隱私政策

English

1week8days.com and its English-learning site words.1week8days.com are operated by Hill Head Investment Group, New Zealand. Both sites share one 1week8days account. We collect only the information needed to provide our service.

What we collect

• When you sign in: there is no password. With email sign-in we send a 6-digit code and a sign-in link to your inbox, valid for 30 minutes. With Google sign-in we receive only your verified email address from Google, nothing else. After you sign in, your browser stores a sign-in cookie (sess) valid for 180 days on both 1week8days.com and words.1week8days.com; signing out removes it. To stop abuse of the code emails we briefly record the requesting IP address and delete it after one hour.
• When you study on words.1week8days.com: if you are signed in, your learning record is stored by email address in Cloudflare R2 (private storage, not public): the words and sentences you have learned, your review schedule, scores, streaks, the reminder settings you chose and your time zone. Each answer you give (which sentence, score, time taken) and any content error reports you send are stored in a Cloudflare D1 database to verify scores and sync review cards and check-ins across devices. We use it only to sync your progress across devices, schedule reviews and send reminders you have turned on. If you are not signed in, your progress stays in your own browser and we never receive it.
• When you use AI features (asking the Wizard Bunny, AI explanations, free conversation with AI, building a course from pasted text): what you submit is sent to an AI service for processing; see “AI features and courses you build” below.
• Anonymous learning statistics: the learning site creates a random device ID in your browser and reports how exercises go (which sentence, right or wrong, time taken) and page errors, so we can improve exercises and fix bugs. These statistics are never linked to your account: no email is sent, even when you are signed in. You can turn them off on the “Me” page; after that nothing is recorded or sent.
• When you buy: your email address, the items purchased, amount, payment method, order number and the transaction ID returned by the payment provider.
• When you subscribe to the weekly joke digest: your email address, your choice of Simplified or Traditional Chinese, and when you subscribed. We send a welcome email right away and then one email a week; every email has a one-click unsubscribe link.
• Payment details such as card numbers or payment accounts are handled directly by WeChat Pay, Alipay, Stripe and other providers. We never see or store them.
• When you browse: the site is hosted on Cloudflare, which keeps standard technical logs (such as IP address and browser type). We use your approximate region to choose between YouTube and Bilibili and between Simplified and Traditional Chinese pages.
• Local settings: your browser stores a few small preferences: language (lang), country (cf_country) and your preferred video platform. They are used only to display the site, not for advertising.
• We use no advertising trackers or third-party analytics. Videos load from YouTube or Bilibili only after you press play.

AI features and courses you build

• Google processes it: our AI features use Google's Gemini models (the Gemini API). When you use them, we send Google what is needed for that request: the sentence you are practising, what you typed and where it went wrong, your question to the Bunny, what you write in an AI conversation, and the text you paste to build a course (for uploads and YouTube links, see “Content you upload” below). We do not send your email address, name or account details.
• Google may use this content to improve its models: we use Gemini's free service, and under Google's terms content sent to it may be stored, reviewed by people and used to improve Google's models. So please do not include personal information such as real names, phone numbers, addresses, ID numbers, health or financial details in your questions, conversations or course text.
• What we keep: how many times each person used AI per day and month (to apply free limits). For AI conversations we keep only how many turns you took, how many corrections were made and which lesson sentences you used — not the conversation text, which stays in your page and is gone when you close it. To check AI quality we keep a small random sample of exchanges each day (about 30), plus any you mark as wrong; samples carry no email address or account number and are deleted automatically after 30 days.
• Courses you build are visible only to you: they are stored in our database and shown only to you when signed in. They are not public, not shown to other users and not used for our own courses (except courses built from a YouTube link, whose sentences are shared per video — see “Content you upload”). Our staff look at one only to handle a copyright complaint or a problem you report. You can delete a course at any time, which removes it from the database.
• Copyright takedown: when building a course you confirm you have the right to use the text. If you believe a course infringes your copyright, email kefu@1week8days.com with the work concerned, the basis of your rights and how to reach you. Once verified we take the course down: its owner sees it marked “Taken down”, it can no longer be practised, edited or sent to AI, and we notify the owner, who may write to us if they believe this was a mistake.
• AI can be wrong: the Bunny's explanations, corrections in conversations, and the chunks and meanings AI prepares for your courses are generated by a language model and may contain mistakes. Treat them as a guide, and tap “This is wrong” to tell us.
• Free limits: AI features have per-person daily and monthly limits and a site-wide daily limit; when they run out, AI is unavailable until the next day, while everything else keeps working.

Content you upload

• Subtitles, audio, music, video and pictures you upload are used only to create practice for you and by default are visible only to you. We do not publish them, list them or give them to anyone else.
• Before uploading, make sure you have the right to use the material — for example, you recorded or bought it, or the creator allows personal study use.
• Video stays on your device and is not uploaded to our servers.
• Audio: to turn speech into text, audio is sent to Cloudflare's speech recognition service (Workers AI) and to no other provider.
• Pictures and text: for picture words and photo-to-text, pictures are sent to Google's Gemini for recognition; transcribed text and text you paste are also sent to Gemini for processing (splitting and translation). Google may use this content to improve its models (see above), so please do not upload pictures or text containing personal information.
• YouTube links: when you build a course from a YouTube link, the link is sent to Google Gemini to read the captions; the sentences read from the same public video are shared by everyone who builds a course from it, while your own courses and learning record stay visible only to you.
• Infringement: if you believe uploaded content infringes your rights, email kefu@1week8days.com. Once verified we will remove it; accounts that repeatedly infringe will lose upload features.
• We may remove unlawful content. When you delete your account, the files you uploaded are deleted with it.

Speaking practice (shadowing, headphone mode)

• Your voice is not uploaded to us: shadowing and headphone mode use your browser's built-in speech recognition, which is handled by the browser maker's speech service (such as Google, Apple or Microsoft) and may be sent to their servers under their own privacy terms; where a browser or phone can recognise speech on the device, we use that first. We never receive your recording, and the recognised text is compared only in your page and is not uploaded. If your browser has no speech recognition, you can listen and judge yourself, and your voice is not sent anywhere.
• Read-aloud: sentences without a human recording (such as courses you build) are read by your browser's built-in voice; some browsers (such as Chrome on desktop) use online voices, in which case the sentence text is sent to the browser maker.
• “Play back what I said”: the sentence you just recorded is kept only in your page's memory and is gone when you close the page; it is never uploaded or saved.
• Anonymous statistics: we record anonymous statistics about speaking practice (for example, what share of words were recognised and whether errors occurred). They contain no audio or text, are not linked to your account, and can be turned off on the “Me” page.

How we use it

To let you sign in and share your bookshelf and learning progress across both sites, to keep your learning record, schedule reviews and send the reminders you have turned on, to process orders and send download links and receipts, to provide podcast membership, to send subscribers one email a week with that week's episodes (every email has an unsubscribe link), to handle refunds and support requests, and to prevent abuse (for example, download limits). We do not sell your personal information or send you marketing email unless you subscribe separately.

Who processes it

Cloudflare (hosting; storage of orders, accounts, learning records, files you upload and anonymous statistics; speech-to-text through Workers AI), Google (to confirm your email if you choose Google sign-in, and through its Gemini API to process what you submit to AI features, including pictures and YouTube links — see above), Resend (sign-in codes, order emails, learning reminders and weekly emails, and the subscriber list), and Stripe, WeChat Pay (via XunhuPay) and Alipay (payments). These providers may process data outside New Zealand; we share only what is needed to provide the service.

Retention

Order records are kept for about 13 months for support and refunds, then deleted unless the law requires us to keep them longer. Your account and learning record are kept until you delete your account (see “Deleting your account”). Subscriber addresses are kept until you unsubscribe; email us if you want your address deleted entirely. Sign-in codes expire and are deleted after 30 minutes. Anonymous statistics contain no identity and are kept for up to 2 years. Courses you build and files you upload are kept until you delete them or your account; Golden Key transactions until you delete your account; AI usage counts and conversation statistics until you delete your account; AI quality samples for 30 days. Learning records are backed up daily to private storage; for each record we keep the last 14 days of versions (plus the latest older one) for disaster recovery, and these backups are deleted together with your account. Orders, memberships and subscriptions are backed up weekly and only the last 8 weeks are kept, so deleted information also disappears from those backups within 8 weeks. The learning database (D1) has a 30-day point-in-time recovery window provided by Cloudflare. Error and runtime logs are kept by Cloudflare for about 3 days.

Deleting your account

When signed in, go to the “Me” page → “Account & data” on words.1week8days.com to delete your account yourself. The page lists what will be deleted and asks you to type your email address to confirm. Deletion starts with a 7-day cooling-off period: reminders stop immediately, and signing in again within 7 days lets you cancel. After that we delete your account record, learning record and all its backups, answer history and review cards, courses you built and files you uploaded, AI usage counts, conversation statistics and AI quality samples, reminder settings and history, bookshelf, podcast membership, digest subscription and your contact record at Resend. Books on your bookshelf and any membership end with the account, remaining Golden Keys are forfeited, and payments are not refunded. Transaction records are kept as financial and refund evidence with your email address removed; content error reports are kept with identity removed. Resend's sending records, weekly order backups (up to 8 weeks), the database recovery window (30 days) and runtime logs (about 3 days) expire on their own schedules. To stop old sign-in links, old unsubscribe links or late payment notifications from recreating the account, we keep a deletion marker containing only a one-way hash of your email address, not the address itself.

Your rights

You may ask to access, correct or delete the personal information we hold about you, including an export of your learning record, answer history, review cards, courses you built, AI conversation statistics, bookshelf, membership, subscriptions and reminder settings as a file, or deletion of your account. Export and deletion are self-service on the “Me” page → “Account & data”; you can also email kefu@1week8days.com from your account's address and we will usually act within 7 days. We handle personal information in accordance with the New Zealand Privacy Act 2020.

Children under 13

Children under 13 may use an account only with the consent and supervision of a parent or guardian. If you find that a child has signed up without consent, email us and we will delete the account.