Hanzii
- Your data trains their AI only if you opt in.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- Staff may review your content; the policy does not describe an opt-out.
Hanzii collects profiles, speech, contacts hashes, and session replays, shares AI audio with OpenAI, and runs third-party ads.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, profile posts, learning stats, speech, contacts hashes, device IDs, IP, and session replays.
Read the exact line
Privacy policy
“When you use the Service, we may generate data about your use of the Service, which may include your browser and device data, log data, device ID, and IP address.”
Training
They personalize learning, send speech to AI vendors, improve the product, and run personalized ads.
Read the exact line
Privacy policy
“Your audio and speech data may be sent to third-party AI service providers including OpenAI for speech recognition and pronunciation evaluation.”
Sharing
Public profiles, AI vendors, ads networks, FullStory, and other service providers can see data.
Read the exact line
Privacy policy
“By default, your Profile is public, and visible to other Hanzii users and anyone else on the Internet.”
Kept
They generally keep personal information until you delete your account, and may keep some longer.
Read the exact line
Privacy policy
“EUP will generally retain your personal information until your account is deleted.”
Controls
You can privatize your profile, opt out of AI sharing, ads, FullStory, and delete your account.
Read the exact line
Privacy policy
“You may withdraw this consent at any time in Settings > Privacy > AI Data Sharing, though doing so will disable AI-powered features.”
Fine print
Material policy changes get a 7-day site notice; the documents do not cover suing, refunds, or account bans.
Read the exact line
Privacy policy
“If we do this and the changes are material, we will post a notice that we have made changes to this Privacy Policy on the Website for at least seven (7) days before the changes are made”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn off AI data sharing
Settings > Privacy > AI Data Sharing
Opt out of personalized advertising
Your settings (and device ad ID settings)
Set your Profile to private
Your settings
Delete your account or email privacy requests
Instructions in the Service, or [email protected]
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If you use speaking practice, your voice can leave Hanzii and go to OpenAI and similar companies.
Read the exact line
Privacy policy
“Your audio and speech data may be sent to third-party AI service providers including OpenAI for speech recognition and pronunciation evaluation.”
For example, a pronunciation drill you record could be processed on OpenAI’s systems.
Ad companies can collect how you use the app so they can target ads.
Read the exact line
Privacy policy
“To provide personalized advertising, we work with a variety of third-party advertising networks, marketing analytics service providers, and website analysis firms, such as Google, Facebook, Oath, and Unity.”
For example, your lesson activity could help Facebook decide which ads to show you elsewhere.
Unless you change settings, your name, bio, picture, and learning stats can be seen by anyone, including scrapers.
Read the exact line
Privacy policy
“By default, your Profile is public, and visible to other Hanzii users and anyone else on the Internet.”
For example, a stranger could search your username and see your achievements without an account.
A third party records a replay of your clicks, typing, and pages, though they say they skip some identity fields.
Read the exact line
Privacy policy
“FullStory captures and analyzes your activity and provides us with data and a video session replay of your activity to help us make the Hanzii experience better.”
For example, someone at Hanzii could watch a replay of you tapping through a quiz.
Signing in with Google or Facebook can hand over more than email, including contacts.
Read the exact line
Privacy policy
“If you register for Hanzii using a social login, EUP may receive information about you from your social login provider, including your email address and contacts.”
For example, Facebook login might send a list of contacts to Hanzii.
People or outside moderation tools can read what you post on profiles and comments.
Read the exact line
Privacy policy
“EUP may scan or review any User-Generated Content, or share your User-Generated Content with a third-party content moderation service provider, to ensure compliance with our Terms and Conditions of Service.”
For example, a bio you write could be sent to a moderation vendor.
Your voice can be used to improve Hanzii unless you turn that off in settings.
Read the exact line
Privacy policy
“EUP may also collect and analyze your speech to help us understand the effectiveness of our lessons and to improve the product.”
For example, a speaking exercise could be analyzed to tweak future lessons.
AI sharing with OpenAI starts only after they ask you, and you can later withdraw it.
Read the exact line
Privacy policy
“Before using AI features for the first time, Hanzii will ask for your permission to share your data with these providers as described above.”
For example, the first time you tap Speaking Practice they should prompt you to allow sharing.
They say they do not sell data for cash, but ad and analytics sharing might still count as a sale you can opt out of.
Read the exact line
Privacy policy
“We do not sell your personal information for monetary gain. However, certain data sharing activities, such as with service providers for advertising or analytics, may be classified as a “sale” under some laws.”
For example, a California user could use the sale opt-out if ads partners get their usage data.
Deleting the account is the main way to stop them keeping your personal data, though they may keep some longer.
Read the exact line
Privacy policy
“EUP will generally retain your personal information until your account is deleted.”
For example, after you delete the account they might still keep records for a legal fight.
Words to know
Legal words from the lines above, in plain English.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- consent
- Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- human review
- Company staff or contractors may read your messages or content, usually to check for rule breaking. For example, a flagged private chat with an AI can be read by a person at the company.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
How we got here · grade D · score 39/100 · 15 of 15 policy answers backed by a verified quote · 5 not stated
What does the app collect beyond what it needs to work?
They collect account details, public profiles, contacts via social login or hashed contact sync, speech, IP, device IDs, and FullStory session replays—more than needed to look up words.
Does it record your voice, face or body, and what happens to that?
Speaking features send your audio to third-party AI providers including OpenAI, and they may also analyze speech to improve the product unless you opt out.
Are your chats and uploads used to train AI models, and is that off by default?
They say they ask permission before first use of AI features that share data with OpenAI; you can withdraw in Settings, which turns those features off. Speech for product improvement is a separate settings choice.
Can employees or contractors read your conversations, and when?
They may scan or review user-generated content or send it to a third-party moderator, with no opt-out described.
Are you profiled or tracked for advertising?
They work with Google, Facebook, Oath, Unity and others to serve personalized ads based on your use of the service and other sites, with an in-settings opt-out.
Do they sell or share your data, and can you opt out?
They say they do not sell data for money, but ad and analytics sharing may count as a sale under some laws, and they list a right to opt out of sale or sharing.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
They generally keep data until the account is deleted via the service or a privacy email; they may keep some information longer and do not promise a 30- or 90-day wipe.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They keep a learning profile with languages, stats, achievements, and followers; you can make it private but they do not describe viewing or turning off an AI memory.
Do they commit to basic security, and have they leaked data?
Not stated in the documents.
Is there a real age gate, and are teens protected?
They treat under-13 (or local digital-consent age) users differently after registration with a parent email, and add extra limits under 16, but age is what the user provides.
Will they tell you when the rules change, and is the policy specific?
They promise a seven-day website notice for material changes and a last-revised date at the bottom, but this copy has no date and retention details stay general.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 3,776 words at a college level (Flesch reading ease 40.8).
