1. Introduction
WeWat Tech Limited ("WeWat", "we", "us"), a company incorporated in Hong Kong, respects and protects the privacy of users ("you"). This policy explains how we collect, use, store, share and safeguard personal data through WeWat Quiz (shuati.wewat.hk and its WeChat Mini Program version), WeWat Academy (wewat.hk/learn) and WeWat Community (forum.wewat.hk) (together, the "Services"), and the rights you can exercise.
We comply with Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486) and other applicable laws. For users in mainland China, we additionally provide protections consistent with the Personal Information Protection Law of the People's Republic of China. Please read this policy carefully before using the Services.
2. Data We Collect
We collect only the data necessary to provide the Services, following the principle of data minimisation:
- Data you provide: the email address or mobile number used for registration and login, your password (stored with one-way encryption — even we cannot recover it), nickname and avatar; when you sign in with WeChat, the nickname and avatar you authorise to be shared.
- Data generated through use: the question banks and questions you create or import, practice records and learning progress, mock exam results, mistake notebook, notes and favourites; posts, comments and likes you publish in WeWat Community.
- Data collected automatically: log data such as IP address, access time, device and browser type; cookies and browser local storage used to keep you signed in and remember preferences (see Section 7).
3. How We Use Data
We use the data we collect to: create and manage your account; provide core features such as practice, learning progress, mistake notebook and mock exams; provide AI explanation and AI Q&A features when you actively use them (see Section 4); improve the product and conduct statistical analysis (in de-identified form); protect the security of accounts and the Services and prevent abuse; and comply with applicable law.
We will not use your personal data for purposes not described in this policy. If we need to change the purpose, we will seek your consent again.
4. AI Features and Third-Party Processing
The AI explanation and AI Q&A features of the Services are powered by third-party large language model providers (such as Tencent Cloud and Alibaba Cloud). When you use these features, we transmit the relevant question text to the provider to generate the explanation; we do not transmit your account details or contact information.
We transmit only what is necessary for the feature, and we require the providers to handle the data under their own data security and privacy policies and not to use it for other purposes.
5. Storage and Security
Your personal data is stored in cloud data centres located in Hong Kong, with daily backups. Unless the law provides otherwise, we keep data only as long as necessary: account data is kept until your account is cancelled and the clean-up is completed; log data is generally kept for no more than 12 months.
We take reasonable technical and organisational measures to protect your data, including site-wide HTTPS encryption, one-way password hashing (bcrypt), access control and auditing. No system is absolutely secure; if a security incident affecting your personal data occurs, we will notify you as required by law.
6. Sharing and Transfer
We do not sell your personal data. Except in the following circumstances, we do not share or transfer your personal data to third parties:
- necessary transmission to AI providers as described in Section 4;
- compliance with mandatory requirements of law, courts or regulators;
- in a merger or acquisition, where the recipient is required to continue honouring this policy and you will be informed;
- with your separate consent.
7. Cookies and Local Storage
We use cookies and browser local storage to keep you signed in, remember your language preference and cache learning progress. This data is stored on your own device and can be cleared at any time through your browser settings; you may need to sign in again afterwards. We do not use third-party cookies for cross-site advertising tracking.
8. Your Rights
You have the right to access, obtain a copy of, correct, delete and restrict the processing of your personal data, and to lodge a complaint. You can view and update your account details at any time under "Me → Profile", or contact us through the channel in Section 12.
Account cancellation: you may submit a cancellation request in the app under "Me → Settings". You can withdraw the request by signing in within the 7-day cooling-off period; once the period expires, we will delete or anonymise your personal data (except where the law requires retention).
Withdrawing consent: you may decline or stop using a feature to withdraw your consent; this does not affect processing that was based on your consent before withdrawal.
9. Minors
The Services are intended for users aged 14 or above. If you are under 14, please read this policy together with your guardian and use the Services only with their consent. Guardians may contact us at any time to access, correct or delete a minor's personal data.
10. Updates to This Policy
We may update this policy from time to time. Significant changes will be announced on the site or through appropriate notices. By continuing to use the Services after an update, you accept the updated policy.
11. Governing Law and Complaints
This policy is governed by the laws of Hong Kong. If you believe our processing of personal data has harmed your rights, you may complain to us via the channel in Section 12 and we will respond within 15 working days; you may also lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD), Hong Kong.
12. Contact Us
For questions about this policy or personal data protection, please email support@wewat.hk.