隐私政策 · Privacy Policy
Draft v1.0 — pending legal review · 草案 v1.0 —— 待法律审核
版本 Version: 1.0 · 生效日期 Effective date: 2026-10-05
1. 我们是谁 · Who we are
YJTKprep（“我们”）由 VERIO（负责人：Md Shahadat Hossen Sadir）运营，是您个人信息的处理者（数据控制者）。联系邮箱：support@yjtkprep.com。
YJTKprep ("we", "us") is operated by VERIO (responsible person: Md Shahadat Hossen Sadir), the controller of your personal data. Contact: support@yjtkprep.com.
本政策适用于 YJTKprep 移动应用、网页应用（app.yjtkprep.com）和网站（yjtkprep.com）。
This policy covers the YJTKprep mobile app, the web app (app.yjtkprep.com) and the website (yjtkprep.com).
2. 我们收集哪些信息 · What we collect
账号信息 · Account data
- 姓名、电子邮箱、学号、国家/地区、头像（可选）。Name, e-mail address, student ID, country, profile photo (optional).
- 您选择的考试（CSCA / HSK）、HSK 目标等级、物理/化学科目。The exams you prepare for (CSCA / HSK), your HSK target level and your physics / chemistry choice.
- 登录密钥：我们只保存其不可逆的哈希值，从不保存或显示明文。Login key: we store only a one-way hash; the plain key is never stored or shown, not even to our staff. 发送登录密钥的邮件在发出后会被清空。The e-mail that delivers your key is emptied as soon as it is sent.
学习与考试数据 · Learning and exam data
- 模拟考试的作答、得分、用时、成绩报告（含 PDF）和学习分析。Your mock-test answers, scores, timing, result reports (including PDFs) and learning analytics.
- 您提交的反馈和支持消息，以及我们的回复。Feedback and support messages you send us, and our replies.
考试行为数据（防作弊）· Exam behaviour data (anti-cheat)
在模拟考试期间，应用会记录以下事件及其时间：查看题目、选择和更改答案、应用切到后台或最小化、切换浏览器标签页、网络变化。服务器据此计算每次考试的风险评分（例如“过快作答”）。这用于保证成绩的公平性和可信度，不用于其他目的。
During a mock test the app records these events with their time: viewing a question, selecting and changing an answer, the app going to the background or being minimised, switching browser tabs, network changes. The server uses them to compute a risk score for each attempt (for example "very fast guessing"). This keeps results fair and trustworthy and is used for nothing else.
我们不会访问您的摄像头、麦克风、通讯录或位置，也不收集设备指纹。We do not access your camera, microphone, contacts or location, and we do not collect a device fingerprint.
技术数据 · Technical data
- 已登录设备的类型（由浏览器/应用标识得出，例如“Chrome · Windows”），用于显示和管理您的登录会话。The type of each signed-in device (derived from the browser / app identifier, e.g. "Chrome · Windows"), to show and manage your sessions.
- IP 地址：仅出现在服务器日志中（保留 30 天），以及工作人员账号的安全记录中。IP address: only in server logs (kept 30 days) and in the security records of staff accounts.
- 推送通知令牌（仅安装版应用，用于“新版本可用”通知）。Push-notification token (installed app only, for "update available" notices).
AI 助手 · AI assistant
如果您使用应用内的 AI 助手，您输入的问题和该对话的上下文会通过我们的服务器发送给 AI 服务提供商以生成回答。我们不会把您的姓名、邮箱或学号发送给他们。请不要在对话中输入个人敏感信息。AI 回答可能有误。
If you use the in-app AI assistant, what you type and the context of that conversation are sent through our server to an AI provider to produce an answer. We do not send your name, e-mail or student ID to them. Please do not type sensitive personal information into the chat. AI answers can be wrong.
我们不收集 · We do not collect
- 银行卡号或支付密码（目前所有功能免费；若将来推出付费功能，会另行说明）。Card numbers or payment passwords (all features are currently free; any future paid feature will be explained separately).
3. 我们为什么使用这些信息 · Why we use it
- 提供服务：创建和登录账号、模拟考试、评分、成绩报告、学习功能。To provide the service: account and sign-in, mock tests, scoring, result reports, learning features. （履行与您的合同 · contract）
- 防作弊与公平：处理考试行为数据、复核可疑成绩。Anti-cheat and fairness: processing exam behaviour data, reviewing suspicious results. （正当利益 · legitimate interests）
- 安全：防止滥用、保护账号、记录工作人员操作。Security: preventing abuse, protecting accounts, logging staff actions. （正当利益 · legitimate interests）
- 发送服务邮件：登录密钥、成绩通知、账号变更提醒、支持回复。Service e-mails: login key, result notices, account-change notices, support replies. （合同 · contract）
- 跨境存储与处理：见第 5 节，需要您单独同意。Cross-border storage and processing: see section 5; needs your separate consent. （同意 · consent）
我们不出售您的个人信息，不用于广告，也不进行对您产生法律效力的自动化决策。风险评分只会触发人工复核。
We do not sell your personal data, use it for advertising, or make automated decisions with legal effects on you. A risk score only triggers a review by a person.
4. 谁能看到您的信息 · Who can see your data
我们的工作人员 · Our staff
经授权的支持人员可以查看您的账号资料、考试记录和单次考试的防作弊详情，以便回答您的问题和处理问题（例如更正邮箱、重新发送成绩邮件、退出所有设备）。所有工作人员账号都需要两步验证；在列表中邮箱会被部分隐藏；每次查看您的详细资料和每次操作都会记录操作人、时间和原因。支持人员不能删除账号，也不能看到您的登录密钥。删除账号、重置考试记录等操作只能由管理员执行。
Authorised support staff can see your profile, exam history and the anti-cheat details of a single attempt, so they can answer your questions and fix problems (for example correct your e-mail, resend a result e-mail, sign you out of all devices). Every staff account uses two-factor authentication; e-mail addresses are partly hidden in lists; every view of your details and every action is logged with who, when and why. Support staff cannot delete accounts and can never see your login key. Deleting an account or resetting an exam attempt can only be done by an administrator.
服务提供商（代表我们处理数据）· Service providers (processing on our behalf)
- Amazon Web Services：服务器、数据库、文件存储（头像、成绩 PDF）、内容分发和邮件（Amazon SES）。Servers, database, file storage (photos, result PDFs), content delivery and e-mail (Amazon SES).
- 邮件发送 · E-mail delivery：Resend；Google（Gmail SMTP，备用通道 · fallback）；Amazon SES（备用通道 · fallback）。
- AI 服务（仅 AI 助手对话内容）· AI providers (AI assistant conversations only)：Hugging Face, Google (Gemini), Cerebras, OpenRouter（OpenRouter 会将请求转给其合作的模型提供商 · forwards requests to its model providers）。
- 推送通知 · Push notifications：Expo（经由 Google / Apple 推送服务 · via Google / Apple push services）。
- 支持邮箱 · Support mailbox：ImprovMX（邮件转发 · e-mail forwarding）和 Google（Gmail）— 您发送到 support@yjtkprep.com 的邮件及我们的回复。Messages you send to support@yjtkprep.com and our replies.
除法律要求外，我们不会向其他任何人披露您的个人信息。We do not disclose your personal data to anyone else unless the law requires it.
5. 跨境存储与处理 · Cross-border storage and processing
我们的服务器、数据库和文件存储位于新加坡（亚马逊云 AWS，ap-southeast-1 区域）。部分服务提供商（邮件、AI、推送）可能在其他国家/地区（包括美国）处理数据；发送到 support@yjtkprep.com 的邮件经 ImprovMX 转发并保存在 Google（Gmail）。因此您的信息可能被传输到您所在国家/地区以外。我们只把完成相应服务所需的最少信息交给提供商，并要求他们保护这些信息。注册时我们会单独请求您对跨境存储与处理的同意；不同意则无法使用本服务。
Our servers, database and file storage are located in Singapore (Amazon Web Services, region ap-southeast-1). Some service providers (e-mail, AI, push) may process data in other countries, including the United States; e-mails you send to support@yjtkprep.com are forwarded by ImprovMX and stored in Google (Gmail). Your data may therefore be transferred outside your country. We give providers only what they need for their part of the service and require them to protect it. At registration we ask for your separate consent to cross-border storage and processing; without it the service cannot be used.
6. 保存期限 · How long we keep it
- 账号信息、学习与考试数据（包括考试行为数据和风险评分）：保存到您删除账号为止。我们不会因为账号长期不活跃而自动删除它。Account data, learning and exam data (including exam behaviour data and risk scores): until you delete your account. We do not delete inactive accounts automatically.
- 删除账号后：您的账号、所有考试记录、成绩报告和 PDF、头像和反馈会立即永久删除。After you delete your account: your account, all exam records, result reports and PDFs, photo and feedback are deleted permanently right away.
- 已发送邮件的记录（收件人、主题、时间）：30 天；邮件正文在发送后即被清空。Records of sent e-mails (recipient, subject, time): 30 days; the e-mail body is emptied once it is sent.
- 服务器日志（含 IP 地址）：30 天。Server logs (including IP addresses): 30 days.
- 工作人员操作记录（审计日志）：用于安全和问责；超过 365 天的记录会删除其中的姓名、邮箱、学号和 IP 地址。Staff action records (audit log): for security and accountability; entries older than 365 days have names, e-mail addresses, student IDs and IP addresses removed.
- 备份：数据库自动备份保留 7 天，之后自动删除；已删除的账号会在 7 天内从备份中消失。Backups: automatic database backups are kept for 7 days and then deleted automatically, so a deleted account disappears from backups within 7 days.
7. 您的权利 · Your rights
- 查看与更正：在应用中查看您的资料；需要更正姓名、邮箱或学号时请联系我们。Access and correction: see your data in the app; contact us to correct your name, e-mail or student ID.
- 删除：随时在 设置 → 删除账号 中永久删除您的账号和全部数据。Deletion: delete your account and all data at any time in Settings → Delete account.
- 获取副本：发邮件至 support@yjtkprep.com 索取您的数据副本，我们会在 30 天内回复。Copy of your data: e-mail support@yjtkprep.com and we will reply within 30 days.
- 撤回同意：本服务的运行依赖第 5 节的跨境处理，因此撤回同意意味着删除账号（设置 → 撤回同意）。Withdraw consent: the service depends on the cross-border processing in section 5, so withdrawing consent means deleting your account (Settings → Withdraw consent).
- 投诉：您可以向我们或您所在地的数据保护机构投诉。Complaints: you can complain to us or to the data protection authority where you live.
8. 安全 · Security
我们使用加密连接（HTTPS）、登录密钥哈希、刷新令牌轮换、工作人员两步验证、最小权限访问和操作审计来保护您的信息。没有任何系统是绝对安全的；如发生影响您的安全事件，我们会依法通知您。
We protect your data with encrypted connections (HTTPS), hashed login keys, rotating sign-in tokens, two-factor authentication for staff, least-privilege access and audit logging. No system is perfectly secure; if an incident affects you, we will tell you as the law requires.
9. 未成年人 · Children
本服务面向准备留学考试的学生，您必须年满 16 岁才能使用。未满 18 岁的用户请在父母或监护人知情的情况下使用本服务。
The service is for students preparing for study-abroad exams. You must be at least 16 to use it. If you are under 18, use the service with the knowledge of a parent or guardian.
10. 政策变更 · Changes to this policy
如果我们对本政策作出重要更改，会更新版本号；下次使用应用时您需要阅读并重新同意。
If we make important changes, we update the version number and you will be asked to read and accept the new version the next time you use the app.
11. 联系我们 · Contact
VERIO（负责人 Md Shahadat Hossen Sadir）· support@yjtkprep.com