This Privacy Policy explains how Tadreeb ("Tadreeb", "we", "us" or "our") collects, uses, shares and protects personal data when you use the Tadreeb mobile application and the website tadreeb.app (together, the "Service"). By using the Service you acknowledge the practices described in this policy. If you do not agree with this policy, please do not use the Service.

1. Who we are

Tadreeb is an educational quiz application focused on Islamic knowledge. For any privacy-related question or request you can reach us at contact@tadreeb.app. We will respond within a reasonable time and in any event within the period required by applicable law.

2. Data we collect

Account and profile data

* When you sign in with Apple or Google we never receive or store a password; authentication is handled by the identity provider, which shares a verified token and basic profile information with us.

Usage and gameplay data

• Gameplay records — answers given, scores, streaks, learning-path progress, badges, milestones, power-up usage and multiplayer results. This is the core of the Service: without it we cannot save your progress.
• Social data — friend connections, friend requests and competition memberships you create within the app.
• Free-tier usage counters — how many games you have played within the free allowance, used solely to apply the limits described in the app.

Device and technical data

• Push notification token — a device identifier issued by Apple/Google/Expo, stored only if you allow notifications, used solely to deliver the notifications you have enabled.
• Device identifier for offline content — a randomly generated identifier used to deliver and update the offline question bundle.
• App language, app version, platform and approximate technical context (e.g. error messages) — used for localisation, support and diagnosing problems.

Analytics data

We use PostHog to understand how the Service is used (for example which screens are visited, which game modes are played and where errors occur). Analytics events are linked to a pseudonymous identifier and to your account id so that we can analyse product behaviour. We do not use analytics data for third-party advertising and we do not sell it.

Purchase data

Premium subscriptions are processed by Apple App Store or Google Play and administered through RevenueCat. We receive subscription status (active, expiry date, product) — we never receive or store your payment card details. Payments are subject to the privacy policies of Apple and Google respectively.

3. Why we process your data (legal bases)

• Performance of a contract — creating your account, saving progress, running multiplayer games, delivering Premium features.
• Legitimate interests — securing the Service, preventing cheating and abuse, measuring and improving product quality through analytics, and providing customer support.
• Consent — push notifications and any optional data you choose to provide. You can withdraw consent at any time in the app or your device settings.
• Legal obligations — where we are required to retain or disclose data by applicable law.

4. Who we share data with

We do not sell personal data and we do not share it with advertisers. We share data only with the processors needed to run the Service, under data-processing agreements:

Other players can see your username, nationality (if provided), scores, ranks and game results in leaderboards, competitions and multiplayer games — that visibility is inherent to those features. We may also disclose data where required by law, to enforce our Terms of Service, or to protect the rights, safety or property of Tadreeb, our users or others.

5. International transfers

Our infrastructure providers may process data in countries outside your own, including outside the European Economic Area. Where that happens we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Retention

• Account and gameplay data are retained for as long as your account exists.
• When you delete your account, your personal data is deleted or irreversibly anonymised within 30 days, except where we must retain limited data to comply with legal obligations or resolve disputes.
• Analytics data is retained in accordance with PostHog's retention settings and is pseudonymised.

7. Security

We protect your data with industry-standard measures, including TLS encryption in transit, hashed passwords, scoped access credentials and server-side validation of all gameplay results. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we work to protect your data appropriately and will act on reported vulnerabilities.

8. Your rights

Depending on where you live (including under the GDPR), you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data (your username and profile can be edited in the app);
• Delete your data — you can delete your account directly in the app under Settings, or email us;
• Receive a copy of your data in a portable format;
• Object to or restrict certain processing;
• Withdraw consent at any time (e.g. disable push notifications);
• Complain to your local data protection authority.

To exercise any of these rights, contact contact@tadreeb.app. We may ask you to verify your identity before fulfilling a request.

9. Children

The Service is not directed at children under 13 (or the higher minimum age that applies in your country). We do not knowingly collect personal data from children below that age. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows the current version. For material changes we will provide notice in the app or by email before the change takes effect. Continued use of the Service after a change means you accept the updated policy.

11. Contact

Questions, requests or complaints about privacy: contact@tadreeb.app.