Privacy

If you never sign in, everything you do here stays on your device. We cannot see it, because it never reaches us.

If you sign in, we keep the least we can to make an account useful: who you are, what you finished, and what you asked the tutor. You can delete all of it from Settings, on the web, on iPhone and on Android. We do not sell your data and we run no ad trackers.

Lessons, visuals, quizzes, exams, the playground and the placement test all work signed out. Your progress, your streak and your settings are saved in this browser or this app, under keys that begin with masfofah..

That data never leaves the device. Clearing the browser or removing the app deletes it, and we have no copy.

• Your identity: email address, name, profile picture if your sign-in provider gives one, language and time zone. We need these to sign you in and to show your days in your own time.
• Your learning (Premium): lessons finished, exam scores, your last 500 answers, bookmarks and notes, streak and XP. We keep these so they follow you to your other devices.
• Tutor conversations (Premium): your messages and the replies, plus up to ten short facts you asked the tutor to remember. We keep these so you can pick a conversation back up.
• Usage counts: how many tutor messages, call minutes and checked answers you used each day. We need these to apply the limits of your plan.
• Call records: when a call started and how long it ran. Never the audio.
• Your plan: whether you have Premium, from where (web, App Store or Google Play), and when it renews or ends. Never your card.
• Reminders: if you turn them on, a push address for the device and the reminders you chose.

Each of these providers only sees what it needs to do its job:

• Clerk runs sign-in and stores your account identity.
• Convex is our database and server. It stores everything in the list above.
• Polar sells Premium on the web as the merchant of record. It takes the payment and handles tax. We never see your card.
• Apple and Google sell Premium in the App Store and on Google Play, under their own terms.
• RevenueCat tells us when an App Store or Google Play purchase starts, renews or ends. It knows your account id and your purchase, nothing else.
• OpenAI receives your tutor messages, and your voice during a call, so it can answer. It does not train its models on them. We ask it not to store them; it may keep them for up to 30 days to watch for abuse, then deletes them.
• OpenRouter and TypeSafe (Jev) receive the sentence you write for a "say it back" question, or a name you pick, to check it.
• Cloudflare R2 serves the lesson narration files. It keeps no account data.
• Vercel hosts the website.
• Sentry receives a crash report when something breaks: the error, the page and the browser. Never what you wrote.
• PostHog counts what happens, like a lesson started or an exam passed. Signed in, the count is tied to your account id and nothing else. It never records your screen.

• Tutor conversations: 90 days after the last message, then deleted. Anything you saved as a note stays until you delete it.
• Call audio: never stored, not even for a moment on our side.
• Usage counts: 60 days.
• Analytics events: 12 months.
• Crash reports: 90 days.
• Everything else tied to your account: until you delete the account.

Polar, Apple and Google keep their own payment records for as long as tax law asks them to. Deleting your Masfofah account does not change that.

Voice calls. During a call your microphone audio goes straight to OpenAI so the guide can hear you and answer. We do not record it, and the captions on screen are not saved. The microphone is only on while a call is on screen.

Reminders. Nothing is sent at night, never more than one a day, and turning reminders off deletes the push address.

Say it back. When you are signed in and write an answer in your own words, the sentence is sent to a small checker (Jev, from TypeSafe, through OpenRouter). We keep the verdict count, not the sentence.

Lesson voice. Narration files come from Cloudflare R2. Playing one tells Cloudflare your IP address, the same as loading any file, and nothing about who you are.

Saudi Arabia's Personal Data Protection Law (PDPL) gives you these rights, and we give them to everyone, wherever you live:

• Delete. Open Settings, then Delete account. It works on the web, on iPhone and on Android. Your data is removed within minutes and your sign-in is deleted too. There is no waiting period, so be sure first.
• Get a copy. Write to us and we will send you everything tied to your account within 30 days.
• Correct. Change your name and language in Settings, or ask us to fix anything else.
• Know and object. Ask us what we hold about you, why, and who sees it. You can also ask us to stop any use you did not agree to.

Deleting your account does not cancel a subscription. Cancel it first in your App Store or Google Play subscriptions, or in the Polar portal on the web. The app tells you if one is still active before anything is deleted.

If you are not happy with our answer, you can complain to the Saudi Data and AI Authority (SDAIA).

Masfofah is not made for children under 13, and we do not knowingly keep an account for anyone under 13. If we learn that we do, we delete it.

If you are between 13 and 18, please use Masfofah with a parent or guardian's permission, and ask them before you buy Premium. If you think a child under 13 has an account, write to us and we will remove it.

Masfofah is built and run from Saudi Arabia. Our providers store data on their servers, mostly in the United States and the European Union. We only use providers that protect data by contract, and we send them only what they need.

Where we show you a time and your device has not told us its time zone, the time is Arabia Standard Time (UTC+3), and a date reads day, month, year.

Sign-in uses a session cookie from Clerk. That is the only cookie we need. Your theme, language and progress on the device are local storage, not cookies, and they never travel with a request.

Everything travels over HTTPS. Only the people who run Masfofah can reach the database, and we never hold card details.

If this policy changes in a way that matters, we will say so in the app and in the changelog, and update the date at the top of this page.

Questions, requests or complaints: support@masfofah.app. We answer within 30 days, and usually much sooner.