Privacy Policy

At Digital Daftar ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our mobile application.

1. Information We Collect

1.1 Information You Provide

Account Information:

• Email address (required for account creation)
• Name (optional)
• Password (encrypted and never stored in plain text)
• Profile information (if provided)

User Content:

• Vocabulary words and translations you save
• Personal notes and examples
• Quiz progress and statistics
• Search history within the app
• Text you input for translation
• Photos or images you capture or select for OCR text extraction (premium feature)

1.2 Automatically Collected Information

Usage Data:

• App features used and frequency of use
• Translation requests (count and language pairs)
• Quiz session data and performance metrics
• Time spent in the app
• Error logs and crash reports

Device Information:

• Device type and model
• Operating system version (iOS/Android)
• App version
• Device language settings
• Unique device identifiers (for sync purposes only)
• Network connectivity status

1.3 Information We Do NOT Collect

• Precise location data (GPS coordinates)
• Contact lists or phone numbers
• Microphone audio or voice recordings (see note below)
• Sensitive personal information (race, religion, health data)
• Financial information (handled by App Store/Play Store)

Note on the microphone permission: iOS requires the app to declare a microphone usage description because our audio playback library can technically access the microphone. DigitalDaftar never records, captures, or transmits any microphone input. The permission is present only to satisfy the audio playback library used for Quranic recitations.

Note on audio playback: When you play Quranic recitations in the app, the audio is streamed from Quran Foundation servers. We do not collect, record, or share what you listen to.

Note on OCR: The OCR feature (premium only) accesses your camera or photo library when you choose to scan an image. Images are processed by a third-party service (see Section 3.1) and are not stored on our servers.

2. How We Use Your Information

2.1 To Provide the Service

• Create and manage your account
• Process translation requests via OpenAI API
• Extract Arabic text from images via Google Cloud Vision API (OCR feature)
• Store and sync your vocabulary across devices
• Generate personalized quizzes based on your vocabulary
• Track your learning progress and statistics
• Enable offline functionality

2.2 To Improve the Service

• Analyze usage patterns to enhance features
• Identify and fix bugs and technical issues
• Improve translation quality and accuracy
• Optimize app performance

2.3 To Communicate With You

• Send transactional emails (password resets, account notifications)
• Provide customer support
• Send optional notifications about your quiz reminders
• Notify you of app updates and new features (with your consent)

2.4 To Process Payments

• Verify subscription status through App Store/Play Store
• Manage premium features access
• Track usage limits for free tier users

3. How We Share Your Information

3.1 Third-Party Service Providers

We share data with the following trusted partners:

3.2 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Prevent fraud or abuse
• Respond to lawful requests by public authorities

3.3 We Will Never

• Sell your personal data to third parties
• Share your vocabulary or learning data with advertisers
• Use your data for targeted advertising
• Share your data with data brokers

4. Data Storage and Security

4.1 Where We Store Data

• Local Storage: Vocabulary, translations, and quiz data are stored on your device using encrypted databases (Hive)
• Cloud Storage: Account data and sync copies are stored on Supabase servers
• Offline-First: Your data works offline and syncs when online

4.2 Security Measures

• End-to-end HTTPS encryption for all data transmission
• Password hashing using industry-standard bcrypt
• Secure authentication via Supabase Auth
• Regular security audits and updates
• Encrypted local storage on your device

4.3 Data Retention

• Account data: Retained while your account is active
• User content: Retained until you delete it or close your account
• Backups: Deleted within 30 days after account deletion
• Anonymous analytics: May be retained for up to 2 years

5. Your Privacy Rights

5.1 Access and Control

You have the right to:

• Access: View all your personal data in the app settings
• Correct: Update your account information at any time
• Delete: Remove individual vocabulary items or your entire account
• Export: Download your vocabulary data (coming soon)
• Object: Opt-out of optional data collection

5.2 GDPR Rights (EU Users)

If you're in the EU, you have additional rights under GDPR:

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with supervisory authority

5.3 CCPA Rights (California Users)

California residents have the right to:

• Know what personal information is collected
• Know if personal information is sold or disclosed
• Opt-out of sale of personal information (we don't sell data)
• Request deletion of personal information
• Non-discrimination for exercising privacy rights

5.4 How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@digitaldaftar.app or use the account deletion feature in app settings.

6. Children's Privacy

DigitalDaftar is designed for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately, and we will delete such information.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States and other jurisdictions where our service providers operate (Supabase, OpenAI, Google Cloud Vision, RevenueCat, Sentry, and Quran Foundation). We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

8. Cookies and Tracking

The mobile app does not use cookies. However, we use local storage for:

• Authentication tokens (to keep you logged in)
• App preferences and settings
• Offline data caching

Our website (digitaldaftar.app) may use analytics cookies. You can control cookie preferences in your browser settings.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via:

• In-app notification
• Email to your registered address
• Updated "Last Modified" date at the top of this policy

Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

11. App Store Compliance

This app complies with Apple App Store and Google Play Store privacy requirements:

• Privacy-related app permissions are requested only when needed
• All data collection purposes are clearly disclosed
• Users can delete their accounts and data at any time
• Payment processing is handled exclusively by Apple/Google
• No third-party tracking or advertising SDKs are used