MASĪD AI | Arabic Learning

MASĪD AI PRIVACY POLICY

Effective Date: July 10, 2026

MASĪD AI (“MASĪD AI,” “we,” “us,” or “our”) is an Arabic-language learning platform available through our website, mobile application, and related services (collectively, the “Services”). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights available to you. By using the Services, you agree to the practices described in this Policy.

1Who We Are and How to Reach Us

Data Controller: MASĪD AI. MASĪD AI is not currently a registered company; this Policy will be updated with formal entity details if and when one is formed.

Privacy Contact: masid.app@gmail.com

2Information We Collect

2.1 Account Information

When you register, we collect your name, email address, phone number, and password (stored in hashed form) to create and secure your account.

2.2 Usage and Progress Data

We collect information about how you use the Services, including:

Lessons and exercises completed, quiz results, and learning-confidence scores.
Spaced-repetition intervals and review scheduling data.
Session activity, feature usage, and general app/system analytics.

2.3 Emotional and Stress Check-Ins

The Services include a voluntary, user-reported check-in (e.g., “Overwhelmed,” “Balanced,” “Confident”) that you may complete during a session. We use this self-reported information, along with related stress metrics, solely to calibrate and personalize the adaptive AI learning path and reinforcement style shown to you. This information is not used to make medical, health, or diagnostic inferences about you, and is not shared with third parties for advertising or marketing purposes. Where required by law, we collect this information only with your affirmative consent, which you may withdraw at any time; declining or skipping a check-in will not block your access to core lessons.

2.4 Voice and Audio Data

With your permission, we access your microphone to record short audio clips during pronunciation and speaking exercises. These recordings, along with related text from chat-based exercises, are processed through automated speech recognition and an AI dialogue engine to generate accent feedback, pronunciation scores, and conversational responses. We do not permit this processing to be used to train public or foundational machine learning models outside the scope of providing the Services to us, and we do not sell or share raw voice recordings with third parties for advertising or marketing. You may decline microphone access, though this will limit your ability to use pronunciation-based exercises. (See Section 7 for retention details).

2.5 Device and Technical Data

We automatically collect certain technical information, including IP address, device type and identifiers, operating system, browser type, language settings, and app crash/diagnostic logs, in order to operate, secure, and improve the Services.

2.6 Cookies and Similar Technologies

Our website uses cookies, local storage, and similar tracking technologies to keep you signed in, remember your preferences, and understand how visitors use our site (analytics). Where required by law, we will request your consent through a cookie banner before setting non-essential cookies. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the site from working correctly.

2.7 Payment Information

If you purchase a workshop, product, or subscription, payment card details are collected and processed directly by our third-party payment processor. We do not store full payment card numbers on our own servers.

3How We Use Your Information

We use the information described above to:

Create, authenticate, and manage your account.
Deliver lessons, track progress, and personalize the spaced-repetition schedule.
Generate pronunciation feedback and conversational responses from voice and text input.
Calibrate the adaptive AI learning path and reinforcement style based on your voluntary emotional check-ins.
Process purchases of workshops and products.
Send transactional communications (e.g., account, billing, security notices).
Send marketing communications, such as our newsletter, where you have opted in, with an unsubscribe option in every email.
Monitor, secure, debug, and improve the Services.
Comply with legal obligations and enforce our Terms of Use.

4Legal Basis for Processing (EEA/UK Users)

Where the GDPR applies, we rely on the following legal bases:

Contract: processing needed to create your account and deliver the Services you request.
Consent: microphone access for voice exercises, emotional/stress check-ins, non-essential cookies, and marketing emails, each of which you may withdraw at any time.
Legitimate interests: securing the Services, preventing fraud, and improving product quality, balanced against your rights.
Legal obligation: record-keeping and responses to lawful requests from authorities.

Where we use your emotional check-ins or learning data to automatically personalize your lesson path (automated decision-making), this personalization affects only the content and pacing you see in-app; it does not produce a legal or similarly significant effect on you, and you may always request human review of how your account has been personalized by contacting us.

5How We Share Your Information

We do not sell your personal information. We share information only with:

Google Firebase: Used for authentication and secure storage of account and profile data.
AI speech-recognition and dialogue providers: Google Cloud Speech-to-Text and OpenAI Whisper process your voice recordings and chat text to generate pronunciation feedback and conversational responses. We use providers whose terms prohibit using your data to train their public or foundational models.
Payment processors: Stripe is used to process secure purchases of workshops, products, or subscriptions.
Analytics providers: Google Analytics is used to understand aggregate product usage and diagnostics.
Email/communications providers: Mailchimp and Resend are used to deliver transactional emails and newsletters.

All third-party service providers are contractually required to protect your data and to use it only for the purposes we specify.

6International Data Transfers

Your information may be processed in countries other than your own, including the United States, where our service providers operate. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or an equivalent safeguard.

7Data Retention

We retain personal data only as long as needed for the purposes described in this Policy:

Account and progress data: retained while your account is active, and for 30 days after deletion to allow recovery, unless a longer period is required by law.
Voice recordings: retained for 30–60 days for diagnostic and quality purposes, after which they are automatically deleted, unless you choose to save specific clips within the app.
Emotional/stress check-in data: retained in aggregate/de-identified form for as long as your account is active to support learning-path calibration; raw check-in entries are retained for 30 days.
Technical/log data: retained for up to 6 months for security and diagnostic purposes.

You can request earlier deletion at any time as described in Section 9.

8Data Security

We use industry-standard safeguards, including encryption in transit and at rest, access controls, and secure hosting through our infrastructure providers, to protect your data. No system is completely secure, and we cannot guarantee absolute security.

In the event of a data breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.

9Your Privacy Rights

9.1 General Rights

Subject to applicable law, you may have the right to access the personal data we hold about you, correct inaccurate or incomplete data, delete your personal data (“right to be forgotten”), restrict or object to certain processing, receive a portable copy of your data, or withdraw consent at any time without affecting prior lawful processing.

You can exercise most of these rights directly from your profile dashboard, or by contacting masid.app@gmail.com. We will respond within the timeframe required by applicable law.

9.2 California Residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, request deletion, correct inaccurate information, and opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising your privacy rights.

9.3 Marketing Preferences

You may opt out of marketing emails, including the newsletter, at any time using the unsubscribe link in each email or through your account settings. You will continue to receive transactional and account-related messages.

10Children's Privacy

The Services are intended for a general audience and are not directed to children. We do not knowingly collect personal information from children under the age of 13 (or the applicable minimum age in your jurisdiction) without appropriate parental consent. If we learn that we have inadvertently collected personal information from a child under this age, we will take steps to delete it.

Parents or guardians who believe their child has provided us with personal information may contact masid.app@gmail.com to request deletion.

11Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies before providing any personal information.

12Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and/or a prominent notice on the Services prior to the change becoming effective, and update the “Last Updated” date above. Your continued use of the Services after changes take effect constitutes acceptance of the revised Policy.

13Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: masid.app@gmail.com

We do not currently maintain a public mailing address; email is the fastest way to reach us.