Privacy Policy

1. Who is responsible

[Company name] operates Mubtadaʾ and is the controller of your data. Contact: hello@mubtada.app.

2. What we collect

Account

• Email address and a password (stored hashed — we never see it).
• The first name and age band you give the tutor, so lessons are pitched to you.

Learning

• Your answers in the placement interview and its summary.
• Your progress: which concepts you've studied, scores, mistakes the tutor is watching, and your review schedule.
• Written answers you submit for grading, and messages you send the tutor in chat.
• Where you are inside a lesson, so you can resume.

Subscription

• Your subscription status, plan and renewal or trial end date, as reported by the store via RevenueCat. We never see your card details.

Device

• A push notification token, only if you turn reminders on.
• Your device's time zone offset and chosen reminder hour, only if you turn reminders on.

We do not collect location, contacts, photos, or advertising identifiers.

3. Why we use it

• To run your account and sign you in.
• To write lessons for you, grade your answers and answer your questions — this is the product.
• To bill you correctly for a subscription bought through Apple or Google.
• To send the notifications you asked for: a lesson being ready, a daily nudge, a trial-ending reminder.
• To fix problems and improve the tutor. We may review anonymised lesson output for quality.

4. AI processing

Lessons, grading and chat replies are generated by a large language model provided by Moonshot AI. To do that, we send it the text needed for the task: your first name, the concept being taught, your progress summary, your written answer or message, and recent chat turns. We do not send your email address or subscription details. Our provider processes this under its API terms and does not, to our knowledge, use API data to train its models; we will update this section if that changes.

5. Who else handles your data

• Convex — hosts our database and runs our backend.
• RevenueCat — manages subscriptions and receipts from the App Store and Google Play.
• Apple / Google — process payments under their own privacy policies.
• Expo — delivers push notifications to your device.
• Moonshot AI — generates lessons and feedback, as described above.

These providers act on our instructions. We do not sell or rent your data to anyone.

6. How long we keep it

For as long as you have an account. When you delete your account from Profile, your profile, progress, cards, chat and push tokens are deleted from our database immediately. Store purchase records are kept by Apple or Google under their rules. Backups roll off within 30 days.

7. Your rights

• See what we hold about you — email us and we will send it.
• Correct your name or age band in Profile at any time.
• Delete everything — Profile → Delete my account.
• Turn reminders off — Profile → Reminders, or in your device settings.
• Complain to your local data protection authority if you think we've got it wrong.

8. Children

Mubtadaʾ is for adults. We do not knowingly collect data from anyone under 18, and the app asks for an age band before an account can be created. If you believe a child has created an account, tell us and we will delete it.

9. Security

Data is encrypted in transit. Passwords are hashed. Access to the database is limited to what the app needs and to the people who run it.

10. Changes

We will tell you in the app or by email before a change that affects you takes effect. The date at the top is the version you are reading.