Legal

Privacy notice

For Mingby, operated by Dashboard Executive, LLC (United States). Last updated 26 September 2026.

1. Who is responsible

The controller is Dashboard Executive, LLC, a United States company. We offer Mingby to people in the United States, the European Economic Area (EEA), the United Kingdom, and elsewhere.

Privacy and data-rights contact: the contact form.

2. What we collect and why

We collect only what we need to run Mingby. We do not buy lists or run advertising pixels. We do use Google Analytics (GA4) for pageviews and usage analytics, as described below.

• Account. Email and sign-in identifiers from our account service. If you use a social sign-in button, that provider sends us an identifier and the email they hold for you. Legal basis (GDPR): contract (Art. 6(1)(b)).
• Your study work. Pages and text you submit, generated Chinese lessons, pinyin and English support, audio references, worksheets, flashcard decks, flags, and archive. Basis: contract.
• Usage and billing state. How many story lessons you add in a period, your plan, and payment-processor customer or subscription ids. We do not store full card numbers. Basis: contract, and legal obligation for invoices and tax where they apply (Art. 6(1)(c)).
• Contact form. Name, email, message, and your tick that we may reply. Basis: consent (Art. 6(1)(a)). You can withdraw by writing to us; that does not undo a reply already sent.
• Usage analytics. Pageviews and basic site-usage events via Google Analytics 4 (GA4). Google may set cookies on your device for this. Basis: legitimate interests (Art. 6(1)(f)) - understanding how Mingby is used so we can improve it. You may object.
• Security logs. Short-lived technical records (for example failed sign-in or errors) to keep the service up and stop abuse. Basis: legitimate interests (Art. 6(1)(f)) - running a secure product. You may object.

Sources: you, your device (essential local storage and analytics cookies where set), our sign-in service, optional social sign-in if you choose it, our payment processor if you pay, and Google Analytics for pageviews/usage.

We do not use your lessons or contact messages to profile you for ads. We do not make solely automated decisions that produce legal or similarly significant effects (GDPR Art. 22).

3. Who we share with

We use other companies only to run Mingby. GDPR lets us name categories of recipients. We do not publish a vendor list here. You may ask for more detail through the contact form.

• Cloud hosting and file storage (United States).
• Account sign-in.
• A writing service that turns your link or text into Chinese.
• A speech service that reads sentences aloud.
• A payment processor, if you subscribe. They are an independent controller for the card itself.
• A social sign-in provider, only if you tap that button.
• Google Analytics (GA4), for pageviews and usage analytics. Google may process data as described in Google's privacy materials.

They may process data only to provide that service to us, except where they are independent controllers for their own sign-in or payment. We do not sell personal information. We do not share it for cross-context behavioural advertising.

4. Transfers outside the EEA and UK

Dashboard Executive, LLC and several providers are in the United States. When we move EEA or UK data to the US we rely on:

• the EU - US and UK - US Data Privacy Framework, where the recipient is certified, and/or
• the European Commission's standard contractual clauses (and the UK addendum) with the processor.

You can ask us for more detail about a transfer using Contact.

5. How long we keep it

• Account and lessons: while the account is open, then we delete them when you use Delete account. An active plan is cancelled at the same time so you are not billed again. The payment processor keeps its own records as the law requires. A short security log may remain.
• Contact messages: long enough to reply and for a limited security record (typically up to 24 months unless a dispute needs longer).
• Local storage on your device: until you clear it or delete the account.
• Google Analytics records: retained per Google's GA4 retention settings for the Mingby property (we do not keep a separate long-term copy of those events).

6. Your rights in the EEA and United Kingdom

You may: access your data; correct it; erase it; restrict or object to some processing; port it in a common format; withdraw consent; and not be subject to prohibited automated decisions. Use Contact or Delete account in Account. We will respond within one month (we may extend by two months for a complex request, and we will say so).

You may complain to your lead supervisory authority. In the UK that is the Information Commissioner's Office (ICO). In the EEA it is the authority of your EU member state of residence.

7. Your rights in the United States

If a state privacy law applies to you (including California CCPA/CPRA, and similar laws in other states), you may request to know, correct, or delete personal information, and to receive a copy. We will not discriminate against you for exercising these rights. We may need to verify that the request comes from the email on the account. An authorized agent may submit a request if state law allows it; we may still need to verify you.

Categories we collect are listed in section 2. We disclose them to the service providers in section 3 for the business purposes of providing Mingby, paying, security, and answering you. Retention is in section 5. We do not sell or share personal information as those terms are defined in the CCPA. We do not use sensitive personal information to infer characteristics about you for advertising.

To appeal a refused request, reply to our decision using Contact.

8. Cookies and local storage

We use essential local storage and session tokens so you stay signed in and so decks and pages work on this device. We also use Google Analytics 4 (GA4) for pageviews and usage analytics; Google may set cookies for that purpose. We do not set advertising cookies and we do not use a marketing pixel. Essential stores are strictly necessary for the service. Analytics cookies are used so we can see how the site is used; see Google's privacy materials for how Google handles that data.

9. Children

Mingby is for people 16 or older. We do not knowingly collect data from children under 16 (or under 13 where US COPPA applies). If you think we have, contact us and we will delete it.

10. Security

Sign-in is handled by our account service. Payments are handled by our payment processor. Access to our systems is limited. No method is perfect. If you think an account was misused, use Contact.

11. Changes

If we change this notice in a material way, we will update the date above. If the change needs consent under GDPR, we will ask for it.

This notice describes our practices so you can use Mingby. It is not legal advice. For a contract question see Terms.