Alaqay — Privacy Policy

Alaqay ("we," "us," "our") operates a family digital library platform: a mobile app and web tools that let parents and guardians curate, organize, and assign educational and media content to their children within a shared family account. This policy explains what information we collect, how we use it, and the choices you have.

The short version: a family account is created and controlled by an adult. Children never create their own account, never provide contact information, and can only see content their parent has explicitly assigned to them. We do not sell personal data, and we do not run behavioral advertising.

1. Information we collect

1.1 Account holder (adult) information

Name, email address, and authentication credentials (stored as salted hashes, never in plain text).
Role within the family (owner, parent, teacher, or guest), used to control what each person can do.
Device identifiers, solely to deliver push notifications you've opted into.

1.2 Child profile information

A name or nickname and an age group, entered by the parent — used only to tailor content recommendations and progress tracking.
A device PIN chosen by the parent for switching into Child Mode — this is not a password and is never used to identify the child outside the family's own devices.
Learning activity within the app: which assigned collections or courses were opened, lesson progress, and completion status.

We do not collect a child's email address, phone number, or precise location, and children cannot create posts, messages, or any content visible outside their own family.

1.3 Content and curation data

Alaqay does not host third-party videos or media itself. When an adult saves a link from a supported platform (YouTube, Vimeo, TikTok, X, and — where configured — Instagram or Facebook), we store the link and metadata (title, thumbnail, duration) needed to display it inside a collection. Playback happens through the source platform, which has its own privacy practices.

1.4 Technical and diagnostic data

We collect standard technical data (app version, device type, crash reports) to keep the service reliable. Crash and error diagnostics are processed through Sentry and contain no family or child content — only technical stack traces.

1.5 Payment data

If a family subscribes to a paid plan, billing is handled directly by our payment processor, Stripe. Alaqay does not receive or store your card number.

2. Zero Content Discovery

Child Mode is built around a safety principle we call Zero Content Discovery: a child can only open collections and courses an adult has explicitly assigned to them. There is no open search, no browsing of the wider platform, and no way for a child to discover content outside what their family has chosen for them.

3. How we use information

To operate the family account system, including role-based permissions between adults and children.
To let parents assign, organize, and track educational content for their children.
To send account and activity notifications you've enabled (e.g., a child completed an assigned lesson).
To investigate complaints or safety reports raised within a family, recorded in a tamper-evident audit log.
To maintain the security, integrity, and reliability of the service.

4. How information is shared

Recipient	Purpose
Firebase (Google)	Delivering push notifications to your devices.
Stripe	Processing subscription payments, where a family subscribes to a paid plan.
Sentry	Technical crash and error diagnostics only — no family or child content.
YouTube / Vimeo / TikTok / X / Instagram / Facebook	Playback of media an adult has chosen to link into a collection, subject to that platform's own terms.

We do not sell personal information, and we do not share child profile data with advertisers.

5. Your rights and choices

Access & export: account owners can request a full export of their family's data at any time from within the app; it is prepared and made available for download.
Correction: adults can edit or remove their own information and any child profile within their family directly in the app.
Deletion: you can request deletion of a family account and all associated data by contacting us (see below).
Notifications: push and email notifications can be turned off in account settings.

6. Data security

Each family's data is isolated at the database level so that one family can never read another's records. Credentials are stored as salted hashes, not plain text, and administrative actions affecting a family (such as resolving a complaint) are recorded in a hash-chained audit log so that tampering can be detected.

7. Children's privacy

Alaqay is designed to be used by children only within a family account created and supervised by a parent or legal guardian. A child profile is created by that adult, who consents to this policy on the child's behalf and controls what content, if any, is assigned. We do not knowingly collect personal information directly from a child, and we do not permit children to interact with anyone outside their own family through the app.

If you are a parent or guardian and believe your child has provided us with information outside of the family-managed profile described above, please contact us and we will delete it.

8. International users

Depending on your location, you may have additional rights under laws such as the EU/UK GDPR or applicable data protection legislation in your country, including the right to access, correct, restrict, or delete your data, and to lodge a complaint with your local data protection authority.

9. Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected by updating the "Last updated" date above.

10. Contact us

Questions about this policy, or requests to access, correct, or delete your family's data, can be sent to privacy@alaqay.app.