Privacy Policy

1. Information We Collect

1.1 Personal Information

When you create an account or use our services, we may collect:

• Account Information: Name, email address, profile picture
• Authentication Data: Login credentials (securely encrypted)
• User Preferences: Favorite prayers, saved hymns, notification settings

1.2 Usage Data

• App Activity: Features used, content viewed, time spent in the app
• Progress Data: Faith Challenge game progress, achievements, scores
• Spiritual Assistant Interactions: Questions asked (not stored permanently)

1.3 Technical Data

• Device Information: Device type, operating system, app version
• Network Data: IP address, connection type
• Push Notification Tokens: FCM tokens for sending notifications
• Analytics Data: Anonymous usage statistics via Firebase Analytics

1.4 Subscription and Payment Data

• Subscription Status: Active subscriptions, purchase history
• Payment Information: Processed securely through Google Play Billing (we do not store payment card details)

2. How We Use Your Information

We use the collected data for the following purposes:

2.1 Service Provision

• Provide and maintain app functionality
• Personalize your spiritual experience
• Save your progress and preferences
• Manage your subscription and premium features

2.2 Communication

• Send daily spiritual notifications (Saint of the Day, Verse of the Day, Prayer reminders)
• Notify you about new content (hymns, movies, features)
• Send important app updates and announcements

2.3 Improvement and Analytics

• Analyze app usage to improve performance and user experience
• Identify and fix technical issues
• Develop new features based on user behavior

2.4 Advertising (Free Users)

• Display relevant ads through Google AdMob
• Measure ad performance and effectiveness
• Premium subscribers do not see ads

3. Data Sharing and Third-Party Services

We do not sell your personal data to third parties. However, we use the following trusted services:

3.1 Essential Services

• Supabase: Secure database hosting and authentication (data encrypted at rest and in transit)
• Firebase: Push notifications, analytics, and crash reporting
• Google Play Services: In-app purchases and subscriptions

3.2 AI and Content Services

• Google Gemini AI: Powers the Spiritual Assistant feature (conversations are not permanently stored)
• YouTube API: Displays embedded videos (subject to YouTube's privacy policy)

3.3 Advertising (Free Users Only)

• Google AdMob: Serves ads to free users (subject to Google's advertising policies)
• AdMob may collect device identifiers and usage data for ad personalization
• You can opt out of personalized ads in your device settings

4. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS
• Secure Storage: Data stored in Supabase with Row Level Security (RLS) policies
• Authentication: Secure login with encrypted passwords
• Regular Backups: Automated backups to prevent data loss
• Access Control: Strict access policies limiting who can view your data

5. Your Rights and Choices

You have the following rights regarding your personal data:

5.1 Access and Portability

• View your personal data at any time through the app
• Request a copy of your data in a portable format

5.2 Correction and Update

• Update your profile information directly in the app
• Correct any inaccurate data

5.3 Deletion

• Delete your account and all associated data permanently
• Data deletion is irreversible and cannot be recovered
• To delete your account, go to Settings → Privacy → Delete Account

5.4 Notification Control

• Enable or disable specific notification types
• Manage notification preferences in Settings → Notifications

5.5 Analytics Opt-Out

• Disable analytics tracking in Settings → Privacy → Analytics

6. Children's Privacy

Kaneesty is suitable for all ages, including children. We are committed to protecting children's privacy:

• We do not knowingly collect personal information from children under 13 without parental consent
• The Kids Zone features are designed to be safe and age-appropriate
• Parents can manage their children's app usage and data through device parental controls

7. Data Retention

We retain your data as follows:

• Active Accounts: Data is retained while your account is active
• Deleted Accounts: All personal data is permanently deleted within 30 days of account deletion
• Anonymous Analytics: Aggregated, anonymized data may be retained for statistical purposes
• Legal Requirements: We may retain certain data if required by law

8. International Data Transfers

Your data may be transferred to and processed in countries outside Egypt, including:

• United States (Supabase, Firebase, Google services)
• European Union (data center locations)

We ensure that all data transfers comply with applicable data protection laws and use appropriate safeguards.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes:

• We will notify you through the app or via email
• The "Last Updated" date at the top will be revised
• Continued use of the app after changes constitutes acceptance of the new policy

10. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data based on:

• Consent: You provide consent when creating an account and using our services
• Contract: Processing is necessary to provide the services you requested
• Legitimate Interests: Improving our services and ensuring security
• Legal Obligations: Compliance with applicable laws and regulations