privacy policy

rawdah is built for children and used by families. we collect the minimum we need to make the app work, we don't show ads, and we don't sell or share your family's data for marketing.

the lessons are designed for children aged about 4 to 10, but every account is owned and managed by a parent or legal guardian. a child cannot create an account. during setup the parent verifies an email address, chooses a 4-digit pin for the grown-ups area, and confirms that they are the child's parent or guardian and agree to the processing described here. we record the date of that confirmation.

parent account: your email address (for sign-in by one-time code) and a scrambled form of the 4-digit pin you choose. the pin protects the grown-ups area on your device.

child profile: the first name or nickname you enter and an age band. we don't ask for a last name, birthday, address or photo.

practice history: which lessons were started and finished, when, how long they took, and the flowers earned in the garden. this powers the parent dashboard and lets you restore progress on a new device.

listening results: for the small set of letters where listening is switched on, we keep a record when the app confidently heard the expected letter: the letter, the time, and the arabic text the transcription returned. we do not keep a record of attempts the app could not confirm, and we never keep the audio.

purchases: whether your account has an active rawdah pro subscription. apple handles payment; we never see your card details.

we don't collect your child's last name, date of birth, address, photos, contacts or location. we don't use advertising sdks, tracking pixels or social-media widgets, and we don't build advertising profiles.

most of rawdah is listen, trace and repeat-aloud practice that never uses the microphone. for a small number of letters, your child can hold the microphone button and say the letter's name so the app can confirm it heard them. when that happens:

• the microphone records only while the button is held
• the short clip is sent over an encrypted connection, through our server, to openai's speech-to-text service, which returns text
• rawdah does not store the audio on our servers, and the app deletes the clip from your device as soon as the result comes back
• under openai's api data policy, api audio is not used to train their models and may be retained by openai for up to 30 days for abuse monitoring before deletion
• if you decline microphone access, every lesson still works as listen-and-repeat practice

the listening feature is deliberately narrow. it can confirm that it heard the name of certain letters. it never tells a child that they were wrong, it does not assess vowels, tajweed or fluency, and a confirmation is not a certificate of correct pronunciation. completed lessons show practice, not mastery. please practise alongside your child and rely on a qualified teacher for correction.

practice data is saved on your device first and synced to your account so you can restore it on another device. our database and sign-in are provided by supabase and hosted in the united states. access is restricted so that an account can read only its own family's rows.

we use a small number of providers, each only for the purpose listed:

• supabase — database, sign-in and the one-time-code email
• openai — speech-to-text for the listening feature (audio only, no account or child details)
• apple — in-app purchases and subscription billing
• revenuecat — tells the app whether your subscription is active, using an anonymous account id
• expo — delivers app updates

if we enable crash diagnostics in a future version, we will name the provider here first.

as the parent or legal guardian, you can at any time:

• ask for a copy of the data we hold for your family by emailing us from your account's email address
• ask us to correct or delete a single child profile by emailing us
• delete your whole account from grown-ups area → account → delete account. this signs you out, removes the family's data from the device, and schedules every child profile, practice record and listening result in our database for permanent deletion 30 days later. signing in again within those 30 days cancels the deletion
• withdraw microphone access in ios settings
• cancel your subscription in your apple id settings; deleting the app or your account does not cancel it

depending on where you live you may have further rights under laws such as coppa, gdpr or ccpa. email us and we will respond.

if we make a material change to how we collect or share data, we'll surface a notice in the parent dashboard the next time you open it and email you. you'll have the option to review the change before the new policy takes effect.

questions about privacy, or want to exercise any of the rights above? reach out at contact@sharifventures.co. we usually respond within two business days.