This policy explains what data BanDoc collects, why, who receives it, how long it is kept and what you can do with it. The key points first: your handout files stay on your own device and we never receive or store them. We do not use your content to train any model.
1. Who collects your data
BanDoc is operated by 小紅科技工作室 (tax ID 95339185, address: 臺中市神岡區豐洲里豐洲路256巷29之1號1樓, 1F., No. 29-1, Ln. 256, Fengzhou Rd., Shengang Dist., Taichung City 429, Taiwan). For questions and requests about personal data, write to support@bandocstudy.com.
2. Why we collect it
- To create your account, sign you in and confirm who you are.
- To provide the service: managing courses, chapters and terms, and scheduling reviews.
- To count the pages you use each month against your plan, and to handle payment and refunds (payment method: Polar).
- To keep the service secure, prevent abuse and process copyright notices.
- To improve the product, using only usage statistics that contain no handout content.
3. What we collect
- Account data: the email you sign in with. Anonymous trial accounts have no email.
- What you create: course names, chapter names, terms and short glosses, notes you write yourself, interface and translation languages, reminder time.
- Review history: when you reviewed each term card and the rating you chose.
- Usage: pages processed each month and your plan status.
- Upload statements: the statement you made for each course and when you made it.
- Reminder settings: if you turn on web notifications, the push address and device type the browser provides.
- Connection data: IP address and browser details, handled by our hosting provider when you connect, used for security and abuse prevention.
- Copyright notices: the details a rights holder enters when filing a notice.
4. What we do not collect
Handout files are never uploaded or stored. The PDF is read, its text recognized and the translation laid over it inside your browser or app. The file, the full original text and full page images never reach our servers. Translations are cached on your device.
We do not collect your contacts, location or any data unrelated to the service.
5. What goes to third parties, and why
Only the passages that need translating leave your device. They pass through our server to a model provider, and the translation comes straight back to you. We do not write these passages to our database or logs.
- OpenAI (United States): receives passages to translate or to extract terms from and, for photographed handouts, a reduced page image so it can read the text, and returns the result. How long the provider keeps data, and whether it trains on it, is set by its API terms: [to confirm: OpenAI API data retention and no-training setting].
- Anthropic (United States): same purpose. The two providers are used in turn, with the other as backup. [to confirm: Anthropic API data retention and no-training setting].
- Supabase: hosts the database and sign-in service, which hold the account and study data listed in section 3. Data region: Singapore (ap-southeast-1). Sign-in code emails are sent by [to confirm: email service].
- Cloudflare: hosts the website and API and handles connections. While handling a connection it sees your IP address and request headers, and keeps security and performance logs under its own policy.
- Payment provider: Polar (Polar Software, Inc.). Polar is the Merchant of Record for this service: it collects payment and handles sales tax, and it uses Stripe to process payments. Payment details are handled by Polar and Stripe, and we never touch full card numbers.
These providers may be outside Taiwan, so your data may be transferred abroad. We choose services that offer an option to exclude API data from training and we turn it on. The actual settings and retention periods will be updated here once confirmed.
6. How long, where, to whom and how we use it
- Period: from when you create an account until you delete it. After deletion, your account and study data are deleted from our servers, and backups are purged automatically within [to confirm: backup retention days]. Copyright notices and their handling records are kept for [to confirm: retention period] as legal evidence.
- Place: Taiwan, and the countries where the providers in the previous section process data.
- Recipients: our company and the providers listed in the previous section. We give your data to no one else unless the law requires it or you agree.
- Method: automated processing and transfer by electronic means.
7. We do not train models on your content
We do not use your handout text, terms or any other content to train or fine-tune a model, and we do not show it to other users. BanDoc has no public or sharing features. Provider-side settings are in section 5.
8. Cookies and storage on your device
We use only the cookies and device storage we need: to keep you signed in, to remember the interface language you chose and to cache translations so you do not translate the same page twice. They are not used for advertising. Clearing your browser data removes them, and the cached translations go with them.
9. Your rights
Under article 3 of Taiwan’s Personal Data Protection Act you may ask us to:
- Tell you what personal data we hold, or let you see it.
- Give you a copy.
- Add to it or correct it.
- Stop collecting, processing or using it.
- Delete it.
Email support@bandocstudy.com and we will reply within a reasonable time. To make sure it is you, we may ask you to write from your account email.
10. How to delete your account and data
Open Settings and choose delete account. All your courses, terms, review history and usage are deleted and cannot be restored. You can also email support@bandocstudy.com and ask us to do it. Translations cached on your device are removed when you clear your browser data or uninstall the app.
11. If you choose not to give data
You can try BanDoc anonymously with no email, but an anonymous account is lost if you switch devices or clear your browser data. To sync courses and terms across devices you need to sign in with an email. If you do not save courses and terms you can still read handouts, but you cannot use the term list or reviews.
12. Changes and contact
If we make a significant change we will announce it on the website and update the effective date. Questions about this policy go to support@bandocstudy.com.