# Privacy Policy — Nura English

**Last updated:** 2026-05-16

Nura English ("we", "the app") is an English-learning app for Arabic speakers. We respect your privacy and only collect the data needed to run the app.

## 1. What we collect

| Data | Why | How long we keep it |
|---|---|---|
| **Phone number** | To create your account and verify your identity via SMS one-time code | Until you delete your account |
| **First name** | To personalise the experience ("Welcome back, Ahmed") | Until you delete your account |
| **Learning preferences** (motivation, English level) | To recommend appropriate units | Until you delete your account |
| **Progress data** (units completed, XP earned, streak) | To track your learning journey | Until you delete your account |
| **Voice recordings** (only during AI conversation features) | Sent to OpenAI Whisper for transcription — never stored on our servers after the conversation ends | Deleted immediately after processing |
| **Conversation transcripts** (with AI tutor) | Sent to Anthropic Claude to generate responses | Not retained after the conversation |

We do **not** collect: email, address, payment info (the app is free in Phase 1), social media data, contacts, location, or device identifiers beyond what iOS/Android automatically provide.

## 2. Third parties

- **Supabase** — stores your account profile (phone, name, preferences, progress). Data resides in EU servers.
- **Twilio** — sends the SMS verification code. They retain delivery metadata per their own policy.
- **OpenAI** — processes your voice recordings into text for the pronunciation feature.
- **Anthropic Claude** — generates responses from your AI tutor.
- **Apple/Google** — distribute the app via App Store / Play Store.

We do not sell your data. We do not show ads. We do not use third-party analytics SDKs (no Facebook, Google Analytics, etc.).

## 3. Children's privacy

Nura English is intended for ages 13 and above. If you believe a child under 13 has created an account, contact us and we'll delete it.

## 4. Your rights

You can at any time:
- **View your data** — in the Profile tab
- **Delete your account** — Profile → Sign out → contact us to fully delete (account deletion endpoint coming in Phase 2)
- **Withdraw consent** — uninstall the app

Email us at **[email protected]** or Al Moosa Tower 2, B FLoor, 12B1, Dubai , UAE.  to request data export or deletion.

## 5. Security

Phone numbers and account data are stored encrypted at rest by Supabase. Communication between the app and our servers uses HTTPS/TLS. SMS codes expire after 60 seconds.

## 6. Changes to this policy

We'll update this page if the data we collect ever changes. The "Last updated" date at the top will reflect the change.

## 7. Contact

**Email:** [email protected]
**Operated by:** Knowledge Planet Holdings Limited
**Country:** Saudi Arabia