Privacy Policy

Application Darijatna — Last updated: April 30, 2026

    This Privacy Policy explains how the Darijatna app collects, uses, and protects your personal data. By using the app, you agree to the practices described below.
  

1. Who We Are

Darijatna is a mobile application for learning Algerian Arabic (Darija), developed and operated by:

Developer: Mehdi Kermad
Contact: contact@mkermad.fr

2. Data We Collect

We only collect data that is necessary for the app to function properly.

Category	Data	Source
Account	Email address, display name, unique identifier (UID)	Google Sign-In
Learning progress	Completed lessons, learned vocabulary, review stages, next review dates	In-app activity
Engagement	Daily streak, weekly activity history, last activity timestamp, time zone	In-app activity
Subscription	Darijatna Pro subscription status, expiration date, active entitlements	RevenueCat / App Store / Google Play
Technical data	Crash reports, anonymized usage events	Firebase Crashlytics & Analytics

We do not collect phone numbers, postal addresses, GPS location data, or contacts from your address book.

3. How We Use Your Data

Providing the service: creating and managing your account, saving your learning progress.
AI features: generating conversation responses (OpenAI GPT-4o) to power the Algerian Arabic AI tutor.
Gamification: calculating and displaying your daily streak and weekly activity.
Subscriptions: verifying your premium access and managing in-app purchases.
App improvement: identifying and fixing bugs via Crashlytics; analyzing overall usage patterns via Firebase Analytics (aggregated and anonymized data).
Notifications: sending push notifications (if you have enabled them) to remind you of your daily practice.

4. Legal Basis (GDPR)

Performance of a contract (Art. 6.1.b): processing data necessary to deliver the service.
Consent (Art. 6.1.a): push notifications.
Legitimate interests (Art. 6.1.f): anonymized app performance analysis and bug detection.

5. Third-Party Services

The app relies on the following third-party providers, which may process your data:

Service	Role	Privacy Policy
Google Firebase (Auth, Firestore, Storage, Analytics, Crashlytics, Messaging)	Authentication, database, file storage, analytics	firebase.google.com/support/privacy
Google Sign-In	Secure login via Google account	policies.google.com/privacy
OpenAI (GPT-4o)	Dialogue generation for the AI tutor	openai.com/policies/privacy-policy
RevenueCat	Subscription and in-app purchase management	revenuecat.com/privacy
Apple App Store / Google Play	App distribution and payment processing	Apple & Google respective policies

6. Data Sharing

We never sell, rent, or share your personal data with third parties for commercial purposes. Data is only transmitted to the providers listed above, strictly within the scope of the purposes described in this policy.

8. Data Retention

Account and progress data: retained for as long as your account is active.
Subscription data: retained in accordance with legal and tax requirements (up to 10 years).
Crash reports: retained for 90 days by Firebase Crashlytics.

Upon account deletion, all your personal data is removed within 30 days.

9. Security

Your data is stored on Google Firebase infrastructure, which applies encryption in transit (TLS) and at rest. Database access is governed by Firestore security rules that restrict each user to their own data only.

10. Your Rights

Under the GDPR (and, for California residents, the CCPA), you have the following rights:

Access: obtain a copy of your personal data.
Rectification: correct inaccurate data.
Erasure: request deletion of your data.
Portability: receive your data in a structured, machine-readable format.
Objection / restriction: object to certain processing or request its limitation.
Withdrawal of consent: revoke your consent at any time (push notifications).

To exercise any of these rights, contact us at: contact@mkermad.fr. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority (e.g., the CNIL in France: cnil.fr, or the ICO in the UK).

11. Children

Darijatna is not directed at children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. International Data Transfers

Your data may be processed in the United States (OpenAI, Firebase, and RevenueCat servers). These transfers are governed by Standard Contractual Clauses approved by the European Commission, or by the EU-US Data Privacy Framework where applicable.

13. Changes to This Policy

We reserve the right to update this policy at any time. If we make material changes, you will be notified via an in-app notification or by email. The date of the most recent update is shown at the top of this document.

14. Contact

For any questions regarding this policy or your personal data:

Email: contact@mkermad.fr