Masri Privacy Policy

Last update: 2026-10-06

Masri (formerly ClayMasri, “we”) helps you learn Egyptian Arabic. This policy says what data we collect and why.

Data we collect

Account: email address, password hash, display name, and whether you confirmed your email address. With Sign in with Apple: your Apple user ID, the email address Apple shares with us (if any; it may be a private relay address), and a token from Apple that lets us revoke Masri's access when you delete your account
Learning: lesson progress, flashcard scores, streaks, XP
Chat: messages you send to the tutor. Only if you agree in the app ("Agree and chat"), messages you write from then on are sent to our AI providers (Google Gemini, with xAI as a fallback) together with the lesson context to generate replies. We do not send your email or name to them, and they are not used to identify you. If you choose "Not now" or turn AI replies off in Profile, the tutor uses built-in replies and your messages are not sent to any AI provider.
Purchases: App Store subscription status and Apple transaction IDs (no card numbers; Apple handles payment)
Support messages: the email address, topic and message you send through the support form, and your account number if you were signed in
Notifications (only if you allow them): your device's push token, app version, language and time zone, your notification settings, and a log of the reminders we sent
Apple Wallet (only if you add the Masri card): a member number and card code we create for you, and the registration Apple Wallet sends us (a device ID and push token) so the card stays up to date
Optional app usage analytics and crash/performance reporting are disabled in this release. Masri does not send product-event batches, RevenueCatUI feature-usage events or Apple MetricKit reports. Previously queued optional SDK events are removed before subscription SDK setup; if that privacy cleanup fails, SDK setup pauses while Apple subscription management and Restore remain available. Earlier app versions may attempt to send optional reports; our API acknowledges and discards them without storing their contents. Optional Apple Wallet device-log contents are also discarded.

How we use data

Run the app and save your progress
Power AI chat replies
Check free limits and Pro access
Send the emails your account needs: a link to confirm your address when you sign up with email, a password reset link when you ask for one, and a confirmation and our replies when you write to support. We do not send marketing email.
Fix bugs and improve content
Maintain essential service logs to operate and secure the service and diagnose failed requests. These include request identifiers, routes, response statuses and classified server errors, which may be linked when investigating an account or support request; they are separate from the disabled optional app reports.

Sharing

We use service providers to run the app: Railway (hosting and database), Google Gemini and xAI (AI tutor replies, only with your consent), Resend (delivers the emails listed above), RevenueCat (subscription status, receipt validation and purchase analytics; the app identifies you to RevenueCat by your Masri account number, not by your name or email; optional SDK diagnostics and automatic attribution-device collection are disabled), and Apple (App Store purchases, Sign in with Apple, and delivering notifications and Wallet card updates). We do not sell your personal data and we do not use it for advertising or tracking.

Retention

Account data: while your account is open.
Previously collected usage records remain subject to the existing 13 months retention limit, then automatic deletion. Previously collected crash and performance reports remain subject to the existing 90 days limit. Disabling new optional collection does not itself delete historical records; account deletion continues to remove linked analytics records as described below.
Password reset links work for 30 minutes and email confirmation links for 3 days. We store only a scrambled (hashed) copy of each link and delete it about a day after it is used or expires.
Support messages: until you delete your account (we then delete the messages sent from your account or from its email address), or until you ask us to delete them.
Deleting your account (Profile → Delete account) removes right away: your account and profile, learning progress, chat history, the purchase records in our database, your sign-in sessions on every device, your push tokens and notification settings, your Wallet membership and its registrations, support messages sent from your account or its email address, a waitlist signup with that email address, and any analytics records linked to your account. A Masri card already in Apple Wallet stays on your device until you remove it; it stops updating.
App Store notifications about a subscription (transaction and product identifiers, no name or email) are kept after you delete your account, no longer linked to it, so a repeated notification is never mistaken for a new purchase.
Sign in with Apple: when you delete your account we also ask Apple to revoke Masri's access to your Apple ID. If Apple can't be reached at that moment, we keep only the encrypted Apple token (nothing else about you) and retry until Apple confirms, then delete it.
RevenueCat: when you delete your account we ask RevenueCat to delete its record of your account. If that request fails, we keep only your former account number and retry until it succeeds.

Children

Masri is not for children under 13. Do not create an account for them.

Your rights

You can delete your account and its data at any time in the app; "Retention" above lists what that removes. To get a copy of your data, send a request through the support form and we will email it to you within 30 days. Subscription billing records stay with Apple under Apple's own policies.

Contact

Use the form at Masri Support (topic "Privacy or my data").