Privacy policy of the “Master Wang” website and app
Version of October 14, 2026.

1. Who is responsible for the data. Individual Entrepreneur Vitali Kosyrau (Georgia, Batumi), identification number 345643538. Contact: email vitalikosyrau@gmail.com or in Telegram: @milana_china_bot, command /support.

2. What data we receive.
• From Telegram: your Telegram ID, name and profile photo (the photo only if your privacy settings don't hide it). We don't receive your phone number, contacts or chats.
• The name and photo you set in the app's profile instead of your Telegram ones. Your name is visible to members of the weekly ranking and to friends you study with. You can remove your photo in the profile, and it is deleted from the server right away.
• Learning data: goal, level, exam date, time zone and reminder time, answers in lessons and mock tests, progress, streak, mistakes, applied promo codes.
• The texts you write in the writing tasks of HSK 4–6 mock tests.
• Voice messages and recordings for the pronunciation check are processed on our server immediately and are not stored. Only the result is kept: which tones you got right.
• Recordings of your answers in the speaking part of mock tests (口语, 口试) and the text recognized from them. They are stored on the server so you can listen to them in the review, and are deleted together with your data.
• Website payments go through Creem (the seller, Merchant of Record): we see the order number, plan, amount, country and the buyer's email; we have no card data. Payments in the bot go through Telegram Stars. We see the payment ID, the amount in Stars, the plan and the access period. We have no bank card data.
• If you sign in on the website: the name of your browser and system (for example, “Chrome, Windows”) and the sign-in time. The website keeps a cookie with a random session key in your browser; you can delete it with the “Sign out” button.
• If you sign in by email: your email address. It only receives sign-in codes; the emails with codes are sent by the Resend service.
• App error reports and server logs.
• Images for Telegram stories you create with the “Share” button are kept for up to 3 days.

3. Why. To run the lessons, plan, mock tests and reminders; to keep track of paid access and answer payment questions; to check written and spoken answers; to find and fix bugs. We use overall statistics without names to improve the app. There are no ads, and we don't sell data.

4. Who we share it with. Only services the bot can't work without:
• Telegram: messages, the app and payments;
• the hosting provider whose server runs the bot;
• Creem: website payments, receipts and taxes; Creem processes payment data under its own privacy policy: https://www.creem.io/privacy;
• Resend: sending emails with sign-in codes;
• an AI text-checking service (currently OpenAI): it receives the text of your written answer and the task, without your name or Telegram ID;
• speech recognition services (currently OpenAI and Microsoft Azure): they receive the recording of your answer in the speaking part of a mock test, without your name or Telegram ID; the recognized text is checked by the AI service.
Audio for words and texts was generated in advance: none of your data is sent for it.

5. How long we keep it. As long as you use the bot. Database backups are kept on the server for 14 days and with the administrator in Telegram. Payment records may be kept longer if tax rules require it.

6. Your rights. Contact support (email vitalikosyrau@gmail.com or in Telegram: @milana_china_bot, command /support) to find out what data about you is stored, correct it, get a copy or delete it. We delete it within 30 days; data leaves the backups as they are replaced. Reminders can be turned off in the profile settings.

7. Changes. We'll announce significant changes to this policy in the bot and on the website. The version date is at the top.