Privacy Policy
The Majlis app: learning Arabic. Last updated: 26 October 2026. Version française
In short: Majlis contains no advertising tracker, no third-party measurement or profiling kit. We keep your progress (so you can find it again from one device to another) and an audience measurement done by us, with no third-party tool, which you can refuse at any time (section 4). Purchases go through the App Store and are checked by RevenueCat (section 10). If you fill in a form to be told about a release, we keep your email to tell you, and that is all (section 5). If you write to us from the app, your message reaches us with a few technical details so we can reply (section 6).
1. Who processes your data
Majlis is published by an independent developer. For any question or request about your data, write to contact@majlisarabic.com.
2. What we collect
| Data | Why | When |
|---|---|---|
| Majlis account identifier, created automatically and anonymous | Link your progress to your device | From the first opening |
| Email address and password | Find your progress and your paid access again across several devices | Only if you create an account |
| Progress: chosen first name, avatar, form chosen for your sentences (masculine or feminine), daily goal, XP, streak, finished lessons, words to work on, achievements and titles, missions, estimated level | Make the lessons, the reviews and the streak work | During use |
| Audience measurement: random device identifier, Majlis account identifier, usage events, device type, installation channel, app version, arrival link | Know whether the app really helps, and improve it (section 4) | During use, unless you refuse it |
| Purchases: identifier sent to RevenueCat, products bought, state of your access | Know whether your paid access is active (section 10) | On iPhone, when the app opens |
| Email and answers from the “Notify me” forms | Tell you about a release and set a fair price (section 5) | Only if you fill in a form |
| “A word for the team” messages: text, optional reply address, app version and language, platform, device and account identifiers | Reply to you and understand a problem (section 6) | Only if you send us a message |
3. What we do not collect
- No third-party audience measurement tool (no Google Analytics, no Firebase, no advertising pixel), no profiling.
- No advertising identifier, no advertising.
- No geographic location.
- No contact, photo or file from your device.
- No data is sold or passed on to a third party.
4. Audience measurement
What. The app records usage events in our own database
(Supabase, section 9), including: opening the app (first launch, first
opening of the day) and sending it to the background, end of the welcome
screens and of the guided tour, progress through lessons, exercises,
conversations and reviews (lesson or topic concerned, step reached,
quitting, success at the first try, time spent), progress (daily goal
reached, level passed, duel finished, streak repaired, first-week recap,
missions), answer to the daily reminder
offer (yes or no, never the time you chose), end of the 14 days of full
access, display of the offer, tap on a purchase button, result of a
purchase or a restore (product, price, currency), request for a review on
the App Store. Each event carries a random
identifier generated on your device (it contains neither your
name nor your email), the identifier of your Majlis account (anonymous
until you give an email), the device type (for example “iOS” or “browser
on iPhone”), the installation channel (App Store, TestFlight, browser),
the app version, and the link through which you first arrived (for
example ?src=landing) or, if you give it on the welcome
screen, your answer to “How did you hear about us?”. Never your email,
your name, your location or the text of your answers.
Why. Only to produce statistics: how many people try Majlis, how many come back, which channels work, which lesson steps are too hard and whether the offer is clear. This data is neither cross-referenced with other sources, nor shared, nor sold.
For how long. Events are erased once they are 13 months old, by an automatic purge run on the 1st of each month. If you delete your account, the events linked to it are erased immediately.
How to refuse. In the app: Profile tab → Analytics switch. In a browser, you can also open this opt-out link: measurement is switched off on that device (this link switches it back on). Finally, you can write to us at the address in section 1. Refusing changes nothing about how the app works. The random identifier is renewed every 13 months at the latest, and as soon as you delete your account.
5. The “Notify me” forms
Two optional forms offer to tell you about a release (for example the Android version) or about purchases opening on your device, and to ask you what price seems fair to you:
- on the home page (waiting list): email, place of residence, goal and arrival link. These answers are received and stored by our web host Netlify (Netlify Forms), which acts as a processor; it is located in the United States and the transfer is covered by its standard contractual clauses;
- in the app, when purchases are not available on your device (“Let me know at launch”): price judged fair and, if you give it, your email, saved in our Supabase database in a separate table, without any identifier: your email cannot be linked to your use of the app. Audience measurement (section 4) only notes that a form was sent, the price range and whether an email was left, never the address itself.
Legal basis: your consent, given by sending the form. Your email is used only to write to you about that release: no newsletter, no resale. Answers sent in the app are erased once they are 12 months old, by an automatic purge run on the 1st of each month. Those from the home page are kept at Netlify, which does not erase them by itself: we delete them by hand, 12 months at most after the form is sent. In both cases, they are deleted sooner on simple request by email. No payment is requested by these forms.
The “Schools, associations, institutions” form, on the home page, lets you write to us about a partnership, a group or a presentation of Majlis. It collects your email and your message and, if you give them, your name and organisation. These answers are received and stored by Netlify (Netlify Forms), under the same terms as the waiting list above, and a copy reaches us by email at contact@majlisarabic.com. They are used only to reply to you. Legal basis: your consent, given by sending the form. We delete them by hand 12 months at most after our last exchange, or sooner on simple request by email.
6. The “A word for the team” messages
In the Profile tab, the “Write to us” button lets you send us a message from the app. Along with your message, we receive:
- the text you wrote;
- your email address, only if you give it, so we can reply (it is prefilled with your account's address if you have one, and you can clear it);
- the app version, its language and the platform (iPhone, Android or browser);
- the random identifier of your device (the one from section 4, included even if you have refused audience measurement: writing to us is a deliberate act, and the app says so under the field) and the identifier of your Majlis account if you have one.
This information is used only to reply to you and to understand a problem you report. Legal basis: your consent, given by sending the message. It is stored in our Supabase database (section 9), in a table the app can write to but never read back.
So that we read your message quickly, it is passed on to the team through the Telegram messaging service, which acts as a processor and whose servers may be located outside the European Union. What goes through Telegram: the text, your reply address (or your account's), the first name you entered, your progress (lessons finished, points, streak, starting level), the platform, the app version and its language. The identifiers of your device and account do not go through it: they stay in the database.
Messages are erased once they are 13 months old, by an automatic purge, and earlier on simple request by email.
7. The microphone
The exercises where you repeat a word aloud offer, on explicit tap and only where the device allows it, to check your pronunciation. Speech recognition is the one of your device or your browser: on iPhone, Apple's speech recognition service; in a browser, the browser's own. That service processes your voice under its own rules. Majlis records no sound, keeps none and transmits none to its servers. The feature is entirely optional: the app can be used fully without enabling it.
8. Notifications
If you enable the daily reminder, it is scheduled locally on your device. No notification is sent from our servers and no notification token is collected.
9. Where your data is stored
Your progress, the measurement events and the messages you write to us are saved with our database host Supabase, which acts as a processor. Access is partitioned at the database level: technically, an account can only read its own progress, and no account can read the measurement events or the messages back.
This data is hosted in Japan (Tokyo). The European Commission has adopted an adequacy decision for Japan: it considers data protection there equivalent to the GDPR.
10. Purchases
If you buy paid access, payment is made and collected by Apple's App Store. No banking data passes through Majlis and we keep none: we never see your card number.
To know whether your access is active, the app relies on RevenueCat, a processor specialised in validating purchases. On iPhone, the app contacts it as soon as it opens. It receives an identifier: an anonymous identifier generated by RevenueCat or, if you have a Majlis account with an email address, the identifier of that account, so that your access follows you from one device to another. It also receives the products bought and the state of your access (active, expired, refunded) as the App Store communicates them, along with the App Store purchase receipt used to validate them, the language and currency of the device and, like any online service, the IP address of the connection. This list follows RevenueCat's documentation; for the details, its own privacy policy prevails. It receives neither your name, nor your email address, nor your progress.
In a browser, Majlis is a demo: no purchase is offered there and RevenueCat is never contacted. The “Continue on iPhone” button simply opens the App Store page of the app.
The last known state of your access is kept on your device, so that the app stays usable offline.
11. How long
Your data is kept as long as your account exists. It is deleted immediately and permanently when you delete your account. Audience measurement events are erased once they are 13 months old (section 4); answers to the “Notify me” forms, once they are 12 months old (section 5); “A word for the team” messages, once they are 13 months old (section 6).
12. Deleting your account and your data
From the app: Profile tab → Sync card → Delete my account (or Erase my data if you have not created an account).
Deletion is immediate and irreversible: account, progress, streak and achievements are erased from our servers, along with the measurement events linked to your account and the messages sent from that account. Deleting your account does not cancel a subscription: that is done in the App Store. You can also request deletion by email at the address above.
13. Your rights
In accordance with the GDPR, you have a right of access, rectification, erasure, portability and objection regarding your data. Erasure is exercised directly in the app (section 12); for the other rights, write to us: the answer comes within 30 days. You may also refer the matter to the CNIL if you consider your rights not respected.
14. Children
Majlis is not intended for children under 13 and does not knowingly collect their data.
15. Changes
Any change to this policy will be published on this page, with an updated date.