Your documents get you scholarships — they should never get you spam. Here's exactly what we collect, why, and how to make us delete it.
Last updated: October 30, 2026
Account data: your name, email, phone number, and role (student, mentor, professional, teacher, or parent) when you register.
Attribution data: how you heard about us (for example Facebook, Instagram, TikTok, or another source you describe). We ask this at signup, and may ask again after login if it was not collected yet — including for accounts created by our staff.
Application data: documents you upload for scholarship and visa support — transcripts, passports, essays, and recommendation letters. You always choose what to share.
Learning data: course progress, HSK mock results, and lesson attendance, used to personalize your study plan.
Technical data: device type, browser, and usage analytics collected through cookies, used to keep the platform fast and secure.
To deliver the services you asked for: running your courses, preparing your applications, matching you with mentors and scholarship programs in your field.
To communicate with you about deadlines, lessons, and application status — and, if you opt in, about new programs and guides.
To understand which channels bring students to Rythminno so we can improve outreach. Attribution answers are never sold and are not used to target ads against you personally.
To improve the platform through aggregated, de-identified analytics. We do not sell your personal data. Ever.
Account data is kept while your account is active. Application documents are deleted 24 months after your last application concludes, or immediately on request. Financial records are retained as long as tax law requires.
When you delete your account, personal data is removed within 30 days, except where the law requires longer retention.
You can access, correct, download, or delete your personal data at any time — from your account settings or by emailing [email protected]. You can also object to processing or withdraw consent for optional uses like marketing.
We answer every privacy request within 30 days, free of charge.
Data is encrypted in transit and at rest. Access to application documents is limited to the advisors working on your file. We review access logs regularly and require two-factor authentication for all staff accounts.
No system is perfectly secure. If a breach affects your data, we will notify you and the relevant authority within 72 hours of confirming it.
The platform is not directed at children under 16. Parent accounts exist so guardians can explore programs on behalf of their children — the child's data is only collected when an application actually begins, with guardian consent.
When this policy changes materially, we notify you by email and in-app before the changes take effect. Past versions are available on request.
Questions about this document? Write to [email protected] — a human reads every message.