Rafeeq — Privacy Policy

Last updated: 27 August 2026

This Privacy Policy explains what the Rafeeq mobile application ("Rafeeq", "we", "us") collects, why, who else processes it, and how long it is kept. Rafeeq is an English-learning app for Arabic speakers. By using Rafeeq you agree to this policy.

1. Who is responsible for your data

Rafeeq is operated under the trade name Rafeeq, from Jordan. For any privacy question, or to exercise any right described in §8, contact us at support@rafeeqenglish.com.

2. What we collect

Account information — your email address, the display name on your account, a unique user ID, and which method you signed in with (Google, Apple, or email and password). If you use Apple's "Hide My Email", we only ever receive Apple's relay address.
Profile details — the display name you choose and the learning goal you pick during onboarding (travel, work, study, or general). We do not ask for your date of birth, phone number, or address.
Learning data — your progress through lessons, review history, streaks, skill ratings, and the results of the placement assessment.
Content you create — voice recordings made during speaking practice and the speaking assessment; text you write during writing practice; the messages you exchange with the AI coach; and short summaries of past conversations, kept so the coach can carry on from where you left off.
Support conversations — anything you write to us from the support screen in the app. Your app version, current level, and subscription tier are attached automatically, so we can answer without asking you for them.
Subscription data — your subscription tier and status, handled through Google Play Billing or the App Store together with RevenueCat. We never receive or store your card or bank details.
Technical data — a push-notification token for your device, app-integrity tokens (Firebase App Check / Play Integrity), your platform, and the app build number.

3. What we do not do

We do not sell or rent your personal data.
We do not use your data for advertising, and we do not collect advertising identifiers.
We do not embed third-party analytics or tracking SDKs.
We do not use your recordings or writing to train AI models. Our providers process them only to return a result to you (see §5).

4. How we use your information

To deliver lessons and keep track of your progress.
To produce feedback on your speaking, writing, and pronunciation.
To place you at a level and keep that measurement honest.
To manage your account, your subscription, and your entitlements.
To answer you when you write to support.
To send learning-related notifications and support replies. You can turn notifications off in your device settings.
To keep the service secure, enforce fair-use limits, and prevent abuse.

5. Service providers

These companies process data on our behalf, only to deliver the service, and under their own security and privacy commitments. This is the complete list.

Provider	What it handles
Google Firebase	Sign-in, database, file storage, server functions, push notifications, and app-integrity checks.
Anthropic (Claude)	Feedback on your writing and speaking, the AI coach conversation, and grading of the placement assessment. Receives your text and transcripts.
Google (Gemini)	Speaking the coach's replies aloud, and processing your recorded speech for the speaking assessment. Receives your audio.
OpenAI	Converting your recorded speech to text. Receives your audio.
RevenueCat	Subscription status, linked to your user ID.
Resend	Sending our emails — address verification, password reset, and support notifications.
Cloudflare	Our domain, and routing of mail sent to our support address.

6. How long we keep it

Voice recordings are not stored by us. A recording is sent straight to the provider that processes it, and is not written to our database or file storage. What we keep is the resulting text and score.
Your writing, your coach conversations, and the summaries of them are kept while your account is active, because they are what makes the feedback and the coach's continuity possible.
Account, profile, learning, and support data are kept while your account is active.
When you delete your account, all of the above is deleted with it (see §8).

7. Where your data is processed

Our database and server functions run in the European Union (europe-west3, Frankfurt). The providers in §5 may process data on servers in the European Union or the United States. By using Rafeeq you agree to this processing outside your own country.

8. Your rights, and deleting your account

You may ask to see, correct, or delete your personal data at any time.

You can delete your account from inside the app: Profile → Delete account. This permanently removes your profile, your learning data, your content, your support conversations, and the account itself. It cannot be undone, and it does not cancel a subscription — a subscription is cancelled through Google Play or the App Store.

You can also write to support@rafeeqenglish.com and we will carry out the request.

9. Minors

Rafeeq is directed to people aged 18 and over. It is not directed to anyone under 18, and we do not knowingly collect personal data from them. If you believe someone under 18 has given us personal data, write to us and we will delete it.

10. Security

We use encryption in transit, access controls, server-side authorization on every request that touches your data, and app-integrity checks that reject requests from outside the real app. No method of transmission or storage is completely secure, but we work to protect your information.

11. Changes to this policy

We may update this policy as the app changes. The "Last updated" date above always reflects the current version, and material changes will be announced in the app.

12. Contact

For any question about this policy or your data, contact support@rafeeqenglish.com.