RES Study 隐私政策
生效日期：2026 年 10 月 21 日
本政策说明 RES Study 收集哪些信息、如何使用这些信息，以及你拥有的选择。本政策适用于 RES Study 网站 https://res.bluffking.ai 以及 iPhone 与 Android 版 RES Study App（统称「RES Study」）。
1. 我们是谁
RES Study 由在新加坡注册的 BLUFF KING PTE. LTD.（UEN 202627618H）运营（下称「BluffKing」或「我们」）。
RES Study 是面向新加坡房地产经纪（RES，Real Estate Salesperson）考试的独立学习工具，与新加坡房地产代理理事会（Council for Estate Agencies，CEA）及任何考试机构均无关联，亦未获其认可。
2. 我们收集的信息
2.1 你的账号
RES Study 使用 BluffKing 统一账号。你可以用已有的 BluffKing 账号登录，或用邮箱注册新账号。
- 邮箱与密码。 登录或注册时，RES Study 通过加密连接将你的邮箱和密码转交 BluffKing 账号服务进行验证并建立登录会话。账号服务保存你的邮箱以及经过哈希处理（不可直接读取）的密码。RES Study 自身的服务器不保存你的邮箱或密码。
- 显示名称。 注册时可自行设置显示名称；未设置时使用默认名称。RES Study 会在 App 内显示该名称。
- 账号标识。 RES Study 从 BluffKing 账号服务获得一个随机账号 ID，用于保存你的学习记录。
- 账号邮件。 BluffKing 账号服务可能通过其邮件发送服务商（Resend）向你发送账号相关邮件，例如邮箱验证码。
你的 BluffKing 账号同时受 BluffKing 隐私政策约束：https://bluffking.ai/zh/legal/privacy/
2.2 你的学习记录
登录后，RES Study 会以你的账号 ID 保存：
- 你开始的练习与模考，包括每次的题目、你选择的答案、标记待复查的题目、得分，以及开始、截止和交卷时间；
- 你作答过的每道题最近一次是否答对（用于错题本和统计），以及是否已收藏。
这些记录仅用于为你提供服务：保存与恢复进度、评分、模考计时、学习记录、统计、错题本、收藏，以及为新模考优先挑选以往模考中未出现过的题目。
免费试做（5 道样题）无需账号。试做答案只在 App 内判分，不会保存到我们的服务器。
2.3 Cookie 与设备本地存储
- 登录 Cookie。 登录后，RES Study 会设置一个第一方 Cookie
__Host-res_session，用于保持登录状态。它带有 Secure 与 HttpOnly 属性（网页脚本无法读取），只发送给 res.bluffking.ai，最长保留 365 天，退出登录即失效。每次请求都会向 BluffKing 账号服务核验，因此退出登录或修改密码后即无法继续访问。
- 设备本地存储。 RES Study 会在设备上保存你的界面语言；作答过程中，还会暂存尚未保存到账号的答案（以免网络中断时丢失），保存成功后即删除。
- 学习提醒（仅 App）。 如你开启每日学习提醒，提醒时间与开关设置保存在你的设备上，由设备系统以本地通知方式安排提醒，不会发送到我们的服务器。你可随时在 App 内或设备设置中关闭提醒。
- 我们不使用广告 Cookie、第三方 Cookie，也不进行跨网站追踪。
2.4 技术信息
- 与一般网站相同，我们的网络与安全服务商 Cloudflare 会处理连接信息（例如 IP 地址、设备与浏览器类型、请求时间），用于提供 RES Study 并防范攻击。
- RES Study 自身的服务器不保留逐条请求的访问日志。服务器仅在内存中短暂使用你的 IP 地址来限制异常流量（例如过多的登录尝试），不会保存。错误日志不记录密码、Cookie 或请求内容。
2.5 通过 WhatsApp 反馈
App 内的「反馈」入口展示联系邮箱、WhatsApp 二维码和电话号码。如你选择给我们发消息，我们会收到你发送的内容以及 WhatsApp 提供给我们的信息，例如你的 WhatsApp 名称和电话号码。这些信息仅用于回复你、修复问题和改进 RES Study。WhatsApp 由 WhatsApp LLC（Meta）按其自身条款与隐私政策运营。是否联系我们由你自行决定。
3. 我们不做的事
- 不投放广告，不接入广告网络。
- 不使用第三方分析或追踪 SDK，不跨其他公司的 App 或网站追踪你。
- 不出售或出租你的个人信息，也不将其用于营销共享。
4. 我们如何共享信息
我们只在运营 RES Study 所必需的范围内共享信息：
- BluffKing 账号服务（由我们运营），用于登录和核验会话。
- 服务商：为我们托管和提供服务的机构，例如 Cloudflare（网络与安全）和 Resend（BluffKing 账号服务发送的账号邮件）。它们只能为向我们提供服务而使用这些信息。
- 法律原因：法律要求时，或为保护用户与服务的权利、安全时。
5. 保留期限
- 学习记录在你的账号存续期间保留，删除账号时一并删除（见第 6 节）。
- 登录 Cookie 最长 365 天后过期，退出登录时提前失效。
- 反馈消息仅在处理你的请求所需期间保留。
6. 删除账号与数据
你可以在 App 内或网站上删除账号：登录后从菜单打开 设置与反馈，选择 删除账号，并按提示确认。
确认后：
- 你的 RES Study 记录（练习与模考、答案、得分、错题本、收藏和学习记录）立即删除，无法恢复。
- 你的 BluffKing 账号 立即停用，所有设备上的登录随之退出。由于 RES Study 使用 BluffKing 统一账号，这与你在其他 BluffKing 服务中使用的是同一个账号，删除后将在所有 BluffKing 服务中移除。
- 恢复期。 BluffKing 账号会在申请删除 30 天后永久删除。30 天内重新登录即可恢复 BluffKing 账号；但上述已删除的 RES Study 记录不会恢复。永久删除完成时，BluffKing 会读取账号已验证的注册邮箱，并立即尝试发送一封确认邮件；该邮箱地址不会为此另行保存，发送失败也不会延长保留。
- 删除记录。 为确保删除生效、防止删除前发出的请求重新写入数据，RES Study 会保留一条最小的删除记录（仅账号 ID、删除时间以及删除是否仍在处理中，不含邮箱或学习数据），自删除起 31 天后自动清除（每 6 小时检查一次，最迟约 31.25 天）。
如你无法使用 App，也可以通过 WhatsApp（第 10 节）请我们删除账号。详细步骤见 https://res.bluffking.ai/support。
7. 安全
所有与 RES Study 的连接均使用 HTTPS 加密。登录会话保存在 HttpOnly、Secure 的 Cookie 中，绝不放在网址里。密码只由 BluffKing 账号服务处理，并以哈希形式保存。没有任何存储或传输方式是绝对安全的，但我们会尽力保护你的信息。
8. 儿童
RES Study 是为准备专业考试的成年人设计的学习工具，并非面向儿童。BluffKing 账号仅供 18 岁或以上用户使用。我们不会在知情的情况下收集儿童的个人信息。如你认为有儿童注册了账号，请联系我们。
9. 你的权利
在适用法律（包括新加坡《个人数据保护法》）允许的范围内，你可以要求查阅或更正你的个人信息，或撤回同意。大部分学习记录可直接在 App 内查看，你也可以随时删除账号。如需提出请求，请联系我们（第 10 节）。
10. 联系我们
通过邮箱 [email protected] 联系我们，或在帮助与支持页面查看 WhatsApp 二维码和电话号码。
11. 政策变更
我们可能更新本政策，并会在本页面发布新版本及新的生效日期。如变更对我们使用你信息的方式有重大影响，我们会在生效前通过 App 或网站告知。
RES Study Privacy Policy
Effective date: 21 October 2026
This policy explains what information RES Study collects, how we use it and the choices you have. It covers the RES Study website at https://res.bluffking.ai and the RES Study apps for iPhone and Android (together, "RES Study").
1. Who we are
RES Study is operated by BLUFF KING PTE. LTD. (UEN 202627618H), a company incorporated in Singapore ("BluffKing", "we", "us").
RES Study is an independent study tool for the Singapore Real Estate Salesperson (RES) examination. It is not affiliated with, endorsed by or connected to the Council for Estate Agencies (CEA) or any examination provider.
2. Information we collect
2.1 Your account
RES Study uses BluffKing accounts. You can sign in with an existing BluffKing account or create one with your email address.
- Email address and password. When you sign in or register, RES Study passes your email address and password over an encrypted connection to the BluffKing account service, which checks them and creates your session. The account service stores your email address and a hashed (not readable) form of your password. RES Study's own servers do not store your email address or password.
- Display name. You may choose a display name when you register. If you do not, a default name is used. RES Study shows it in the app.
- Account identifier. RES Study receives a random account ID from the BluffKing account service and uses it to keep your study records.
- Account emails. The BluffKing account service may send you account emails, such as an email verification code, through its email delivery provider (Resend).
Your BluffKing account itself is also covered by the BluffKing Privacy Policy: https://bluffking.ai/en/legal/privacy/
2.2 Your study records
When you are signed in, RES Study stores, linked to your account ID:
- the practice sessions and mock papers you start, including the questions in each session, your selected answers, questions you flag for review, your score and the start, deadline and submission times;
- for each question you have answered, whether your latest answer was correct (this powers your mistake book and statistics), and whether you bookmarked it.
We use these records only to provide the service to you: saving and restoring your progress, scoring, mock timers, history, statistics, the mistake book, bookmarks, and choosing mock questions you have not had in earlier mocks.
The free trial (5 sample questions) works without an account. Trial answers are checked in the app and are not saved to our servers.
2.3 Cookies and on-device storage
- Session cookie. After you sign in, RES Study sets one first-party cookie,
__Host-res_session. It holds your sign-in session, is marked Secure and HttpOnly (page scripts cannot read it), is sent only to res.bluffking.ai, and lasts up to 365 days or until you sign out. Each request is checked with the BluffKing account service, so signing out or changing your password ends access.
- On-device storage. RES Study stores your interface language and, while you answer, a temporary copy of answers that have not yet been saved to your account (so they are not lost if your connection drops). The temporary copy is removed once your answers are saved.
- Study reminders (apps only). If you turn on daily study reminders, the reminder time and on/off setting are stored on your device, and the reminders are scheduled by your device's operating system as local notifications. Reminder settings are not sent to our servers. You can turn reminders off in the app or in your device settings at any time.
- We do not use advertising cookies, third-party cookies or cross-site tracking.
2.4 Technical information
- Like any website, our network and security provider, Cloudflare, processes connection information such as your IP address, device and browser type and request times to deliver RES Study and protect it from attacks.
- RES Study's own server does not keep per-request access logs. It uses your IP address briefly in memory to limit abusive traffic (for example, too many sign-in attempts) and does not store it. Our error logs do not record passwords, cookies or the content of your requests.
2.5 Feedback via WhatsApp
The app’s Feedback option displays our email address, WhatsApp QR code and phone number. If you choose to message us, we receive what you send and the details WhatsApp shares with us, such as your WhatsApp name and phone number. We use these only to reply to you and to fix problems or improve RES Study. WhatsApp is operated by WhatsApp LLC (Meta) under its own terms and privacy policy. Contacting us is optional.
3. What we do not do
- No advertising and no ad networks.
- No third-party analytics or tracking SDKs, and no tracking across other companies' apps or websites.
- We do not sell or rent your personal information, and we do not share it for marketing.
4. How we share information
We share information only as needed to run RES Study:
- BluffKing account service (operated by us) to sign you in and verify your session.
- Service providers that host and deliver the service for us, such as Cloudflare (network and security) and Resend (account emails sent by the BluffKing account service). They may use the information only to provide their services to us.
- Legal reasons, if required by law or to protect the rights, safety and security of our users and service.
5. How long we keep information
- Study records are kept while your account exists and are deleted when you delete your account (see section 6).
- The session cookie expires after up to 365 days, or earlier when you sign out.
- Feedback messages are kept only as long as needed to handle your request.
6. Deleting your account and data
You can delete your account from inside the app or on the website: sign in, open Settings & feedback from the menu, and choose Delete account. You will be asked to confirm.
When you confirm:
- Your RES Study records (sessions, answers, scores, mistake book, bookmarks and history) are deleted immediately. They cannot be restored.
- Your BluffKing account is deactivated immediately and you are signed out on all devices. Because RES Study uses your BluffKing account, this is the same account you use for other BluffKing services, and deleting it removes it from all of them.
- Recovery window. The BluffKing account is permanently deleted 30 days after your request. If you sign in again within those 30 days, your BluffKing account is restored. RES Study records deleted under the first point are not restored. When the permanent deletion is complete, BluffKing reads the account's verified registered email address and immediately attempts to send a confirmation email; the address is not stored separately for this, and a failed send does not extend how long it is kept.
- Deletion record. To make sure the deletion sticks and requests sent before it cannot write data back, RES Study keeps a minimal deletion record (only the account ID, the deletion time and whether the deletion is still being processed; no email or study data) and erases it automatically 31 days after the deletion (checked every 6 hours, so at most about 31.25 days).
If you cannot access the app, you can also ask us to delete your account via WhatsApp (section 10). Step-by-step instructions are on https://res.bluffking.ai/support.
7. Security
All connections to RES Study use HTTPS encryption. Sessions are kept in an HttpOnly, Secure cookie and are never placed in URLs. Passwords are handled only by the BluffKing account service and stored in hashed form. No method of storage or transmission is completely secure, but we work to protect your information.
8. Children
RES Study is a study tool for adults preparing for a professional examination. It is not directed at children, and BluffKing accounts are for users aged 18 or over. We do not knowingly collect personal information from children. If you believe a child has created an account, please contact us.
9. Your rights
Subject to applicable law, including Singapore's Personal Data Protection Act, you may ask to access or correct your personal information, or withdraw consent. Most study records are visible in the app, and you can delete your account at any time. To make a request, contact us (section 10).
10. Contact us
Email us at [email protected], or find our WhatsApp QR code and phone number on the Help & support page.
11. Changes to this policy
We may update this policy. We will post the new version on this page with a new effective date, and if a change materially affects how we use your information, we will give notice in the app or on the website before it takes effect.