Massarrah
Get the app
Plate VII — Legal

Privacy Policy

Version 1.0 · Effective March 29, 2026

01Introduction

Massarrah (مسرّة, "joy" in Arabic) is an educational mobile application that teaches ancient Mesopotamian cuneiform writing. Privacy is fundamental to our design — the app works offline-first, requires no account creation, and stores your learning data locally on your device. This policy explains what limited data we do collect and how it is handled.

02Information Stored Locally on Your Device

All learning data is stored exclusively on your device and never transmitted to any server:

  • Learning progress and mastery levels (SM-2 spaced repetition data)
  • Quiz and lesson completion history
  • Game scores and statistics
  • Achievement records
  • Streak data, XP, and daily activity logs
  • App preferences (theme, haptics, notifications, reduced motion)
  • Cuneiform sign and tablet favorites
  • Recent search terms (up to 5)

This data never leaves your device unless you explicitly export it via the share function.

03Information Collected with Your Consent (Firebase Analytics)

If you opt in to analytics (disabled by default), we collect pseudonymized usage data through Firebase Analytics:

  • Feature usage patterns (screens viewed, lessons started, games played)
  • Device type and operating system version
  • App version
  • Session information
  • A pseudonymous app instance identifier (not linked to your identity)

This data is pseudonymized — it is associated with a randomly generated identifier, not your name, email, or any personal information. However, under privacy regulations such as GDPR, pseudonymized data is still considered personal data. We use this data solely to improve app features and understand learning patterns.

Legal basis: Your consent (GDPR Article 6(1)(a)). You can opt out at any time in Settings > Privacy.

04Information Collected Automatically (Firebase Crashlytics)

To maintain app stability, we collect crash and performance data through Firebase Crashlytics. This is always active in release builds and cannot be disabled through the app:

  • Crash reports (stack traces with personal data scrubbed)
  • Device model, operating system version, and orientation
  • Available disk space and memory
  • A pseudonymous installation identifier
  • Your IP address (used transiently by Google for approximate geolocation, then discarded)

Legal basis: Legitimate interest in maintaining app stability and fixing bugs (GDPR Article 6(1)(f)).

05Information We Do Not Collect

We do not collect: your name, email address, phone number, physical address, precise location, photos, contacts, health or fitness data, financial information, browsing history, advertising identifiers, or any other personal identifiers. No account creation is required to use Massarrah.

06Firebase Authentication

The app uses Firebase Anonymous Authentication to generate a random user identifier (UID) at startup. This identifier:

  • Is not linked to any personal information
  • Is used internally for app functionality
  • Creates a record on Google's servers that persists even after you delete local data

Legal basis: Legitimate interest in app functionality (GDPR Article 6(1)(f)).

07Third-Party Services

We use the following third-party services:

  • Firebase Analytics (Google) — pseudonymized usage analytics (consent-required). Google Privacy Policy
  • Firebase Crashlytics (Google) — crash and performance reports (always active). Google Privacy Policy
  • Firebase Authentication (Google) — anonymous user identification. Google Privacy Policy
  • Apple App Store / Google Play Store — in-app purchase payment processing. We never receive your payment details.
  • Firebase Hosting (Google) — website hosting. Standard server logs (IP address, request timestamps) are collected automatically.

Google processes Firebase data under their Data Processing Terms and Security Terms, which include Standard Contractual Clauses for international data transfers.

08In-App Purchases

Massarrah offers an optional tip jar with six consumable purchase tiers ($0.99–$49.99) to support development. Tips are voluntary and do not unlock any features. All payment processing is handled by Apple App Store or Google Play Store. We never receive, process, or store your payment information. Refund requests should be directed to the respective platform store.

09Data Storage and Security

  • Local data: Stored in a local SQLite database on your device. This data is protected by your device's built-in security (device encryption, passcode lock) but is not independently encrypted by the app.
  • Firebase data: Transmitted via TLS encryption and stored on Google Cloud infrastructure in the United States.

We implement reasonable security measures but no system is perfectly secure.

10International Data Transfers

Firebase Analytics, Crashlytics, and Authentication data is processed in the United States by Google. For users in the EU/EEA and UK, these transfers are governed by:

  • The EU-US Data Privacy Framework
  • Standard Contractual Clauses (SCCs)
  • Google's Data Processing Terms

11Your Privacy Rights

All users can:

  • Opt out of analytics at any time (Settings > Privacy)
  • Delete all local data (Settings > Advanced > Delete All Data)
  • Export their data as JSON (Settings > Advanced > Export My Data)
  • Uninstall the app to remove all local data

EU/EEA and UK residents (GDPR) have additional rights:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with your local data protection authority

To exercise these rights, contact us at support@massarrah.app.

California residents: although we do not currently meet CCPA thresholds, we proactively honor these rights:

  • Right to know what data is collected
  • Right to delete your data
  • Right to opt out of sale (we do not sell data)
  • Right to non-discrimination

12Children's Privacy

Massarrah is a general-audience educational app. We do not knowingly collect personal information from children under 13. Since the app requires no account and stores data locally, no personal information is collected from any user regardless of age.

If you are a parent or guardian and believe we have inadvertently collected data from your child, please contact us at support@massarrah.app.

13Data Retention

  • Local data: Remains on your device until you delete it or uninstall the app.
  • Firebase Analytics data: Retained for up to 14 months, then automatically deleted.
  • Firebase Crashlytics data: Retained for up to 90 days, then automatically deleted.
  • Firebase anonymous auth records: Persist on Google's servers; anonymous accounts may be auto-deleted after 30 days of inactivity if configured.

14Website Analytics

Our website (massarrah.app) uses Google Analytics 4, which is activated only after you consent via the cookie banner. If you decline or ignore the banner, no analytics data is collected. The website stores your consent preference in your browser's localStorage (not as a cookie). You can change your preference at any time using the "Cookie Settings" button in the footer.

15Changes to This Policy

We may update this policy to reflect changes in our practices or applicable law. We will update the version number and effective date above. Material changes will be communicated through app update notes. Continued use after changes constitutes acceptance of the updated policy.

16Contact

For privacy inquiries: support@massarrah.app

For all legal matters: legal@massarrah.app

Massarrah — https://massarrah.app