Privacy Policy

Taseel  ·  Last updated: July 20, 2026

This Privacy Policy describes how the Taseel mobile application (formerly referred to in project materials as Tasreef Roots) and the tasreefnlp.com website collect, use, and protect your information. By using Taseel or the Site you agree to this policy.

1. Who We Are

Taseel is an independent Arabic-language learning application operated as part of the Tasreef project. You can reach us at [email protected].

2. Information We Collect

We collect only what is necessary to operate the service:

• Account information — email address, display name, and a bcrypt-hashed password (we never store your plaintext password).
• Learning progress — spaced-repetition state, journey and curriculum progress, correctness, response time, selected learning answers, hint use, review history, contextual mastery, and next due dates. These are tied to your account and stored on our server. The App also keeps an account-scoped device-local copy of setup choices, cached progress, and pending synchronization events so learning can recover from interrupted or offline sessions.
• Personalized learning information — if you choose name-based learning, we store the Arabic name you enter and its resulting root and pattern analysis. A display name or learner-entered Arabic name may be your real name if you choose to provide it.
• Research-pilot information — the production App does not enable the research pilot by default. If a separately approved pilot is enabled and you explicitly consent, we store consent, assigned learning items, selected answers, correctness, response times, and study-stage timestamps until withdrawal or account deletion.
• Timestamps — account creation, review, journey, practice, synchronization, and optional pilot timestamps.
• Vacation mode dates — start and end dates if you activate vacation mode.

We do not require a legal name, phone number, location, device identifiers, crash reports, or advertising analytics. A display name or personalized Arabic name can identify you if you enter your real name.

3. How We Use Your Information

• Authenticate you and keep your account secure.
• Compute your spaced-repetition schedule so you see the right roots at the right time.
• Display your learning statistics (streak, cards due, heatmap) inside the App.
• Adapt root, pattern, sentence, plural, and reading activities to your recorded learning performance.
• Operate an optional research pilot only when it has been separately enabled and you have provided the displayed consent.

We do not use your data for advertising, sell it to third parties, or share it with anyone except as described in Section 5.

4. Data Storage and Security

• Account and progress data is stored in an SQLite database on a Hetzner Cloud server located in Frankfurt, Germany (EU).
• All traffic between the App and our servers is encrypted via HTTPS (TLS 1.2+).
• Passwords are stored as bcrypt hashes (cost factor 12) — your plaintext password is never retained.
• Your access and refresh tokens are stored exclusively in the iOS Keychain or Android encrypted secure storage on your device — never in plain storage.
• Device-local learning preferences and pending synchronization events are stored in the App's private platform container. Android backup is disabled for the App. This local account-scoped data is included in an account export and removed from the device after in-app account deletion.
• Access tokens expire after 15 minutes. Rotating refresh sessions expire after 30 days and can be revoked by signing out, changing the password, or deleting the account.

5. Third-Party Services

We use the following third-party services that may process your data:

• Cloudflare — acts as a reverse proxy and CDN for all traffic to tasreefnlp.com. Cloudflare processes your IP address and request metadata to provide DDoS protection and caching. See Cloudflare's Privacy Policy.
• Bundled fonts — the Cairo and Inter display fonts are packaged inside the App under the SIL Open Font License. The App disables runtime font fetching and does not contact Google Fonts when rendering text.
• Apple Text-to-Speech (iOS) — the App uses the on-device iOS TTS engine to pronounce Arabic text. Audio processing happens entirely on your device; no audio or text is sent to Apple servers by our App.

6. Data Retention

We retain your account and learning data for as long as your account is active. If you delete your account (see Section 7), associated records are deleted from the active database immediately. Encrypted or access-controlled disaster-recovery backups may retain the deleted records for up to 30 daily backup generations and are not used for ordinary product access. If a backup is restored, deletion requests must be reapplied before restored data is returned to service. Server access logs may retain your IP address and requested URL for up to 30 days for security and debugging purposes.

7. Your Rights

You can exercise the following rights at any time through the App:

• Access and correct your display name via Settings → Profile.
• Change your password via Settings → Change Password.
• Delete your account permanently via Settings → Account → Delete Account. This removes the account from the active service immediately; disaster-recovery copies expire under the backup schedule described above.
• Request deletion without the App through the public Taseel account-deletion page. This path remains available if you have uninstalled the App or cannot sign in.

For any other data requests or questions, contact us at [email protected].

8. Children's Privacy

Taseel is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy occasionally. The "Last updated" date at the top will reflect any changes. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Email [email protected].

Account deletion · Terms of Service · Third-Party Notices