隐私政策

1. 适用范围与运营者

本政策适用于 Ada的ICU题库网站、移动应用及与其共用账号和服务器的相关功能 （统称“本服务”）。本服务由 Ada的ICU题库的开发者和运营者（下称“我们”）提供。 使用本服务前，请阅读本政策；如你不同意必要数据的处理，本服务的账号、作答和批改功能可能无法提供。

2. 我们处理哪些数据

• 账号与身份数据：邮箱、用户名、昵称、经安全散列处理的密码、账号角色与访问状态、账号创建和最近登录时间，以及维持登录所需的会话信息。
• 学习与 MyTests 数据：用户创建或收到的试卷、题目收藏、错题、逐题作答记录、文字答案、选择题答案、手写笔迹和批注、作答时间、提交时间、分数、正确率、教师评分及反馈。
• 班级与教学数据：课程和班级关系、入班邀请与申请、教师布置的任务、成绩发布状态，以及教师为教学管理设置的学生备注。
• 用户主动提供的内容：用户发送的反馈、题目备注、分享信息；题目评论功能启用并被使用时，还包括评论内容、显示名称、发布时间和必要的管理状态。
• 偏好与必要技术数据：界面和导出偏好、必要的安全与故障诊断记录。服务器或云基础设施可能在提供连接和防止滥用时短暂处理 IP 地址、浏览器或设备类型及请求时间。我们不将这些数据用于广告或跨服务追踪。

我们不要求或主动收集精确位置、通讯录、照片库、麦克风、相机、健康、金融账户或广告标识符。

3. 数据如何取得

数据主要由你在注册、作答、涂写、评论、反馈、分享或设置偏好时直接提供； 成绩、正确率和错题统计由系统根据你的作答生成；班级、作业和批改数据由教师或学校在教学过程中提供； 少量技术数据由服务器在你访问本服务时自动产生。

4. 我们如何使用数据

• 创建和保护账号、验证登录并提供跨设备服务；
• 保存试卷、答案、笔迹、收藏、错题及学习进度；
• 计算成绩、正确率和其他学习统计，供用户本人及有权教师查看；
• 支持布置任务、教师批改、发布成绩和批改记录；
• 在评论功能启用后展示评论，并处理举报、纠纷和内容管理；
• 回复反馈、维护服务安全、排查故障、防止欺诈和滥用；
• 履行适用法律要求。

我们不会基于这些数据投放个性化广告，也不会将数据用于跨应用或跨网站追踪。

5. 谁能看到数据

• 用户本人：可查看与自己账号相关的试卷、作答、成绩及学习记录。
• 授权教师：可在其负责的班级和任务范围内查看学生身份、提交内容、笔迹、成绩、正确率及批改信息。
• 其他登录用户：题目评论启用后，可看到评论者的显示名称、评论内容及发布时间；不会因此获得评论者的邮箱。
• 必要的服务提供商：我们使用云服务器和对象存储提供商来托管数据库、备份和题目图片。其仅为向我们提供基础设施而处理数据，并应受合同、权限控制和适用法律约束。
• 法律要求：仅在法律法规、司法或行政机关依法要求，或为保护用户和服务安全确有必要时披露。

除上述必要情形外，我们不出售、出租或向无关第三方共享个人信息，不与广告网络或数据经纪商共享。

5A. AI 批改的信息流向与人工改判

使用 AI 批改时，浏览器先将批改请求发送至 Ada的ICU题库服务器。服务器在完成身份与权限校验后， 选取相关题目、学生答案（文字或必要的笔迹图片）、标准答案或评分方案、课程 Prompt 和版本化评分规则， 再通过加密连接发送给管理员配置的第三方 AI 模型服务商。AI API 密钥始终保留在服务器端，不会下发给浏览器。 模型返回的评分点、建议和分数由服务器校验并保存，再返回给有权用户。为了保护密钥、标准答案和学生数据， 本服务不采用“浏览器直接连接 AI 服务商”的方式。

AI 结果属于辅助建议；教师可以复核、改判并保存最终批改。只有用户在提示框中明确同意后，我们才会收集用于改进 AI 评分的改判样本，其中可能包括该学生答案、当次 AI 意见和人工改判结果。授权按账号保存，无需每次重复同意； 可在“账户管理 → 更多选项”撤销。撤销后停止收集新的样本，并清除既有改判样本中的学生答案、AI 意见和改判结果载荷。

6. 保存地点、期限与删除

数据目前主要存储在中国大陆的服务器和备份中。账号存续期间，我们会保留提供服务所需的账号和学习数据。 当数据不再用于上述目的，或收到有效的删除请求后，我们会在适用法律要求的期限内删除或匿名化； 因备份轮换、争议处理、安全或法定义务必须暂时保留的数据，将被隔离并在相应期限届满后删除。

删除账号：你可发送邮件至 vereeja@gmail.com 发起账号及关联数据删除申请。为防止他人冒用，我们可能要求使用注册邮箱完成必要的身份核验。 删除将涵盖与账号关联的评论等用户生成内容，但法律要求保留的记录除外。

7. 安全措施

我们采取合理的技术和管理措施，包括 HTTPS 传输、密码安全散列、登录会话保护、角色权限控制、 私有存储、访问限制以及一致性备份。没有任何系统能保证绝对安全；如发生可能影响用户权益的数据安全事件， 我们会依据适用法律采取补救并进行通知。

8. 你的权利与选择

你可以在产品内查看或修改部分账号信息，并可通过联系邮箱请求访问、更正、复制、删除个人信息， 撤回可撤回的同意、注销账号，或就我们的处理方式提出问题和投诉。 撤回对必要数据处理的同意可能导致相关账号、作答、评论或教学功能无法继续使用。

9. 未成年人

本服务可能用于教学场景。不满 14 周岁的用户应在父母或其他监护人阅读并同意本政策后使用本服务； 学校和教师在组织未成年人使用时，应确保已取得所需授权。若监护人认为我们在未获适当同意的情况下处理了未成年人数据， 请通过联系邮箱告知我们，我们将核实并采取删除或其他必要措施。

10. 政策变更与联系

功能或数据处理方式发生变化时，我们会更新本政策，并在本页标注新的生效日期；重大变化会通过站内通知或其他显著方式告知。 如有隐私问题、权利请求或投诉，请联系 vereeja@gmail.com。

1. Scope and operator

This Policy applies to the Ada ICU Question Bank website, mobile apps, and related features that use the same account and servers (the “Service”). The Service is provided by the developer and operator of Ada ICU Question Bank (“we”, “us”, or “our”). Please read this Policy before using the Service. If you do not agree to the processing that is necessary to provide an account, testing, or grading, those features may not be available.

2. Data we process

• Account and identity data: email address, username, nickname, securely hashed password, account role and access status, account creation and last-login times, and session information needed to keep you signed in.
• Learning and MyTests data: tests you create or receive, favorites, mistakes, per-question activity, typed and multiple-choice answers, handwriting and annotations, start and submission times, scores, correction rates, teacher grades, and feedback.
• Class and teaching data: course and class membership, invitations and requests, assigned work, publication status, and teacher notes used to manage students.
• Content you submit: feedback, question notes, and sharing messages. If question comments are enabled and you use them, this also includes your comment, display name, posting time, and necessary moderation status.
• Preferences and essential technical data: interface and export preferences, and limited security or diagnostic records. Servers and cloud infrastructure may briefly process IP address, browser or device type, and request time to deliver connections and prevent abuse. We do not use this data for advertising or cross-service tracking.

We do not request or intentionally collect precise location, contacts, photo library, microphone, camera, health data, financial account data, or advertising identifiers.

3. How data is obtained

Most data is provided directly when you register, answer questions, draw, comment, send feedback, share content, or set preferences. Scores, correction rates, and mistake statistics are generated from your activity. Class, assignment, and grading information is provided by teachers or schools. Limited technical data is generated automatically when the Service is accessed.

4. How we use data

• create and protect accounts, authenticate sign-ins, and provide service across devices;
• save tests, answers, handwriting, favorites, mistakes, and learning progress;
• calculate scores, correction rates, and learning statistics for you and authorized teachers;
• support assignments, teacher grading, and publication of grades and corrections;
• display and moderate question comments if that feature is enabled;
• respond to feedback, secure and troubleshoot the Service, and prevent fraud or abuse; and
• comply with applicable law.

We do not use this data for personalized advertising or tracking across apps or websites.

5. Who may see data

• You: you can see tests, submissions, scores, and learning records associated with your account.
• Authorized teachers: within classes and assignments they manage, teachers can see student identity, submissions, handwriting, scores, correction rates, and grading information.
• Other signed-in users: if comments are enabled, they may see a commenter’s display name, comment, and posting time, but not the commenter’s email address.
• Essential service providers: cloud hosting and object-storage providers host the database, backups, and question images. They process data only to provide infrastructure to us and are subject to contractual, access-control, and legal safeguards.
• Legal requirements: we may disclose data where lawfully required by a court or authority, or where necessary to protect users or Service security.

Except for these necessary circumstances, we do not sell, rent, or share personal data with unrelated third parties, advertising networks, or data brokers.

5A. AI grading data flow and human corrections

When AI grading is used, the browser first sends the request to the Ada ICU Question Bank server. After authentication and authorization, the server selects the relevant question, student response (text or necessary handwriting image), official answer or mark scheme, course prompt, and versioned grading rules, and sends that material over an encrypted connection to the third-party AI model provider configured by an administrator. AI API keys remain on the server and are never sent to the browser. The server validates and stores the returned mark points, feedback, and score before returning them to an authorized user. We do not use direct browser-to-provider requests because doing so would expose keys, official answers, and student data.

AI results are assistive suggestions. A teacher may review, change, and save the final grade. We collect a correction sample to improve AI grading only after the user expressly agrees in the consent prompt. Such a sample may include the student response, the AI opinion, and the human correction. Consent is stored per account, so it need not be given repeatedly, and can be withdrawn under Account Management → More Options. Withdrawal stops future collection and removes student-answer, AI-opinion, and correction-result payloads from previously collected samples.

6. Storage, retention, and deletion

Data is currently stored primarily on servers and backups in mainland China. We retain account and learning data while an account is active and as needed to provide the Service. When data is no longer needed for the purposes above, or after a valid deletion request, we delete or anonymize it within the period required by applicable law. Data that must temporarily remain in rotating backups or for disputes, security, or legal obligations is isolated and deleted when the applicable period ends.

Account deletion: email vereeja@gmail.com to initiate deletion of your account and associated data. To prevent impersonation, we may ask you to verify the request using the registered email address. Deletion includes user-generated content such as comments, unless retention is legally required.

7. Security

We use reasonable technical and organizational safeguards, including HTTPS, secure password hashing, protected sessions, role-based access, private storage, access restrictions, and consistent backups. No system can guarantee absolute security. If a security incident may affect users’ rights, we will take remedial action and provide notice as required by applicable law.

8. Your choices and rights

You may view or change certain account information in the product. You may also contact us to request access, correction, a copy, or deletion of personal data; withdraw consent where applicable; close your account; or ask questions and make a complaint. Withdrawing consent for necessary processing may prevent continued use of the related account, answer, comment, or teaching features.

9. Children

The Service may be used in education. Users under 14 must use the Service only after a parent or legal guardian has reviewed and agreed to this Policy. Schools and teachers organizing use by children must ensure that required authorization has been obtained. A guardian who believes that a child’s data was processed without appropriate consent should contact us so that we can verify and delete it or take other necessary action.

10. Changes and contact

We will update this Policy if our features or data practices change and will post a new effective date here. Material changes will be announced through an in-service notice or another prominent method. For privacy questions, rights requests, or complaints, contact vereeja@gmail.com.