Privacy Policy — ArabicPro

ArabicPro ("the app", "we") helps you learn to read Arabic: the alphabet, the Madinah courses, the words of the Quran and a library of books. This page says exactly what data the app collects, why, who receives it and how to erase it. The app is published by SMFK NOUR LLC (see the foot of the page).

What we collect

Your account: email address and display name, from sign-up or from Google / Apple if you sign in that way. Used to identify you and to restore your progress on another device. In guest mode no email or name is asked for: the app creates an anonymous account with a technical identifier, which you can later link to an email, Google or Apple.
Your age: who is going to learn (you or your child) and the learner's year of birth, without the day or month. They are used only to know whether a parent's consent is needed (see "Children and parents").
Your profile photo (optional): the image you pick yourself from your photos. It is stored in Google Firebase Storage, and its address in your profile.
Your progress: completed lessons, time spent in sessions, scores, streak, experience points, letters and words due for review, mistakes, reading positions, bookmarks, selected vocabulary and book study sessions. Initial assessment responses, the level and goal you state, and your chosen starting point help adapt your learning path. Your device's time zone offset is saved with each lesson so that streak days can be counted. This data also lets you resume reading and reviews across your devices.
Your preferences: language, audio speed, daily goal, sounds, vibrations, notification and email settings, and your choice to appear or not under your first name on the leaderboard.
Notifications: if you turn them on, your phone asks for permission, and Expo's notification service gives the app a token specific to your device, saved in your profile. Daily reminders are scheduled on your device.
Subscription status, handled by RevenueCat. The app gives it the technical identifier of your account; RevenueCat also receives the state of your purchases and technical information about the device, needed to manage subscriptions. It receives neither your name nor your email. Our server asks RevenueCat to check your entitlements before giving you access to a paid book or to reading analysis.
Error reports, on by default, and you can refuse them: they follow the "Report crashes" setting. They are used to find and fix crashes, which is our legitimate interest in keeping the app working. When it is on, Google Firebase Crashlytics and Sentry receive the device model, the OS and app versions, the technical detail of an error, the last steps before the error and the technical identifier of your account. Sentry also receives a sample of one tenth of the slowness measurements. The app sends them neither your email, nor your name, nor your voice recordings, and does not ask Sentry to keep the IP address. When it is off, no report is sent, from the moment you turn it off and on every later launch, and crash reports left on the device are deleted without being sent. Nothing is sent before the app has read this setting at startup. For a child's account, error reports are always off. This setting is separate from "Help improve ArabicPro", which only covers usage statistics.
Usage statistics, optional and off by default: if you turn on "Help improve ArabicPro" in the settings, Google Firebase Analytics receives usage events (lesson started or finished, screen opened, purchase, etc.) linked to the technical identifier of your account or guest profile. No name, email, free-text answer or audio recording. Advertising and the advertising identifier are disabled. Google may derive an approximate region from your IP address. You can stop this collection at any time.
Voice recordings: see "Reading aloud" below.

What we do not collect

No payment data. Purchases go through the App Store or Google Play, which never pass your card details to us.
No precise location: no GPS.
No contacts or camera access. The microphone is used only when you start a recording, and your photos are read only if you pick a profile image yourself.
Nothing is sold, and nothing is used for advertising or advertising tracking.

The leaderboard

The leaderboard compares the experience points of the period. Other learners see your experience points, your streak and a pseudonym generated from the date your account was created, never your email or your technical identifier. Your first name and profile photo appear only if you turn on "My name on the leaderboard" in the settings. That option is off by default. Under 16, the leaderboard is hidden: the learner does not see it and is not on it.

Reading aloud

The microphone has three uses. Oral practice (repeating a syllable, listening back) stays on your device when you use playback alone. The app deletes the recording when you delete it or leave the screen. Under 16, the learner's voice is sent nowhere without a parent's separate consent (see "Children and parents").

Voice checking is available with Essential and Plus for a published vowelled letter, syllable or word. When you choose "Send my reading", the recording (up to 6 seconds) is sent to the ArabicPro server to be compared with the expected forms by Muaalem, hosted on our private Google Cloud Run service. It is then discarded: no recording or transcription is kept. Feedback says "correct", gives the form heard or says "unsure". If the connection is lost, the app temporarily keeps the same recording on your device for an explicit retry with the same identifier. It deletes it after feedback, when you delete it or leave the session. A technical feedback receipt and a digital fingerprint that cannot be played back manage usage limits and duplicates. They are linked to your account and included in account deletion. Voice checking currently awards no success, XP or learning observation.

Guided reading is part of the Plus plan. Until it is available in your version of the app, no recording is possible in the books and nothing is sent. Once available, playback alone stays on your device. When you select "Analyse my reading", your recording (30 seconds at most) is sent to the ArabicPro server and then to Deepgram to transcribe the spoken words. We request that these recordings be excluded from model training. The app and our server delete their temporary audio files after processing or when the session closes. The app does not offer recording storage for human review.

The result (the recognised text and the word comparison) lets you recover an interrupted analysis and is removed from our server within 24 hours. The duration, a digital fingerprint of the recording (which cannot be used to play it back) and its technical identifiers remain linked to your account to track Plus minutes and prevent duplicate requests. A lost response never triggers an automatic resubmission. Reading data linked to your account is included in account deletion. The feedback compares recognised words; it does not certify pronunciation or vowel mastery.

Who receives this data

These providers process data on our behalf, only for the service described:

Google Firebase: sign-in (Authentication), database (Data Connect), profile photo and sounds (Storage), crash reports (Crashlytics) unless you turn off "Report crashes" and, if you turn on "Help improve ArabicPro", usage statistics (Analytics).
Our server, hosted on Google Cloud: the book library, reading analysis and emails to parents.
Our email provider, hosted in the European Union (Brevo): it sends the emails to parents. It receives the parent's address and the content of the email.
Sentry: error reports, unless you turn off "Report crashes".
RevenueCat: subscriptions.
Deepgram: transcription, only when you ask for a reading analysis.
Expo: notification token.

Other services receive data without acting on our behalf. Apple and Google, when you sign in with their account or make a purchase, apply their own terms. Verse recitations are streamed from EveryAyah (everyayah.com), which sees your device's IP address while you listen. Letter and word sounds come from the app or from our Google Firebase storage.

Where it is stored

Your account and progress are stored with Google Firebase. The database, our server and our email provider are in the European Union; other Google services, Sentry, RevenueCat, Deepgram and Expo may process data in the United States. Each user can read and change only their own data; this is enforced by server-side security rules, not only by the app. The leaderboard, described above, is the only exception.

On your device, the app keeps an offline copy of your progress, your reviews and your downloaded books, as well as your preferences. Uninstalling the app erases them; your account stays with us until you delete it.

How long we keep it

As long as your account exists. When you delete your account, your profile, photo, progress, reviews, achievements and reading data are erased from the database immediately; technical backups disappear within 30 days. A minimal technical record (the identifier of the deleted account and the date) is kept so that a leftover session cannot recreate it.

Data already received by our providers follows their own retention. Error reports (Google, Sentry) and usage statistics events are not erased by deleting the account; they expire according to each service's retention, up to 90 days for Google crash reports. RevenueCat, Apple and Google keep purchase history under their accounting rules.

A guest profile (no email address, no Google or Apple sign-in) that has not been used for 30 days is erased, with all its data: profile, progress, reviews, achievements and reading data. To keep your progress, link your profile to an email, Google or Apple before then. You can also write to us to ask for its erasure sooner.

Your rights

At any time you can:

Delete your account from inside the app: Profile → gear (Settings) → Danger zone → Delete my account. It is permanent and immediate. Without the app, write to us.
Request a copy of your data, its correction, or its portability, by writing to support@arabicpro.app.
Turn off usage statistics in Settings → "Help improve ArabicPro", refuse error reports in Settings → "Report crashes", turn off notifications in the app's settings and in your phone's settings, and keep your name off the leaderboard (the default).

We answer within 30 days. If our answer does not satisfy you, you may contact your country's data protection authority.

Children and parents

From the age of 16, you can create your account yourself. Under 16, a parent creates the account and gives their consent, confirmed by email. One account is for one learner only. This part is for the parent.

What we keep in addition

Your child's year of birth, without the day or month.
A first name or a nickname, if you wish. It is used only in the emails we send you.
Your parent email address, kept separately, even if it is also the account's sign-in address. With it, the language of your emails and the phone's time zone.
Your consents: the date, the version of the text you accepted, your general consent and your consent for the voice. Every change is recorded.

Why

To ask for your consent and keep proof of it. To send you a link if you forget the parent code. To write to you about your child's account. And for the weekly report, if you ask for it. This data is not sold and is never used for advertising. There is no advertising in the app. On a child's account, usage statistics and error reports are always off, even if "Help improve ArabicPro" or "Report crashes" is on.

Your consent

After setup, we send you an email. Its link is valid for 7 days. It opens a short page where you give your consent.
On that page, a separate box, left unticked, covers the voice.
Until you confirm, your child can learn. But their voice is not sent and no report goes out. We remind you once. With no answer after 14 days, we erase your email address.
The consent of one parent is enough. The other parent can object by writing to us.
You can withdraw your consent for the voice at any time, from the parent space. To withdraw your general consent, delete your child's account or write to us.

The parent code

During setup, you choose a 4-digit code. It protects the parent space and the subscription. If you forget it, we send your email address a link to choose a new one.

Voice and leaderboard

Under 16, your child's voice does not leave the phone unless you have accepted it separately. Without that consent, voice checking and guided reading send nothing. Your child can still record and listen back on the device. The leaderboard is hidden: your child does not see it and is not on it.

The weekly report

If you ask for it, we may send you a short email each week: days and minutes of learning, sessions completed, letters learned, reviews, and one letter to go over together. No points, no streak, no comparison with other children. Every email has a link to stop it in one click. Stopping the report does not delete the account.

How long

An unconfirmed email address is erased after 14 days.
Your address, your consents and the list of reports sent are kept as long as your child's account exists. They are erased with it, like the rest of the account (see "How long we keep it" above).

Erasure

You can delete your child's account from the parent space, or by writing to us from your parent address. You can also ask us for a copy of your child's data or for its correction. If you believe a child under 16 created an account without you, write to us and we will erase it.

Changes

If this policy changes, the date at the top changes and the new version is published in the app and at arabicpro.app/privacy.

ArabicPro is published by SMFK NOUR LLC, a limited liability company registered in New Mexico, USA. Address: 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA.