone permission is requested only when you use pronunciation or AI Voice. Audio you submit may be sent to HSK AI servers and service providers solely to transcribe, score or answer that voice interaction.
The Android app asks for notification permission only for study reminders. You can turn reminders off in HSK AI settings or revoke permissions in Android settings.
We do not sell personal data. Data may be processed by infrastructure, authentication, analytics or AI service providers only as needed to operate HSK AI, protect the service, or comply with law.
You can disconnect a sign-in method while another remains available, change your app profile, sign out, revoke device permissions, and request deletion of your account and associated data using any linked sign-in method.
Authentication tokens are protected and sensitive provider identifiers are not exposed in public leaderboard data. No system can guarantee absolute security; HSK AI limits access and data exposure by design.
Use the Support item inside HSK AI or the official Telegram bot @darsi_chini_bot.