Privacy Policy

Yallah ("we", "our", or "us") is a Moroccan Darija language-learning app. This policy explains what data we collect, how we use it, and your rights. We keep things simple — we only collect what the app needs to work.

---

1. What we collect

Account information. When you sign up we store your username and email address so you can log in across devices.

Learning progress. We store your XP, streak, completed lessons, hearts, and active avatar outfit so your progress is saved.

Virtual wallet. We track your Drahem balance and any items you have purchased inside the app.

Community content. Word lists you create (title, description, words, and whether they are public or private) are stored in our database. Public lists are visible to all users.

Interactions. Likes you give to other users' word lists are stored so the like count is accurate.

2. What we do NOT collect

• Location data
• Contacts or address book
• Camera or microphone input
• Device identifiers or advertising IDs
• Browsing history or cross-app activity
• Payment or financial information (the app is free)

3. How we use your data

• To authenticate you and keep your session active
• To save and sync your learning progress
• To display your word lists in the Medina community
• To show your avatar and username to other users
• To improve the app based on aggregated, anonymous usage patterns

4. Data sharing

We do not sell, rent, or trade your personal data to third parties. Your data is shared only with the infrastructure providers needed to run the app:

• Supabase — database and authentication (EU/US hosted). Privacy policy →
• Expo / EAS — app build and delivery infrastructure. Privacy policy →

5. Data retention

Your data is kept for as long as your account is active. You can delete your account at any time from the app (Profile → Delete account). See what happens to your data when you delete your account below.

6. Account deletion

When you delete your account:

• Your login credentials, progress, wallet, and private word lists are permanently deleted immediately.
• Public word lists you created remain in the Medina community with your display name, so other learners are not affected. If you want your public lists removed too, contact us before deleting your account.

Full details: Account deletion page →

7. Security

All data is transmitted over HTTPS. Passwords are never stored in plain text — authentication is handled by Supabase Auth which uses industry-standard bcrypt hashing. Row-level security policies ensure users can only access their own data.

8. Children's privacy

Yallah is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy as the app evolves. We will update the "Last updated" date at the top when we do. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal data. To exercise any of these rights, contact us at the address below. Account deletion is always available directly in the app.

---