🔒 隐私政策 Privacy Policy

一、我们收集哪些信息 1. What We Collect

注册时收集：家长/学员邮箱、登录密码（仅以加密哈希形式存储）、可选的昵称、起始级别。使用过程中产生：课程观看记录、练习与作业作答记录、错题记录、提问与回复记录。此外，我们根据网络出口 IP 判定你所在的国家/地区，仅记录国家级两位代码（如 US、SG、MY），不记录 IP 原文、不进行精确定位，用于教学安排、地区统计与合规。我们不收集支付卡号——付款由支付服务商处理；未成年人不另行单独收集个人信息。

At registration: guardian/learner email, password (stored only as a cryptographic hash), optional nickname, and starting level. During use: lesson viewing records, practice and homework answers, mistake-log data, and Q&A messages. In addition, we derive your country/region from your network IP and store only the country-level two-letter code (e.g. US, SG, MY) — we never store the raw IP address or perform precise geolocation — for teaching arrangements, regional statistics, and compliance. We do not collect card numbers — payments are handled by our payment provider. We do not collect personal information from minors separately.

二、我们如何使用 2. How We Use It

仅用于：提供课程与练习功能、生成学习进度报告、人工答疑与作业批改、发送账号验证与学习提醒邮件（可随时退订）、处理订阅与退款。我们不会将你的个人信息出售给任何第三方，也不用于跨站广告追踪。

We use your data solely to operate courses and practice features, generate progress reports, provide teacher grading and Q&A, send verification and learning-reminder emails (opt-out anytime), and handle subscriptions and refunds. We never sell personal information or use it for cross-site ad tracking.

三、第三方服务与数据共享 3. Third-Party Processors

为提供服务，我们使用以下受托处理方：Cloudflare（网站托管与安全，全球）、Supabase（数据与文件存储，美国/新加坡区域）、Stripe（支付处理，仅收款所需信息）、Resend（邮件发送，仅邮箱地址）。上述各方仅在履行服务所必需的范围内处理数据，并受其自身隐私与安全义务约束。除此之外，除非法律要求或经你明确同意，我们不会向外提供你的个人信息。

We rely on: Cloudflare (hosting & security), Supabase (data and file storage), Stripe (payment processing), and Resend (email delivery). Each processes data only as necessary to deliver the service under its own privacy and security obligations. We disclose personal information to no one else except as required by law or with your explicit consent. For California residents (CCPA/CPRA): we do not "sell" or "share" personal information as those terms are defined.

四、未成年人信息 4. Children's Data

本平台由家长（监护人）完成注册与付费，学员个人信息在监护人授权下、仅为提供课程与学习报告所必需地处理。未满 14 周岁学员的信息按敏感信息从严处理；我们不会向未成年人推送商业营销信息。如你是监护人并希望查阅、更正或删除学员信息，发邮件即可。

Registration and payment are completed by a parent or guardian; a learner's information is processed only with guardian authorization and only as necessary for courses and progress reports. Data of learners under 14 is treated as sensitive with heightened care. We never send commercial marketing to minors.

五、保留期限与你的权利 5. Retention & Your Rights

个人信息在账号存续期间保留，账号注销后于合理备份期内删除或匿名化。你可随时通过官方邮箱（support@zmath.academy）行使以下权利：查阅、更正、删除个人信息；导出数据副本；撤回同意；注销账号。我们会在 15 个工作日内响应。中国大陆用户依《个人信息保护法》、加州居民依 CCPA/CPRA、新加坡用户依 PDPA、加拿大用户依 PIPEDA 享有相应法定权利。

Data is retained while the account is active and deleted or anonymized within a reasonable backup window after closure. You may request access, correction, deletion, a copy of your data, withdrawal of consent, or account closure at any time via support@zmath.academy; we respond within 15 business days.

六、数据安全 6. Security

传输全程 HTTPS 加密；密码以单向哈希存储；数据库启用行级访问控制；管理后台需双重验证。如发生影响你个人信息安全的事件，我们将依法及时通知你并采取补救措施。

All traffic is encrypted (HTTPS); passwords are stored as one-way hashes; the database enforces row-level access control; administrative access is protected by two-factor authentication. In the event of a breach affecting your personal information, we will notify you and take remedial measures as required by law.