Privacy Policy
Last updated
Yalla Masri, based in Egypt, runs Yalla Masry and is responsible for your personal data. We collect what we need to teach you Masri and run your account, and we don't sell it.
What we collect
- Account: your email address, and your name and profile picture if you sign in with Google.
- Profile and settings: your learning goal, time zone, reminder and display preferences.
- Learning activity: lessons and answers, review history, XP and streaks, and pronunciation scores.
- AI chat: the messages you send to the chat partner, its replies, and any ratings you give them.
- Subscription: your plan, its status and dates, and the IDs Paddle gives your subscription and customer record. We never see or store your card details.
- Invites: who invited whom, if you use an invite link.
- Notifications: if you turn on push reminders, your browser's push endpoint.
- Usage and technical data: product events (for example, lesson completed or upgrade clicked) linked to your account, plus standard server logs such as IP address and browser type.
Your voice
Pronunciation practice records you in your browser to compare with the native audio. We don't upload or store those recordings. Speech recognition is done by your browser; some browsers (Chrome, for example) send the audio to their own service, such as Google's, to do this.
Why we use it
- To run your account, lessons, reviews and progress (performing our contract with you).
- To take payments and manage your subscription (contract).
- To send reminders and a weekly progress email, which you can turn off in Settings or with the unsubscribe link (legitimate interest; you can opt out any time).
- To understand how the app is used and improve it, including testing different offers (legitimate interest).
- To keep the service secure and meet legal obligations, such as tax records.
Who we share it with
We use these service providers, who process data for us under contract and only for the purpose listed:
- Paddle.com: our reseller and Merchant of Record. Paddle processes your payment and billing details under its own privacy policy.
- Supabase: database and sign-in.
- Vercel: website hosting.
- Anthropic: generates the AI chat partner's replies from your chat messages.
- PostHog: product analytics.
- Resend: sends our emails.
- Google: if you choose "Sign in with Google".
- Your browser's push service (such as Google, Apple or Mozilla), if you turn on push reminders.
We are based in Egypt, and some of these providers are elsewhere, including in the United States. Where the law requires it, transfers are covered by safeguards such as standard contractual clauses. We may also share data if the law requires it.
Cookies and local storage
We only use what the app needs to work. There are no advertising cookies.
- Sign-in cookies that keep you logged in.
ym_tz: your time zone, so streaks and reminders follow your local day.ym_ref: the invite code from an invite link, for 30 days.- Local storage and an offline cache for your theme, alphabet progress and the phrasebook, which stay on your device.
How long we keep it
We keep your data while your account is open. When you delete your account in Settings, we delete your profile, learning data and chat history. We keep records of payments for as long as tax and accounting law requires.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, or object to or restrict how we use it. You can delete your account yourself in Settings. For anything else, email hello@getyallamasry.com. You can also complain to your local data protection authority.
Children
Yalla Masry isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, email us and we'll delete the account.
Changes
We'll update this page when our practices change, and tell you by email or in the app about significant changes.
Contact
Privacy questions or requests: hello@getyallamasry.com.