privacy policy

rawdah is built for children, used by families. that means privacy isn't a feature — it's the foundation. we collect the minimum we need to make the app work, and we treat every recitation, recording, and progress note as your child's alone.

the app is designed for children ages 4 to 10, but accounts are owned and managed by a parent (or a teacher, with the parent's consent). a child cannot create an account by themselves. the parent provides the email, the pin, and the consent to use the app. this satisfies the children's online privacy protection act (coppa) requirements.

parent / teacher account: email address (for sign-in via one-time code) and a 4-digit pin you choose for the parent gate.

child profile: the child's first name (or nickname) and an age band (4–5, 6–8, 9–10). we don't collect a last name, birthday, address, or photo.

progress: which letters your child has met, how many attempts they made, how long lessons took. this is what powers the parent dashboard.

recordings of your child: when your child holds the mic and says a letter, a short audio clip is captured. by default, recordings stay on your device. see the “recordings” section below.

we don't collect your child's last name, date of birth, exact address, photos, contact list, or any biometric identifier. we don't fingerprint the device. we don't use third-party advertising sdks. nothing in the child-facing screens loads tracking pixels, analytics beacons, or social-media widgets.

every “say” beat captures a brief recording so the app can grade pronunciation. how we handle it:

• recordings live in the app's sandbox on your device by default
• each recording is sent to a quranic-arabic speech-recognition service (currently tarteel.ai's open-source whisper model, served via hugging face inference) for grading, then discarded by the service — not stored, not used to train models
• we don't upload recordings to our own servers unless you explicitly enable a future “share with my teacher” feature
• uninstalling the app deletes every local recording

rawdah uses an open-source arabic speech-recognition model fine-tuned on quranic recitation. the model returns a transcript that we compare against the expected letter. it is a learning aid, not a tajweed certification. confidence thresholds are tunable per parent (patient, standard, strict) and we explicitly accept common child substitutions (e.g. ‘ث’ pronounced as ‘س’) so a young learner isn't penalized for natural articulation.

if you enable cloud sync (used to access the same child profile across devices, and required for teacher classrooms), the following data is sent to our cloud (supabase, hosted in the united states):

• parent / teacher account record (email, hashed pin)
• child profile (first name, age band, progress counters)
• classroom membership and assignment completions (if the child is enrolled by a teacher)

recordings are not synced by default. classrooms only see whether an assignment was completed — never the underlying audio.

we use a small number of essential service providers. each is bound by a data-processing agreement and processes data only on our instructions:

• supabase — database and authentication (parent / teacher accounts, child profiles, progress)
• hugging face / tarteel.ai whisper — speech recognition for the “say” beat (audio not stored)
• resend — transactional email delivery (the one-time sign-in code)
• apple — subscription billing and in-app purchases
• sentry — crash diagnostics for parent dashboard only (never loaded in child-facing screens)

as the parent (or legal guardian), you can at any time:

• review the data we hold for your child by emailing us
• export your child's progress as a json file from the parent dashboard
• delete the child profile (and all associated cloud data) from settings
• delete your entire account, which deletes all child profiles attached

we honor all applicable rights under coppa, gdpr (and gdpr-k), ccpa, and equivalent laws.

if we make a material change to how we collect or share data, we'll surface a notice in the parent dashboard the next time you open it and email you. you'll have the option to review the change before the new policy takes effect.

questions about privacy, or want to exercise any of the rights above? reach out at contact@sharifventures.co. we usually respond within two business days.