Privacy Policy

Lisaan is an app that teaches Arabic in Dhivehi, made by Devoup. This policy explains what information Lisaan collects, why we collect it, who helps us process it, and the choices you have.

The short version: we collect only what we need to run your account, your lessons and your subscription. We do not show ads. We do not use third-party analytics or advertising tools. We do not record your voice. We do not sell or rent any information.

Information we collect

Account

• Phone number. You sign in with a Maldives mobile number. We send a one-time code by SMS to confirm it. The number identifies your account.

• Name and avatar. You can enter a display name and choose an avatar from the pictures in the app. Both are optional.

• Settings, such as your daily goal, sound and vibration.

Learning progress

• Lessons and practice: which lessons you finished, how many answers were correct, how long a session took, and which words you got right or wrong. We use this to choose your next lesson and the words you need to practise.

• Game progress: XP, streaks, streak freezes, hearts, gems, daily quests, achievements and your league.

We keep this information on our servers, so your progress is the same on all your devices and stays after a reinstall.

Leagues

Each week, Lisaan puts learners in a league group of up to 20 people. The other learners in your group can see your display name, avatar, weekly XP and streak. If you do not enter a name, they see "a learner" (in Dhivehi) instead. They cannot see your phone number or any other information.

Devices

• A device identifier that the app makes from the system's app-specific ID (Android ID or Apple's identifier for vendor). The app hashes it before it sends it. It is not an advertising identifier.

• Device details: platform, device model, operating system version, app build, and when the device was first and last seen.

• A push token, if you allow notifications, so that we can send notifications, such as news and reminders, to that device.

Each account and plan allows a number of devices. We use this information to count them, to keep your account secure and to stop misuse.

Subscription payments

You pay for a plan by bank transfer, then upload a photo of the transfer slip in the app. You can take the photo with the camera or choose it from your photos. We collect:

• The plan you chose and the slip image.

• The details we read from the slip: amount, sender name, bank, reference number and date.

• The result of the check, and the dates your plan starts and ends.

We do not collect card numbers or bank passwords. Lisaan does not use App Store or Google Play billing.

Feedback

When you send feedback or ask for help in the app, we receive your message, your phone number, your name, your plan, the app version and the device model, so that we can reply. For a help request from the subscription screen, we also receive the status of your last payment slip.

Microphone and speech

Some exercises ask you to say an Arabic word or sentence. For these, the app uses the speech recognition that is built into your phone: Apple's on iPhone, and Google's or your phone maker's on Android. The phone's service turns your voice into text, and the app compares the text with the answer.

• Lisaan does not record, store or send your voice to us.

• The phone's speech service may process the audio under the privacy policy of Apple, Google or your phone maker.

• The app asks for microphone and speech permission the first time. If you do not allow it, you can still say the answer aloud and continue.

What we do not collect

• Voice recordings, advertising identifiers, location, contacts or browsing history.

• Email addresses or home addresses.

• Any information for advertising, profiling or sale.

How we use information

• To sign you in and keep your account secure.

• To deliver lessons, save your progress and keep it the same on all your devices.

• To run streaks, quests, achievements and weekly leagues.

• To send the notifications that you allow.

• To check payments, start and end plans, and enforce the device limit of each plan.

• To answer feedback and support requests.

• To find problems, prevent fraud and improve the course.

Service providers

We run Lisaan on our own servers. We share information only with the services that help us run Lisaan, and only what each one needs:

Service	What it does for us	What it receives
Cloudflare	Protects our servers and delivers the app's data and audio	Normal web request data, such as your IP address
MsgOwl	Sends the sign-in code by SMS	Your phone number
Firebase Cloud Messaging (Google)	Delivers push notifications	Your device's push token and the text of the notification
Google Gemini API	Reads the details on a payment slip	The slip image
palert	Shows us the payments our bank account received, so we can match your transfer	The amount and details we look up. Your slip is not sent.
Telegram	Delivers payments that need a manual check, and feedback, to a private Devoup channel	The slip image, the details read from it, your phone number and plan, or your feedback message

We may also disclose information when the law requires it, or to protect the safety of our users.

These providers may store information on servers outside the Maldives. We choose providers that protect information with industry-standard security.

Data retention

Information	How long we keep it
Account, settings, progress and league results	While your account exists
Device records	While your account exists. A device you remove loses access at once.
Payment slips and payment records	While your account exists, or longer only where the law requires it
Sign-in code requests	2 days, then deleted automatically
Feedback messages	We do not store them in our database. They stay in our private Telegram channel as long as we need them to help you.

Signing out removes your account data from that device. Uninstalling the app removes everything the app stored on the device.

Your choices and rights

• See and change. The profile screen shows your name, avatar, settings and progress. You can change your name, avatar and settings at any time.

• Notifications. You can turn notifications off in your phone's settings at any time.

• Microphone. You can turn microphone and speech permission off in your phone's settings.

• Remove a device. The account screen lists your devices and lets you remove one.

• Delete your account. Open your profile in the app and tap "Delete account". We delete your account, progress, league entries, devices, subscriptions and payment slips at once. You can also write to [email protected] or use our support page, and give the phone number of the account. We then delete it within 30 days.

• Ask a question or complain. Contact us at any time. You can also complain to your local data protection authority.

Children

Lisaan is for learners of all ages. A child under 13 should use Lisaan only with the permission of a parent or guardian, who manages the account. We do not knowingly collect more information from a child than the app needs to work. A parent can delete the child's account at any time, as described above.

Security

All data travels over encrypted connections. Sign-in tokens are stored in your phone's secure storage, and we store them on our servers only as hashes. Payment slips are in private storage that only our servers and our staff can open. No system is completely secure, but we work to protect your information and to limit who can see it.

Changes to this policy

We may update this policy when the app changes. The date at the top of this page shows the last update.

Contact

Devoup, Maldives. Write to [email protected] with any question about privacy or this policy.