Privacy policy.

With Zihao (“we”, “us”) provides online Chinese lessons taught by Zihao. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It covers account and profile information, lesson bookings, payment records, authentication and email services, and our Google Calendar / Google Meet integration.

By creating an account or booking a lesson, you agree to the practices described here. See our Terms of Service and Lesson Policies for the rules that apply to lessons and payments.

When you sign up — by email and password or with Google — we store your email address, name, and the profile details you provide. Authentication is handled through our secure authentication provider, which issues your login session.

We use your account information to identify you, show your lesson history, manage your subscription or package, and send you essential messages such as booking confirmations, setup links, and password reset emails.

When you book, reschedule or cancel a lesson, we store the date, time, duration and status of that lesson, along with the weekly schedule you may set up. Trial lessons are 25 minutes; regular lessons are 50 minutes.

This information is used to organise your calendar, prevent double-booking, generate Google Meet links for your lessons, and keep an accurate record of your lesson credits.

Payments for trial lessons, 4-week subscription plans and flexible packages are processed by Stripe. We do not store your full card number on our servers. Stripe handles card data securely and provides us with a payment record and, for subscriptions, a customer portal for managing your payment method.

We store payment records (amount, status, date and the plan purchased) and link them to your account so we can show your payment history and grant the lesson credits you paid for.

Login, password resets, account setup and other authentication emails are delivered through our authentication provider and our email service. These services may process the email address and minimal message data needed to deliver the email.

We never ask for your password by email, and authentication tokens are managed server-side only.

With Zihao integrates with Google Calendar and Google Meet so that lessons can be scheduled without conflicts and joined easily. This integration is authorised by the teacher (admin) through Google OAuth, and the section below explains exactly what is accessed and why.

With Zihao accesses the teacher’s selected Google Calendar information only after OAuth authorization has been granted. Access is limited to providing scheduling and lesson functionality.

Calendar free/busy data is used to prevent booking conflicts, so two lessons cannot be scheduled at the same time.

Calendar event access is used to create, update and delete With Zihao lesson events and their associated Google Meet links.

Private Google Calendar event details are not shown to students. Students only see their own With Zihao lessons.

Google user data is not sold. It is used solely to deliver scheduling and lesson functionality.

OAuth credentials and tokens are stored securely and used only server-side. They are never exposed to the browser.

You can revoke Google access at any time by disconnecting Google Calendar from your With Zihao settings, or through your Google Account permissions at myaccount.google.com.

Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements where applicable.

We keep your account and lesson records for as long as your account is active. Lesson credits expire according to the plan you purchased (trial credits are valid for 30 days; flexible-package credits for 12 months). Subscription credits follow the rollover rules in our Lesson Policies.

Payment records are retained as needed for accounting and to honour refund, dispute and subscription-management obligations.

You can update your account details from your student area, manage or cancel your subscription through the Stripe customer portal, and disconnect Google Calendar at any time. You can also request deletion of your account and associated records.

To exercise these rights, contact us through the details on the website.

Questions about this Privacy Policy or your data can be sent to Zihao through the contact channels on the website. We are based in Barcelona, Spain.