Rafeeq — Privacy Policy

Last updated: 2 November 2026

This Privacy Policy explains what the Rafeeq mobile application and our website rafeeqenglish.com ("Rafeeq", "we", "us") collect, why, who else processes it, and how long it is kept. Rafeeq is an English-learning app for Arabic speakers. By using Rafeeq you agree to this policy.

1. Who is responsible for your data

Rafeeq is operated under the trade name Rafeeq, from Jordan. For any privacy question, or to exercise any right described in §8, contact us at support@rafeeqenglish.com.

2. What we collect

• Account information — your email address, the display name on your account, a unique user ID, and which method you signed in with (Google, Apple, or email and password), and, if you sign in with Google, the link to your Google profile photo. If you use Apple's "Hide My Email", we only ever receive Apple's relay address.
• Profile details — the display name you choose and the learning goal you pick during onboarding (travel, work, study, or general). We do not ask for your date of birth, phone number, or address.
• Learning data — your progress through lessons, review history, streaks and the days you studied, skill ratings, and the placement assessments: each answer you give (the passage or recording, the question, what you chose or typed, whether it was right, and how long it took), where you stopped if you did not finish, the result of every sitting (so you can see your progress month by month), and for writing, the score on each marking criterion.
• Content you create — voice recordings made during speaking practice and the speaking assessment; text you write during writing practice and the writing assessment; the messages you exchange with the AI coach; and short summaries of past conversations, kept so the coach can carry on from where you left off.
• Placement assessment recordings and writing — only if you agree. The first time you reach the speaking section of the placement assessment, the app asks «نحفظ تسجيلك؟» ("Can we keep your recording?"). If you tap «موافق» (Agree), we keep the recordings of your spoken answers in that assessment, their text, and the text you write in its writing section, so we can check that your score is accurate and improve how Rafeeq grades. A specialist examiner will listen to or read a sample of them to measure that accuracy. They are deleted after one year, or when you delete your account. If you tap «لا شكراً» (No thanks), none of this is kept and the assessment works exactly the same. Your answer to this question is kept on your account so we do not ask again.
• Support conversations — anything you write to us from the support screen in the app. Your email address, display name, app version, platform, current level, and subscription tier are attached automatically, so we can answer without asking you for them.
• Family plan — if you own or join a Family plan, your display name is visible to the plan's owner and to its other members.
• Subscription data — your subscription tier and status (including whether you are in a free trial), handled through Google Play Billing or the App Store together with RevenueCat. We never receive or store your card or bank details.
• Technical data — a push-notification token for your device, app-integrity tokens (Firebase App Check / Play Integrity), your platform, the app build number, and a record of each reminder notification or reminder email we send you (when, which kind, which lesson, whether it was delivered, and whether you opened its link), used to check whether reminders actually help. When you ask for a password-reset email, a hashed copy of the address and a daily counter are kept for two days to stop abuse.
• Usage analytics — since version 1.1.4, usage events through Google Analytics for Firebase: app opens and sessions, sign-ins and sign-ups (by method), lessons completed (skill, level, score, time spent), the steps of a speaking conversation (microphone taps, turns, errors, duration), the steps of the subscription screen (viewed, tapped, purchased or failed and why, store, plan), in-app purchases, and the store link an install came from. These events are tied to a random app instance identifier and to your user ID. They are never tied to an advertising identifier (see §3).
• Website visits — rafeeqenglish.com sets no cookies and loads no third-party trackers. Our host, Google Firebase Hosting, keeps standard request logs: the address requested (including campaign tags such as utm_source), which store button was tapped, IP address, browser, and referring page. We use them only to count visits and store-button taps; they are deleted automatically after 30 days.

3. What we do not do

• We do not sell or rent your personal data, and we show no ads inside the app.
• We do not collect the advertising identifier, on Android or on iPhone — the analytics SDK is configured without it. Since version 1.1.11 the iPhone app does not track you and does not ask to (version 1.1.10 asked with Apple's "Allow tracking" question, and read the identifier only if you allowed it).
• Advertising on Google. We advertise the app on Google. Google Analytics for Firebase is linked to our Google Ads account and shares a small set of events with it — the first open after an install, sign-ups, and purchases — to measure our campaigns. Personalised advertising is turned on for this link, so Google may also use these events, together with what Google already knows about you, to personalise the ads you see, including showing Rafeeq ads to people who have used the app. This applies to the Android app only: on iPhone, ad personalisation is always off and your events are not used to personalise or measure ads. If we advertise the iPhone app, we measure it only with Apple's own privacy-preserving attribution (SKAdNetwork), which does not identify you. Never your lessons, recordings, writing, or conversations. You can limit ad personalisation in your Google account at myadcenter.google.com and in your device's ad settings.
• Apart from that Google Ads link, we do not track you across other apps or websites. In the app, the only analytics we use is Google Analytics for Firebase; on the website, only the request logs described in §2 (see also §5).
• We do not use your recordings or writing to train AI models. Our providers process them only to return a result to you (see §5). The placement recordings and writing you agree to let us keep are used only to check and improve the accuracy of our grading.

4. How we use your information

• To deliver lessons and keep track of your progress.
• To produce feedback on your speaking, writing, and pronunciation.
• To place you at a level, keep that measurement honest, show you your progress from one month's assessment to the next, and check and improve the accuracy of our grading.
• To manage your account, your subscription, and your entitlements.
• To answer you when you write to support.
• To send learning-related notifications and support replies. You can turn notifications off in your device settings.
• To send learning reminder emails to your verified address when our push notifications cannot reach you (they are off, or the app is no longer on your phone): 1, 3, 7, 14 and 30 days after you last used the app, at most one every two days. During a free trial, if our notifications cannot reach you, we may email you once a day instead. Every reminder email has a link that stops them.
• To keep the service secure, enforce fair-use limits, and prevent abuse.
• To measure and improve our own advertising on Google, including personalised ads on Android (see §3).

5. Service providers

These companies process data for us, under their own security and privacy commitments. This is the complete list.

6. How long we keep it

• Voice recordings are not stored by us, with one exception you choose. A recording is sent straight to the provider that processes it, and is not written to our database or file storage; what we keep is the resulting text and score. The exception: if you agreed to «نحفظ تسجيلك؟», the recordings of your placement-assessment answers, their text, and your placement writing are kept in our file storage and database for one year, then deleted automatically.
• Your writing, your coach conversations, and the summaries of them are kept while your account is active, because they are what makes the feedback and the coach's continuity possible.
• Account, profile, learning, and support data — including your placement answers and results — are kept while your account is active.
• Usage analytics are kept by Google Analytics for at most 14 months at the event level; only aggregate statistics remain after that.
• Website request logs and server logs (which may contain your user ID and IP address) are deleted automatically after 30 days.
• When you delete your account, everything above is deleted with it (see §8), except: purchase records kept by Google Play, the App Store, and RevenueCat for billing, refund, and tax reasons; analytics events, which expire within 14 months; server logs, which expire within 30 days; and emails in our support mailbox, which are deleted within 12 months (or sooner if you ask). Reminder logs are kept only in anonymised form, no longer linked to you.

7. Where your data is processed

Our database and server functions run in the European Union (europe-west3, Frankfurt). The providers in §5 may process data on servers in the European Union or the United States. By using Rafeeq you agree to this processing outside your own country.

8. Your rights, and deleting your account

You may ask to see, correct, or delete your personal data at any time.

You can delete your account from inside the app: Profile → Delete account. This permanently removes your profile, your learning data, your content, your in-app support conversations, and the account itself, and it anonymises the reminder logs that pointed to you. The few records that are kept are listed in §6 and on our account-deletion page. It cannot be undone, and it does not cancel a subscription — a subscription is cancelled through Google Play or the App Store.

You can also write to support@rafeeqenglish.com and we will carry out the request.

9. Minors

Rafeeq is directed to people aged 18 and over. It is not directed to anyone under 18, and we do not knowingly collect personal data from them. If you believe someone under 18 has given us personal data, write to us and we will delete it.

10. Security

We use encryption in transit, access controls, server-side authorization on every request that touches your data, and app-integrity checks that reject requests from outside the real app. No method of transmission or storage is completely secure, but we work to protect your information.

11. Changes to this policy

We may update this policy as the app changes. The "Last updated" date above always reflects the current version, and material changes will be announced in the app.

12. Contact

For any question about this policy or your data, contact support@rafeeqenglish.com.

See also our Terms of Use.