Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

Nuqta Arabic
Email: admin@nuqta.co

2. Data We Collect

2.1 Account Information

When you create an account, we collect:

• Email address (required for authentication)
• Display name (chosen by you)
• Gender (optional, provided during onboarding)

2.2 Learning Data

As you use the app, we collect data about your learning activity to personalise your experience and track your progress:

• Lesson completion and scores
• Reading progress and quiz results
• Vocabulary cards and spaced repetition data
• Daily goals, streaks, and activity timestamps
• Study preferences (immersion level, font choices, reading direction)
• Quran reading bookmarks and preferences

2.3 Device & Technical Data

We may collect limited technical data to ensure the app functions correctly:

• Device type and operating system version
• App version
• Push notification tokens (if you enable reminders)

2.4 Voice Data (AI Review Feature)

If you use the AI Review voice conversation feature, your speech is processed in real time to provide conversational Arabic practice. We do not store voice recordings. Audio is processed transiently and discarded after the session.

2.5 Waitlist & Contact Data

If you sign up to our waitlist via the website, we collect your email address to notify you when the app launches.

3. How We Use Your Data

We use your personal data for the following purposes:

• Provide the Service: Authenticate your account, sync your learning progress across devices, and deliver personalised lesson content
• Spaced repetition: Calculate optimal review intervals for your vocabulary cards using our learning algorithms
• Daily reminders: Send push notifications at your chosen time if you enable reminders
• Service improvement: Understand usage patterns to improve lessons, content, and app features
• Communication: Respond to bug reports or support requests you submit
• Waitlist: Send you launch updates if you joined the waitlist

4. Legal Basis for Processing

Under UK GDPR, we process your data on the following legal bases:

• Contract (Article 6(1)(b)): Processing necessary to provide the Service you signed up for — account creation, progress sync, lesson delivery, and vocabulary review
• Consent (Article 6(1)(a)): Push notification reminders (you can enable or disable these at any time in Settings)
• Legitimate Interests (Article 6(1)(f)): Service improvement and analytics, responding to support requests, and ensuring security of the Service

5. Data Sharing & Third Parties

We do not sell your personal data. We share data only with the following categories of service providers, all acting as data processors on our behalf:

• Cloud hosting: We use secure cloud infrastructure hosted in the UK (London) to store your account and learning data
• Apple / Google: If you subscribe to a premium plan, your payment is handled entirely by Apple App Store or Google Play. We receive a transaction confirmation but never see your payment card details
• Audio services: We use third-party text-to-speech services for Arabic pronunciation. Only Arabic text is sent; no personal data is transmitted

We do not share your learning data, vocabulary progress, or personal information with any other users of the app.

6. International Data Transfers

Your data is primarily stored and processed within the United Kingdom (London). Where data is transferred outside the UK (for example, to process text-to-speech requests), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office.

7. Data Retention

• Account data: Retained while your account is active. If you delete your account, all personal data is permanently removed within 30 days
• Learning progress: Retained while your account is active and deleted with your account
• Vocabulary review events: Automatically deleted after 90 days (used only for learning algorithm calculations)
• Waitlist emails: Retained until you unsubscribe or the waitlist is no longer needed
• Voice data: Not stored. Processed transiently during AI Review sessions only

8. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct any inaccurate data
• Erasure: Request deletion of your account and all associated data
• Restriction: Ask us to restrict processing of your data in certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent (e.g. push notifications), you may withdraw consent at any time via the app settings

To exercise any of these rights, contact us at admin@nuqta.co. We will respond within one month.

9. Account Deletion

You can request deletion of your account and all associated data at any time by:

• Going to Profile > Settings > Delete Account within the app
• Emailing admin@nuqta.co with the subject "Delete My Account"

Upon receiving a deletion request, we will permanently remove all your personal data, learning progress, vocabulary cards, and account information within 30 days. This action is irreversible.

10. Data Security

We take appropriate technical and organisational measures to protect your data, including:

• Authentication tokens stored securely using device-level encryption
• All data transmitted via HTTPS/TLS encryption
• Strict access controls on all data storage systems
• No passwords stored — we use passwordless email verification (one-time codes)

11. Children's Privacy

Nuqta Arabic is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at admin@nuqta.co and we will delete it promptly.

12. Cookies & Website Analytics

Our website (nuqta.co) uses:

• Essential cookies: To remember your dark mode preference (stored in localStorage)
• Meta Pixel: To measure the effectiveness of our waitlist advertising. This is a third-party tracking pixel by Meta Platforms, Inc. You can opt out of Meta tracking via your Facebook Ad Settings

The mobile app does not use cookies or third-party analytics trackers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the app or by email. The "Last updated" date at the top of this page indicates when the policy was last revised.

14. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113