隐私政策

最后更新：2026-10-09

简单说：课件、录音和 API Key 留在你自己的电脑上；登录后同步的是你的笔记、课堂记录和设置；我们不卖数据、不放广告、不做追踪统计。Duolect 目前处于内测阶段，不收取任何费用。

1. 我们是谁

Duolect 双语课堂（以下称“Duolect”或“我们”）是由学生独立开发的课堂学习工具，目前处于免费内测阶段，与任何大学都没有隶属关系。Duolect 目前还没有注册为公司，也没有任何付费服务；Pro 订阅仍在规划中，尚未开放购买。如果将来开始收费，我们会在开放购买前更新本政策，写明提供服务和收款的主体。

联系我们：联系邮箱即将公布

2. 我们处理哪些数据

数据	存放位置	用途
账号邮箱、加密后的密码	Supabase（欧盟，爱尔兰机房）	登录、找回密码
笔记、课堂转写、待办、复习计划、设置（不含 API Key）	Supabase（欧盟，爱尔兰机房）	在你的不同设备间同步；只有你自己能读取（行级权限控制）
早期体验卡编号、领取时间	Supabase（欧盟，爱尔兰机房）	记录早期用户身份和权益
Pro 预约名单：邮箱、你填写的理想价格、想要的功能、留言、同意接收邮件的选择	Supabase（欧盟，爱尔兰机房）	Pro 上线时通知你；了解大家对价格和功能的期待
课件、录音音频、API Key	只在你自己的浏览器 / 电脑里	不会上传到我们的服务器

不登录也可以使用 Duolect，这时所有数据都只保存在你的设备上。

3. 发送给第三方服务的数据

你自己选择的 AI 服务（如 Groq、Google Gemini）：录音转写和翻译时，正在处理的音频片段和文字会用你自己的 API Key直接从你的浏览器发送给该服务，受该服务自身的隐私条款约束。我们看不到这些内容。
Canvas 和课表：Duolect 通过你在浏览器里已经登录的状态读取你自己能看到的课程内容，不会询问或保存你的大学密码。
Cloudflare：托管我们的网站。
Supabase：提供账号和数据同步，数据存放在欧盟（爱尔兰）。

我们不出售你的数据，不投放广告，也没有使用任何第三方统计或追踪工具。

4. 邮件

只有在你勾选同意后，我们才会向预约名单里的邮箱发送 Pro 上线通知和产品更新。每封邮件都可以退订，你也可以随时联系我们把邮箱从名单中删除。账号相关的系统邮件（如注册确认、重置密码）由 Supabase 发送。

5. 保存期限与删除

同步数据会保存到你删除它们或注销账号为止。你可以随时退出登录，本机数据不受影响；如需删除账号和云端数据，或从预约名单中移除，请联系我们，我们会在 30 天内处理。预约名单的数据在 Pro 推出后最多保留 12 个月。

6. 你的权利

根据英国和欧盟的数据保护法律（UK GDPR / GDPR），你有权访问、更正、删除你的数据，导出数据，以及撤回同意。你可以在应用的「设置 → 系统与数据」里导出备份，其余请求请联系我们。如果对我们的处理方式有疑虑，你也可以向英国信息专员办公室（ICO）投诉。

7. 本地存储

Duolect 使用浏览器的本地存储（localStorage / IndexedDB）保存你的设置、离线课件和录音，用于让应用正常运行，不用于追踪。

8. 政策更新

如果本政策有重要变化（例如开始收费、引入新的服务商），我们会在网站上更新并修改上方的日期；涉及预约名单的变化会通过邮件告知。

Privacy policy

Last updated: 2026-10-09

In short: slides, recordings and API keys stay on your own computer; when you sign in we sync your notes, class transcripts and settings; we do not sell data, show ads or use tracking analytics. Duolect is in beta and does not charge anything.

1. Who we are

Duolect (“we”) is a lecture study tool built independently by students. It is in a free beta and is not affiliated with any university. Duolect is not yet a registered company and offers no paid services; a Pro subscription is planned but not on sale. If we ever start charging, we will update this policy before anything goes on sale, stating who provides the service and takes payments.

Contact: a contact email will be published shortly

2. Data we process

Data	Where it is stored	Why
Account email and hashed password	Supabase (EU, Ireland)	Sign-in and password reset
Notes, transcripts, to-dos, review schedule, settings (excluding API keys)	Supabase (EU, Ireland)	Sync between your devices; only you can read them (row-level security)
Early-access card number and claim time	Supabase (EU, Ireland)	Recording early-user status and perks
Pro waitlist: email, the price you suggest, the features you pick, your note, your email consent	Supabase (EU, Ireland)	Telling you when Pro launches; understanding expectations on price and features
Slides, audio recordings, API keys	Only in your own browser / computer	Never uploaded to our servers

You can use Duolect without signing in; everything then stays on your device.

3. Data sent to third-party services

The AI service you choose (e.g. Groq, Google Gemini): for transcription and translation, the audio clip and text being processed are sent directly from your browser to that service with your own API key, under that service’s own privacy terms. We cannot see this content.
Canvas and your timetable: read through the session you are already logged into, only what you can already see. We never ask for or store your university password.
Cloudflare: hosts our website.
Supabase: provides accounts and sync, with data stored in the EU (Ireland).

We do not sell your data, show ads, or use third-party analytics or tracking.

4. Email

We only email waitlist addresses that ticked the consent box, about the Pro launch and product updates. Every email has an unsubscribe link, and you can ask us to remove your address at any time. Account emails (sign-up confirmation, password reset) are sent by Supabase.

5. Retention and deletion

Synced data is kept until you delete it or close your account. You can sign out at any time without affecting the data on your device. To delete your account and cloud data, or leave the waitlist, contact us and we will act within 30 days. Waitlist data is kept for at most 12 months after Pro launches.

6. Your rights

Under UK and EU data protection law (UK GDPR / GDPR) you can access, correct, delete and export your data, and withdraw consent. You can export a backup in the app under Settings → System & data; for anything else, contact us. You can also complain to the UK Information Commissioner’s Office (ICO).

7. Local storage

Duolect uses your browser’s local storage (localStorage / IndexedDB) for settings, offline slides and recordings so the app works. It is not used for tracking.

8. Changes

If this policy changes in an important way (for example, if we start charging or add a new provider), we will update it here and change the date above; waitlist-related changes will be emailed.