Arabic Letter Journey is a parent-managed educational app for children. A grown-up creates and owns the account; children never sign in, never enter personal details, and never see advertising. This policy explains exactly what the app stores and what it refuses to collect.
Who is responsible
The publisher of Arabic Letter Journey is the data controller for account and learning data. Requests about this policy go to the contact address at the bottom of this page.
Children
Children do not hold accounts. A learner profile is a nickname, an age band, and a built-in avatar chosen by the grown-up. No child-identifying information is requested, and nothing a child does in the app is used for advertising, profiling, or sale. Purchases and account changes sit behind a grown-up gate.
What is stored
Parent account details (email address, name if supplied, verification state, hashed password or OAuth identifier); learner profiles (nickname, age band, built-in avatar id, learning settings); bounded progress summaries (which letter or word was practised, a rounded accuracy score, mastery state, and counts); active-time totals per day; and subscription state.
What is never collected
No raw tracing coordinates leave the device. No exact birthdate, child email address, photograph, voice recording, location, contact list, camera data, advertising identifier, push token, or third-party analytics event is collected. There are no advertising SDKs and no behavioural tracking of any kind.
Data kept on the device
Progress is written on the device first so the app works offline, then synced to the parent account. The parent PIN is stored in the device keychain or keystore and never sent to the server.
Why we may process this data
Account and learning data is processed to perform the contract with the grown-up account holder. Billing data is processed to meet legal and tax obligations. Where consent is the basis, such as local reminder notifications, it is requested explicitly and can be withdrawn in the grown-up area at any time.
Service providers
The first-party API stores account and learning data. Apple, Google, RevenueCat, and Stripe process billing data only when a grown-up chooses a purchase. Email verification and password reset messages are delivered by an email relay provider. No provider receives learning data for its own purposes.
Retention
Profiles and progress remain until the grown-up resets a profile, deletes a profile, or deletes the account. Daily activity totals follow a 90-day rolling retention policy. Deleting the parent account removes all owned profiles and learning data.
Your rights and controls
From the grown-up area you can export a full JSON copy of the account, reset a profile’s progress, delete a profile, or delete the entire parent account. You may also request access, correction, restriction, portability, or erasure by email, and you may complain to your local data protection authority.
Where data is held
Account and learning data is stored on servers in the European Union. Billing providers may process data in other countries under their own standard contractual clauses.
Security
Traffic is encrypted in transit. Passwords are stored only as salted hashes. Access to the production database is limited to the publisher, and backups are encrypted.
Changes to this policy
Material changes are announced in the app before they take effect. The date at the top of this page always reflects the current version.
Contact
Write to sakanhomes@gmail.com for any privacy, billing, or account request. We reply within 3 working days.
Arabic Letter Journey
A calm journey through Arabic letters for children and their grown-ups.