Privacy Policy

DuōMiàn 多面 — Last updated: 24 July 2026

DuōMiàn 多面 ("the App") is a Chinese vocabulary learning product developed by Álvaro García Barbón ("we", "us"). This policy explains what data we collect, why, and your rights under the EU General Data Protection Regulation (GDPR).

1. Data Controller

Álvaro García Barbón
Contact: hello@alvaroga.com

2. Data We Collect

DataSourcePurposeLegal Basis
Display name, email, profile photo URL Google Sign-In (optional) Account identification & cloud save sync Consent (you choose to sign in)
Learning progress (SRS data, settings, study history) Generated during use Cloud save backup & cross-device sync Performance of a contract / service delivery
Subscription and entitlement state (plan, status, optional Stripe customer/subscription IDs; license grants) Purchase, trial, or admin license assignment Manage access, trials, invoices, and company seat grants Performance of a contract / legal obligation
Messages and prompts you send to AI features (Tea House, Sentence Bloom, micro-coach, related TTS) You, when you use those features Generate replies, expansions, coaching tips, and speech audio Performance of a contract / legitimate interest in running the feature you requested
Email preferences and consent records User selections and confirmation events Service emails, marketing consent, GDPR compliance evidence Consent (marketing) / performance of a contract (service emails)
Feedback messages User-submitted via in-app form Improve the App Consent (you choose to send)

3. Data We Do NOT Collect

4. Guest Mode

You can use core study features without signing in. In guest mode, progress stays in your browser's localStorage. AI features that call our servers require a signed-in account when authentication is enabled in production, so those requests are tied to an account rather than an anonymous guest.

5. Third-Party Processors

We use processors only to run the App. We do not sell your personal data. Processors that may receive data when you use the relevant feature:

AI features only run when you open them. Core spaced-repetition study, Library, and pre-recorded audio do not send your study content to DeepSeek or xAI.

We configure service emails separately from marketing emails. Marketing uses double opt-in and can be withdrawn at any time.

6. Data Retention

7. Your Rights (GDPR)

As an EU resident, you have the right to access, rectification, erasure, portability, restriction/objection, and withdrawal of consent (including marketing). To exercise these rights, use in-app controls where available or email hello@alvaroga.com. We respond within 30 days.

8. Data Deletion

9. Email Communications

Declining marketing does not disable service emails required to run the App or your subscription/trial.

10. Children's Privacy

The App does not knowingly collect data from children under 16. If you believe a child has provided personal data, contact us and we will delete it promptly.

11. Security

Data in transit uses HTTPS/TLS. Cloud data is stored on infrastructure with industry-standard controls. No method of transmission or storage is 100% secure.

12. International Transfers

Some processors may process data outside the European Economic Area. Where they do, we rely on their contractual safeguards (such as DPAs and standard contractual clauses where applicable).

13. Company / bulk licenses

If your employer or another organization purchases or is granted Pro seats, we may process the email addresses they provide solely to assign and manage those licenses. Employees use the same App under this policy.

14. Changes

We may update this policy. The "Last updated" date at the top reflects the latest revision. Material changes may also be noted in the App.

15. Contact

Privacy and GDPR requests: hello@alvaroga.com

← Back to DuōMiàn