隐私政策

最后更新：2026-10-27

简单说：课件和完整的录音文件留在你自己的电脑上；登录后同步的是你的笔记、课堂记录和设置；使用 AI 时，正在处理的音频片段和文字会经我们的服务器转给 AI 服务商处理，我们的服务器不保存这些内容；我们不卖数据、不放广告、不用第三方统计或跨网站追踪；登录后只统计你每天各功能用了几分钟、上课录了多久（不含任何内容），用来改进 Duolect 和给你看自己的学习时长。Duolect 目前处于内测阶段，不收取任何费用。

1. 我们是谁

Duolect 双语课堂（以下称“Duolect”或“我们”）是由学生独立开发的课堂学习工具，目前处于免费内测阶段，与任何大学都没有隶属关系。Duolect 目前还没有注册为公司，也没有任何付费服务；Pro 订阅仍在规划中，尚未开放购买。如果将来开始收费，我们会在开放购买前更新本政策，写明提供服务和收款的主体。

联系我们：联系邮箱即将公布

2. 我们处理哪些数据

数据	存放位置	用途
账号邮箱、加密后的密码	Supabase（欧盟，爱尔兰机房）	登录、找回密码
笔记、课堂转写、待办、复习计划、设置	Supabase（欧盟，爱尔兰机房）	在你的不同设备间同步；只有你自己能读取（行级权限控制）
早期体验卡编号、领取时间	Supabase（欧盟，爱尔兰机房）	记录早期用户身份和权益
Pro 预约名单：邮箱、你填写的理想价格、想要的功能、留言、同意接收邮件的选择	Supabase（欧盟，爱尔兰机房）	Pro 上线时通知你；了解大家对价格和功能的期待
AI 用量：每天的听写分钟数、AI 请求次数和文字量（不含内容）	Supabase（欧盟，爱尔兰机房）	每日额度，防止滥用
使用 AI 的设备记录：应用生成的随机设备编号、浏览器稳定特征（平台、语言、时区、屏幕、显卡型号等）的哈希值、网络地址的加盐哈希值（不保存 IP 地址本身）、国家 / 地区，以及首次和最近使用时间	Supabase（欧盟，爱尔兰机房），最后一次使用后保存 180 天	防止有人用多个账号或别人的账号免费占用 AI：每台设备最多可用 3 个账号使用 AI，异常情况会提醒管理员人工核实。不用于广告、不用于跨网站追踪，也不提供给任何第三方。这是保障服务安全、防止滥用所必需的处理（合法利益）
使用时长：每天在各页面（课堂模式、作业辅导等）真正在用的分钟数、上课录音时长、录了几节课、各页面的 AI 使用次数（只有数字，不含页面内容、输入的文字或网址）	Supabase（欧盟，爱尔兰机房），删除账号时一并删除	首页给你看自己的学习时长；Duolect 团队（仅管理员）分析哪些功能有用、大家用多久，以改进产品（合法利益）。只有你自己和管理员能看到你的数据；其他同学只能看到全体的匿名中位数
邀请与来源：你的邀请码、你邀请了谁 / 谁邀请了你、邀请奖励是否生效，以及你第一次是从哪里来的（链接里的渠道标记，或来自哪个搜索引擎 / 网站，只记网站名）	Supabase（欧盟，爱尔兰机房），删除账号时一并删除	发放邀请奖励、防止刷邀请；了解哪些渠道真正带来了同学（合法利益）。只有管理员能看到
课件、完整的录音音频	只在你自己的浏览器 / 电脑里	不会上传到我们的服务器（正在转写的片段见第 3 节）

不登录也可以使用 Duolect，这时所有数据都只保存在你的设备上。

3. 发送给第三方服务的数据

AI 服务商：精准听写、翻译、课堂关键点、问答和总结时，正在处理的音频片段（每段几十秒）和相关文字会经过 Duolect 的服务器（Cloudflare）转给 AI 服务商处理，结果直接返回给你，我们的服务器不保存这些内容。课上的听写和翻译使用 Groq（美国），按 Groq 的政策默认不保存请求内容；课后笔记整理、总结、自测题、复习问答、「作业辅导」（会发送你上传的作业照片 / PDF / 文字和相关的课上材料；Duolect 的服务器不保存这些附件，只在你的账号里保存题目文字和讲解），以及「课件速览」「课程大纲」（会发送课件里的文字、含图表或公式的课件页面图片，以及你的课堂笔记）使用 Anthropic Claude（美国，付费 API，按其商业条款不会用这些内容训练模型）。课堂笔记通过 Anthropic 的批处理接口排队整理，结果在你的设备取回后即从 Anthropic 删除；Claude 暂时不可用或当月额度用完时，改用 硅基流动 SiliconFlow 提供的模型，受其隐私条款约束。下课后的「AI 精听」会把这节课的录音分成 1–2 分钟的片段，连同课程名、词汇表和课件文字，交给 Google Gemini（付费 API，Google 不会用这些内容训练模型）重新听写，处理完即返回。
Canvas 和课表：Duolect 通过你在浏览器里已经登录的状态读取你自己能看到的课程内容，不会询问或保存你的大学密码。
Cloudflare：托管我们的网站。
Supabase：提供账号和数据同步，数据存放在欧盟（爱尔兰）。

我们不出售你的数据，不投放广告，也没有使用任何第三方统计或追踪工具。

4. 邮件

只有在你勾选同意后，我们才会向预约名单里的邮箱发送 Pro 上线通知和产品更新。每封邮件都可以退订，你也可以随时联系我们把邮箱从名单中删除。账号相关的系统邮件（如注册确认、重置密码）由 Supabase 发送。

5. 保存期限与删除

同步数据会保存到你删除它们或注销账号为止。你可以随时退出登录，本机数据不受影响；如需删除账号和云端数据，或从预约名单中移除，请联系我们，我们会在 30 天内处理。预约名单的数据在 Pro 推出后最多保留 12 个月。

6. 你的权利

根据英国和欧盟的数据保护法律（UK GDPR / GDPR），你有权访问、更正、删除你的数据，导出数据，以及撤回同意。你可以在应用的「设置 → 系统与数据」里导出备份，其余请求请联系我们。如果对我们的处理方式有疑虑，你也可以向英国信息专员办公室（ICO）投诉。

7. 本地存储

Duolect 使用浏览器的本地存储（localStorage / IndexedDB）保存你的设置、离线课件和录音，用于让应用正常运行，不用于追踪。

8. 政策更新

如果本政策有重要变化（例如开始收费、引入新的服务商），我们会在网站上更新并修改上方的日期；涉及预约名单的变化会通过邮件告知。

Privacy policy

Last updated: 2026-10-27

In short: slides and full recordings stay on your own computer; when you sign in we sync your notes, class transcripts and settings; when you use AI, the audio clip and text being processed pass through our server to the AI provider, and our server does not keep them; we do not sell data, show ads, or use third-party analytics or cross-site tracking; when you are signed in we only count how many minutes a day you use each part of the app and how long you record classes (no content), to improve Duolect and to show you your own study time. Duolect is in beta and does not charge anything.

1. Who we are

Duolect (“we”) is a lecture study tool built independently by students. It is in a free beta and is not affiliated with any university. Duolect is not yet a registered company and offers no paid services; a Pro subscription is planned but not on sale. If we ever start charging, we will update this policy before anything goes on sale, stating who provides the service and takes payments.

Contact: a contact email will be published shortly

2. Data we process

Data	Where it is stored	Why
Account email and hashed password	Supabase (EU, Ireland)	Sign-in and password reset
Notes, transcripts, to-dos, review schedule, settings	Supabase (EU, Ireland)	Sync between your devices; only you can read them (row-level security)
Early-access card number and claim time	Supabase (EU, Ireland)	Recording early-user status and perks
Pro waitlist: email, the price you suggest, the features you pick, your note, your email consent	Supabase (EU, Ireland)	Telling you when Pro launches; understanding expectations on price and features
AI usage: minutes transcribed, number of AI requests and amount of text per day (no content)	Supabase (EU, Ireland)	Daily limits and preventing abuse
Devices that use AI: a random device ID created by the app, a hash of stable browser characteristics (platform, languages, time zone, screen, graphics model and similar), a salted hash of the network address (the IP address itself is not stored), country, and first / last use	Supabase (EU, Ireland), kept for 180 days after last use	Stopping people from taking free AI with many accounts or someone else’s account: at most 3 accounts per device can use AI, and unusual patterns are flagged for a person to check. Never used for advertising or cross-site tracking, and never shared. This processing is necessary to keep the service secure and prevent abuse (legitimate interests)
Usage time: minutes a day each page (class mode, homework help, …) is really in use, time spent recording classes, number of classes recorded, AI uses per page (numbers only: never page content, what you type, or addresses)	Supabase (EU, Ireland), deleted with your account	Showing you your own study time on the home page; letting the Duolect team (admins only) see which features help and how long they are used, to improve the product (legitimate interests). Only you and the admins can see your figures; other students only see an anonymous median of everyone
Invites and source: your invite code, whom you invited / who invited you, whether the invite reward applied, and where you first came from (the channel tag in the link, or the search engine / site name that sent you)	Supabase (EU, Ireland), deleted with your account	Giving invite rewards and preventing invite abuse; learning which channels actually bring students (legitimate interests). Visible to admins only
Slides, full audio recordings	Only in your own browser / computer	Never uploaded to our servers (for clips being transcribed, see section 3)

You can use Duolect without signing in; everything then stays on your device.

3. Data sent to third-party services

AI providers: for transcription, translation, key points, Q&A and summaries, the audio clip being processed (a few dozen seconds) and the related text pass through Duolect’s server (Cloudflare) to the AI provider, and the result comes straight back to you; our server does not keep this content. In-class transcription and translation use Groq (USA), which by its policy does not retain request content by default; after-class notes, summaries and quizzes, review Q&A, “homework help” (which sends the homework photos / PDFs / text you upload and the related course material; Duolect’s server does not keep the attachments, and only the problem text and the explanation are saved in your account), plus “slide overviews” and “course outlines” (which send the text of your slides, images of slide pages that contain charts or formulas, and your class notes), use Anthropic Claude (USA, paid API; under its commercial terms this content is not used for training). Lecture notes are queued through Anthropic’s batch interface, and the result is deleted from Anthropic once your device has fetched it; when Claude is unavailable or the month’s allowance is used up, models from SiliconFlow are used instead, under its own privacy terms. After class, “AI listen” sends the lecture recording in 1–2 minute clips, with the course name, glossary and slide text, to Google Gemini (paid API; Google does not train on this content) to transcribe it again; the result comes straight back.
Canvas and your timetable: read through the session you are already logged into, only what you can already see. We never ask for or store your university password.
Cloudflare: hosts our website.
Supabase: provides accounts and sync, with data stored in the EU (Ireland).

We do not sell your data, show ads, or use third-party analytics or tracking.

4. Email

We only email waitlist addresses that ticked the consent box, about the Pro launch and product updates. Every email has an unsubscribe link, and you can ask us to remove your address at any time. Account emails (sign-up confirmation, password reset) are sent by Supabase.

5. Retention and deletion

Synced data is kept until you delete it or close your account. You can sign out at any time without affecting the data on your device. To delete your account and cloud data, or leave the waitlist, contact us and we will act within 30 days. Waitlist data is kept for at most 12 months after Pro launches.

6. Your rights

Under UK and EU data protection law (UK GDPR / GDPR) you can access, correct, delete and export your data, and withdraw consent. You can export a backup in the app under Settings → System & data; for anything else, contact us. You can also complain to the UK Information Commissioner’s Office (ICO).

7. Local storage

Duolect uses your browser’s local storage (localStorage / IndexedDB) for settings, offline slides and recordings so the app works. It is not used for tracking.

8. Changes

If this policy changes in an important way (for example, if we start charging or add a new provider), we will update it here and change the date above; waitlist-related changes will be emailed.