Privacy policy
Waha is a Quran and tajweed app for children aged 4 to 12, set up and managed by a parent. This policy explains what we collect, why, who helps us run the app, and the choices you have.
The short version
- A parent creates the account. Children never sign up on their own.
- For each child we keep a first name or nickname, an age band and their learning progress. No date of birth, photos, contacts or precise location.
- Your child's voice is scored and then discarded. It is never used to train AI models.
- No advertising, no advertising IDs and no tracking SDKs.
- You can delete your account and every child on it from the app at any time.
Who we are
Waha ("we", "us") provides the Waha app on iPhone and Android and this website, getwaha.app. If you have a question about this policy or your data, email privacy@getwaha.app.
What we collect
About you, the parent
- Account details: your email address and name, or the details Apple or Google share when you sign in with them.
- Settings: your language, your country (not your location), notification choices and the plan you are on.
- Parent PIN: stored only as a one-way hash. We cannot read it.
- Consent: which version of this policy you agreed to and when.
- Support messages: anything you send us through the app or by email.
- Purchases: your subscription status, handled through the App Store or Google Play. We never see your card details.
About your child
- Profile: a first name or nickname, an age band (4 to 6, 7 to 9 or 10 to 12), an avatar and a time zone. You choose these.
- Learning progress: lessons, letters, scores for each ayah, streaks, XP, badges and daily goals.
- Profile lock: if you set a code on a child's profile, we store only a one-way hash of it.
Your child's voice
When your child recites, the recording is sent to our recitation partner to check each word, and the score comes back to the app. The recording itself is not stored by us, is held by our partner only while it is processed, and is not used to train AI models.
If you turn on recitation review, a recording is kept privately so you can listen and approve it. It is deleted once you decide, or after 24 hours, whichever comes first.
From your device
- Notification token: so we can send the reminders you have switched on.
- App usage: which screens and features are used, so we can improve the app. These events carry no name, email, IP address, advertising ID or device ID.
What we don't collect
No precise location, contacts, photos, microphone access outside recitation, advertising identifiers or date of birth. There are no ads in Waha and no third-party tracking.
How we use it
- To run the app: lessons, recitation scores, progress, streaks and rewards.
- To run your account: sign-in, verification codes, password and PIN resets.
- To keep you informed: the weekly progress email and the reminders you choose. You can turn these off in Settings.
- To provide your subscription and the free trial. To make sure each family gets one free trial, we keep a one-way hash of the email or Apple or Google account used, even after an account is deleted. It is not linked to any other data.
- To answer your support messages.
- To keep Waha secure and to improve it.
We do not sell personal information, and we do not use it for advertising.
Children's privacy
Waha is designed for children, so it is set up by a parent. Before a child uses the app, a parent passes a parental gate, creates the account, agrees to this policy and adds the child's profile. Settings, plans and the parent dashboard sit behind the parent PIN.
Children see each other only within their own family. The global leaderboard shows positions without names or avatars. Children cannot message anyone, and there is no public profile.
As a parent you can see your child's progress, change or remove their profile, and delete everything at any time.
Who helps us run Waha
We use a small number of service providers. Each receives only what it needs for its job.
| Type of provider | What it receives | Why |
|---|---|---|
| Cloud hosting and database | Account, profile and progress data | Running the app, sign-in and storage |
| Recitation checking | Your child's recitation audio and which ayah it is | Checking the recitation word by word |
| Subscription management | An account ID that doesn't identify you, and purchases | Subscriptions |
| Email delivery | Your email address and the email we send | Codes and the weekly progress email |
| Push notifications | Your device's notification token and the message (no child names) | Reminders |
| App analytics | App usage events under an anonymous ID | Understanding which features help |
| Apple and Google | Their own sign-in and purchase data | Sign-in and payments |
To ask which companies we currently use, email privacy@getwaha.app. We may also share information if the law requires it, or to protect the safety of a child.
How long we keep it
- Account, profiles and progress: while your account is open. When you delete your account, everything is erased 30 days later.
- A deleted child profile: erased 30 days after you remove it.
- Review recordings: until you decide, or 24 hours at most.
- Notification tokens: until you sign out or the token expires.
Your choices and rights
- See and export: view each child's progress in the parent area, and export it from that child's settings.
- Correct: change your details and each child's profile in Settings.
- Delete: in the app, go to Parent area, then Settings, then Delete account and all data. Everything is erased 30 days later. If you subscribed through the App Store or Google Play, cancel the subscription there too.
- Notifications and emails: turn them on or off in Settings.
- Ask us: email privacy@getwaha.app to access, correct or delete your data, or to withdraw consent. Depending on where you live, you may also have the right to complain to your local data protection authority.
Security
Data is encrypted in transit and at rest. PINs and profile codes are stored only as one-way hashes, and access to production data is limited to the people who need it to run Waha.
Where data is processed
Our providers may process data in countries other than yours. When that happens, we rely on the provider's contractual safeguards for international transfers.
Changes to this policy
If we change this policy in a way that matters, we will tell you in the app and ask for your agreement again before the change applies to you. The date at the top shows the latest version.
Contact
Email privacy@getwaha.app. For help with the app, see Support.