Privacy Policy

(1) Collection of Personal Data

To provide you with the best service experience, we may collect the following types of personal data:

• Account information: name, email address, password, username
• Basic personal data: age, education level, learning preferences, learning goals
• Learning data: learning progress, completed courses, quiz results, study time records
• Device information: device type, operating system version, unique device identifier, IP address
• Usage behavior data: browsing history, click behavior, feature usage, error logs
• Communication content: messages sent through customer service, feedback forms, or email
• Other data: content, files, or images you voluntarily provide or upload

(2) Processing of Personal Data

We process your personal data in a lawful, fair, and transparent manner, and only for the following purposes:

• Providing, maintaining, and improving the features and quality of the Service
• Personalizing your learning experience, including content recommendations and learning path planning
• Processing your registration, login, transactions, and related service requests
• Sending service notifications, updates, security alerts, and administrative messages
• Responding to your inquiries and providing customer support and technical assistance
• Conducting data analysis to understand usage trends and improve service quality
• Detecting, preventing, and resolving technical issues, security threats, or fraudulent activities
• Complying with applicable laws, court orders, or government requirements
• Conducting academic research, educational research, or statistical analysis, and publishing the results (see item (3) below)

(3) Academic Research and Publication

Dogtor is committed to advancing research in education and learning science. To this end, the Dogtor development team may use your personal data (in particular learning data and usage behavior data) for academic research, educational research, and statistical analysis, and may publish the results in the form of academic papers, conference presentations, or research reports.

To protect your privacy, we commit to the following principles:

• Data used for research and publication is de-identified or anonymized beforehand, so that no specific individual can be identified directly or indirectly
• Published content presents only aggregated, statistical results and does not disclose any personally identifiable information
• If research genuinely requires the use of personally identifiable data, we will obtain your explicit consent separately; where the user is a minor, we will obtain the consent of their legal guardian (parent or guardian)

(4) Use of Personal Data

We use your personal data reasonably in accordance with the purposes of collection and take appropriate security measures to protect your data. Unless we obtain your explicit consent or as otherwise required by law, we will not use your personal data for purposes beyond the scope of collection.

(5) Personal Data Deletion Requests

You have the right to request deletion of your personal data at any time. To request deletion, please contact us at:

Email: [email protected]

We will process your deletion request within a reasonable period (typically within 30 business days) after receiving it. Please note that if the law requires us to retain certain data (e.g., transaction records, data related to legal disputes), we will retain such data as required by law.

(1) Data Security Measures

We take the security of your personal data very seriously and have implemented the following technical and organizational measures to prevent personal data from being stolen, altered, damaged, lost, or leaked:

• Data encryption: Sensitive data in transit and at rest is encrypted (using SSL/TLS encryption protocols)
• Access control: Strict access permissions for personal data, authorized only to necessary personnel, with access logs maintained
• System security: Use of secure servers, firewalls, intrusion detection systems, and regular security updates and patches
• Regular audits: Regular security assessments, vulnerability scans, and penetration testing to ensure system security
• Backup mechanisms: Comprehensive data backup and disaster recovery mechanisms to ensure data integrity and availability
• Employee training: Regular data protection and information security training for employees
• Third-party review: Security reviews of third-party service providers to ensure compliance with data protection standards

(2) Data Retention and Deletion

We retain your personal data only for the period necessary to fulfill the purposes described in this policy, or for the period required by law. When the retention period expires or you request deletion, we will securely delete or anonymize your personal data.

If you delete your account, we will delete or anonymize your personal data within a reasonable time (typically within 30 business days), except in the following cases:

• Data that the law requires us to retain (e.g., transaction records, tax data)
• Data needed for ongoing legal proceedings or dispute resolution
• Data necessary to protect the legitimate interests of the Service or other users

(3) Security Disclaimer

Despite the security measures described above, the internet environment is not absolutely secure, and we cannot guarantee the absolute security of data transmission or storage. Please safeguard your account credentials and avoid using the Service in insecure network environments.

(1) Service Providers

To provide the Service, we may share necessary personal data with third-party service providers who assist us in operating the Service, including:

• Cloud storage and hosting service providers
• Data analytics and statistics service providers
• Customer support and service system providers
• Email and messaging service providers
• Payment processing service providers
• Other technical service providers that help us deliver the Service

We require all third-party service providers to comply with strict data protection standards and only allow them to use your personal data for the purpose of providing the Service.

(1-1) AI Service Providers

Dogtor uses third-party AI services to provide intelligent learning assistance features. When you use AI-related features, some data will be transmitted to AI service providers.

AI service providers used:

• OpenAI API (ChatGPT) — for conversational learning assistance, content generation, and intelligent Q&A
• Google Gemini API — for intelligent question analysis, learning recommendations, and multi-dimensional analysis

Data transmitted:

• User conversation messages: chat messages between you and the Dogtor AI assistant
• Uploaded images: images uploaded through the chat feature (e.g., question photos, study notes)
• Question content and answer records: selected question content, answer results, mistake records (for mistake analysis)
• Learning preference information: grade level, learning motivation, preferred study times (for personalized recommendations)

Data not transmitted:

• We do not transmit any financial information or sensitive personal data (such as passwords) to AI service providers

Purpose of data use:

• Data sent to AI services is used solely to generate the current response and provide you with personalized learning assistance
• For intelligent question analysis, learning suggestions, and mistake analysis
• For personalized learning content recommendations and learning path planning

Data processing:

• Under our API usage terms, data sent to AI services will not be used by AI providers to train their models
• All data transmission is encrypted via HTTPS to ensure security
• We do not proactively sell or share your personally identifiable information with third parties

Data protection commitment:

AI service providers such as OpenAI and Google Gemini have committed to providing data protection measures equal to or higher than our standards, including data encryption, access control, and privacy protection mechanisms. These providers follow their respective privacy policies and comply with industry-standard data protection practices. See their official privacy policies:

• OpenAI Privacy Policy: https://openai.com/privacy
• Google Privacy Policy: https://policies.google.com/privacy

(2) Legal Requirements

We may provide your personal data to relevant authorities or third parties in the following circumstances:

• In response to lawful requests from courts, prosecutors, or other government agencies
• To comply with applicable laws, court rulings, or administrative orders
• To protect the rights, property, or safety of the Service, users, or the public
• To investigate, prevent, or address potential illegal activities, fraud, or security threats

(3) Business Transfers

In the event of a merger, acquisition, asset sale, or other business transfer, your personal data may be transferred to the new business entity. We will ensure that such transfer complies with the requirements of this Privacy Policy and notify you prior to the transfer.

(4) With Your Consent

With your explicit consent, we may share your personal data with third parties.

(1) What Are Cookies

Cookies are small text files stored on your device (computer, phone, tablet, etc.) by a website server, used to record your browsing preferences, login status, or other information.

(2) Types of Cookies We Use

• Essential cookies: Required for the website to function properly, such as maintaining your login status and remembering your preferences. Disabling these may affect website functionality.
• Functional cookies: Used to remember your personal preferences and settings (e.g., language selection, font size) for a more personalized experience.
• Analytics cookies: Used to collect and analyze website usage to help us understand how users interact with the website, improving service quality and user experience. This data is typically anonymized.
• Marketing cookies: Used to track your browsing behavior to provide more relevant advertising content (if applicable).

(3) Managing Cookies

You can control or delete cookies through your browser settings. Most browsers allow you to:

• View stored cookies
• Delete specific or all cookies
• Set your browser to notify you when cookies are received
• Completely disable cookies

Please note that disabling cookies may affect the normal operation of certain features of the Service, such as maintaining login status or remembering your preferences.

(4) Other Tracking Technologies

In addition to cookies, we may also use other similar tracking technologies, such as web beacons and pixel tags, to collect usage information and improve the Service.

(1) Notification of Changes

When we make changes to this policy, we will:

• Post the updated policy on this page
• Update the "last updated" date at the top of the page
• For significant changes, we may notify you via email, in-app notification, or other prominent means

(2) Your Rights

The revised policy takes effect from the date of publication. If you continue to use the Service, you agree to accept the revised policy. If you do not agree with the revised content, please stop using the Service and you may request deletion of your personal data in accordance with Section 2(4) of this policy.

(3) Regular Review Recommended

We recommend that you review this Privacy Policy periodically to understand how we protect your personal data. You can view the latest version of this policy on our website or app at any time.