Rafeeq — Privacy Policy

Last updated: 2 October 2026

This Privacy Policy explains what the Rafeeq mobile application and our website rafeeqenglish.com ("Rafeeq", "we", "us") collect, why, who else processes it, and how long it is kept. Rafeeq is an English-learning app for Arabic speakers. By using Rafeeq you agree to this policy.

1. Who is responsible for your data

Rafeeq is operated under the trade name Rafeeq, from Jordan. For any privacy question, or to exercise any right described in §8, contact us at support@rafeeqenglish.com.

2. What we collect

• Account information — your email address, the display name on your account, a unique user ID, and which method you signed in with (Google, Apple, or email and password), and, if you sign in with Google, the link to your Google profile photo. If you use Apple's "Hide My Email", we only ever receive Apple's relay address.
• Profile details — the display name you choose and the learning goal you pick during onboarding (travel, work, study, or general). We do not ask for your date of birth, phone number, or address.
• Learning data — your progress through lessons, review history, streaks, skill ratings, and the results of the placement assessment.
• Content you create — voice recordings made during speaking practice and the speaking assessment; text you write during writing practice; the messages you exchange with the AI coach; and short summaries of past conversations, kept so the coach can carry on from where you left off.
• Support conversations — anything you write to us from the support screen in the app. Your email address, display name, app version, platform, current level, and subscription tier are attached automatically, so we can answer without asking you for them.
• Family plan — if you own or join a Family plan, your display name is visible to the plan's owner and to its other members.
• Subscription data — your subscription tier and status (including whether you are in a free trial), handled through Google Play Billing or the App Store together with RevenueCat. We never receive or store your card or bank details.
• Technical data — a push-notification token for your device, app-integrity tokens (Firebase App Check / Play Integrity), your platform, the app build number, and a record of each reminder notification we send you (when, which kind, which lesson, and whether it was delivered), used to check whether reminders actually help. When you ask for a password-reset email, a hashed copy of the address and a daily counter are kept for two days to stop abuse.
• Usage analytics — since version 1.1.4, usage events through Google Analytics for Firebase: app opens and sessions, sign-ins and sign-ups (by method), lessons completed (skill, level, score, time spent), the steps of a speaking conversation (microphone taps, turns, errors, duration), the steps of the subscription screen (viewed, tapped, purchased or failed and why, store, plan), in-app purchases, and the store link an install came from. These events are tied to a random app instance identifier and to your user ID, not to an advertising identifier.
• Website visits — rafeeqenglish.com sets no cookies and loads no third-party trackers. Our host, Google Firebase Hosting, keeps standard request logs: the address requested (including campaign tags such as utm_source), which store button was tapped, IP address, browser, and referring page. We use them only to count visits and store-button taps; they are deleted automatically after 30 days.

3. What we do not do

• We do not sell or rent your personal data, and we show no ads inside the app.
• We do not collect advertising identifiers — the analytics SDK is configured without them.
• Advertising on Google. We advertise the app on Google. Google Analytics for Firebase is linked to our Google Ads account and shares a small set of events with it — the first open after an install, sign-ups, and purchases — to measure our campaigns. Personalised advertising is turned on for this link, so Google may also use these events, together with what Google already knows about you, to personalise the ads you see, including showing Rafeeq ads to people who have used the app. Never your lessons, recordings, writing, or conversations. You can limit ad personalisation in your Google account at myadcenter.google.com and in your device's ad settings.
• Apart from that Google Ads link, we do not track you across other apps or websites. In the app, the only analytics we use is Google Analytics for Firebase; on the website, only the request logs described in §2 (see also §5).
• We do not use your recordings or writing to train AI models. Our providers process them only to return a result to you (see §5).

4. How we use your information

• To deliver lessons and keep track of your progress.
• To produce feedback on your speaking, writing, and pronunciation.
• To place you at a level and keep that measurement honest.
• To manage your account, your subscription, and your entitlements.
• To answer you when you write to support.
• To send learning-related notifications and support replies. You can turn notifications off in your device settings.
• To keep the service secure, enforce fair-use limits, and prevent abuse.
• To measure and improve our own advertising on Google, including personalised ads (see §3).

5. Service providers

These companies process data for us, under their own security and privacy commitments. This is the complete list.

6. How long we keep it

• Voice recordings are not stored by us. A recording is sent straight to the provider that processes it, and is not written to our database or file storage. What we keep is the resulting text and score.
• Your writing, your coach conversations, and the summaries of them are kept while your account is active, because they are what makes the feedback and the coach's continuity possible.
• Account, profile, learning, and support data are kept while your account is active.
• Usage analytics are kept by Google Analytics for at most 14 months at the event level; only aggregate statistics remain after that.
• Website request logs and server logs (which may contain your user ID and IP address) are deleted automatically after 30 days.
• When you delete your account, everything above is deleted with it (see §8), except: purchase records kept by Google Play, the App Store, and RevenueCat for billing, refund, and tax reasons; analytics events, which expire within 14 months; server logs, which expire within 30 days; and emails in our support mailbox, which are deleted within 12 months (or sooner if you ask). Reminder logs are kept only in anonymised form, no longer linked to you.

7. Where your data is processed

Our database and server functions run in the European Union (europe-west3, Frankfurt). The providers in §5 may process data on servers in the European Union or the United States. By using Rafeeq you agree to this processing outside your own country.

8. Your rights, and deleting your account

You may ask to see, correct, or delete your personal data at any time.

You can delete your account from inside the app: Profile → Delete account. This permanently removes your profile, your learning data, your content, your in-app support conversations, and the account itself, and it anonymises the reminder logs that pointed to you. The few records that are kept are listed in §6 and on our account-deletion page. It cannot be undone, and it does not cancel a subscription — a subscription is cancelled through Google Play or the App Store.

You can also write to support@rafeeqenglish.com and we will carry out the request.

9. Minors

Rafeeq is directed to people aged 18 and over. It is not directed to anyone under 18, and we do not knowingly collect personal data from them. If you believe someone under 18 has given us personal data, write to us and we will delete it.

10. Security

We use encryption in transit, access controls, server-side authorization on every request that touches your data, and app-integrity checks that reject requests from outside the real app. No method of transmission or storage is completely secure, but we work to protect your information.

11. Changes to this policy

We may update this policy as the app changes. The "Last updated" date above always reflects the current version, and material changes will be announced in the app.

12. Contact

For any question about this policy or your data, contact support@rafeeqenglish.com.

See also our Terms of Use.