1. Who we are
Mǎndù Learn (the "Service") is operated by Vantage Learn, a Vantage Learn company ("Vantage Learn", "we", "us"). Vantage Learn is the data controller responsible for the personal data we collect about you through the Service. You can contact us at david@tsinvestmentgroup.com.
2. Personal data we collect
- Account data: email address, name, and authentication credentials (or Google sign-in identifier).
- Profile and learning data: your progress, flashcard reviews, mined vocabulary, lesson history, and preferences.
- Tutor and content interactions: messages you send to the AI tutor, translation requests, and similar inputs.
- Support communications: the contents of messages you send us.
- Technical and usage data: device type, browser, IP address, log data, error reports, and basic analytics about how you use the Service.
- Billing identifiers: a customer ID and subscription status returned by Paddle. We do not store full payment card details — those are handled by Paddle.
3. Purposes and legal bases
- Creating and operating your account, and delivering the learning Service (performance of a contract).
- Saving progress, personalising lessons, and providing the AI tutor (performance of a contract).
- Providing customer support (performance of a contract, legitimate interests).
- Protecting the Service against fraud and abuse, and maintaining security (legitimate interests, legal obligation).
- Improving the Service through aggregated analytics and error monitoring (legitimate interests).
- Sending essential service emails such as account, security, and billing notifications (performance of a contract).
- Sending optional product updates, where permitted (consent, where required).
4. Who we share data with
- Paddle — our Merchant of Record, which handles checkout, payments, billing, tax compliance, invoicing, and subscription management on our behalf.
- Hosting and infrastructure providers — used to host the application, database, and storage.
- AI providers — used to power the AI tutor, translations, and related features; your prompts and relevant context may be transmitted to these providers to generate responses.
- Analytics and error monitoring providers — used to understand usage and diagnose issues.
- Professional advisers — such as legal, accounting, or auditing advisers, where needed.
- Authorities — where required by law or to protect our rights, users, or the public.
We do not sell your personal data.
5. International transfers
Some of our service providers may process personal data outside your country, including in jurisdictions that may not provide the same level of protection. Where this is the case, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
6. Retention
We keep your personal data for as long as your account is active and as needed to provide the Service. When you delete your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain it (for example, for tax, accounting, or legal compliance).
7. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data.
- Request restriction of, or object to, certain processing.
- Request portability of your data.
- Withdraw any consent you have given.
- Lodge a complaint with your local data protection authority.
We will respond to requests within the time required by applicable law (typically one month under GDPR). To exercise your rights, contact us at david@tsinvestmentgroup.com.
8. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and secure cloud infrastructure. No system is completely secure, but we work continually to protect your information.
9. Cookies and similar technologies
We use cookies and similar technologies that are strictly necessary to operate the Service (for example, to keep you signed in). We may also use limited analytics cookies to understand how the Service is used. You can manage cookies through your browser settings.
10. Children
The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
11. Changes to this notice
We may update this Privacy Notice from time to time. We will post the updated version here and update the "Last updated" date above. If changes are material, we will provide additional notice.