Privacy Policy

My Ayah ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. This policy complies with the California Online Privacy Protection Act (CalOPPA), the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

Personal Information:

• Name: Collected during account creation
• Email Address: Required for all sign-in methods
• Phone Number: Optional, only for email/password sign-ups

Authentication Data:

• Password (encrypted and hashed by Firebase)
• Authentication tokens from Apple Sign In or Google Sign In

Usage Data:

• Favorite stories and preferences
• Selected Ayah paths
• Viewing history and interactions

Subscription Information:

• Subscription plan type (monthly or annual)
• Purchase dates and renewal status
• Transaction IDs (processed by Apple via StoreKit)

• To provide and maintain our services
• To personalize your daily Ayah experience based on selected paths
• To manage your subscription and account
• To send you service-related notifications
• To improve and optimize the app experience
• To comply with legal obligations

We do NOT sell your personal information to third parties.

Service Providers:

• Firebase (Google): Used for authentication, database, and storage services. Firebase complies with GDPR and CCPA.
• Apple Inc.: Processes all subscription payments through their secure In-App Purchase system.

Under GDPR and CCPA, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Delete your account and personal data
• Right to Data Portability: Receive your data in a portable format
• Right to Withdraw Consent: Opt-out of data collection at any time
• Right to Object: Object to processing of your personal data

To exercise these rights, please delete your account through Settings → Delete Account, or contact us at privacy@myayah.com

• Passwords are encrypted and hashed by Firebase
• Data transmission is encrypted using SSL/TLS
• Firebase services are SOC 2 and ISO 27001 certified
• Payment information is handled by Apple's PCI-compliant system

We retain your personal information only as long as necessary to provide our services and comply with legal obligations. When you delete your account, all your personal data is permanently removed from our systems within 30 days.

Our app is intended for users aged 4 and above. We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have collected information from a child under 13, please contact us immediately.

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements, including Standard Contractual Clauses approved by the European Commission.

• Firebase (Google): Privacy Policy
• Apple Inc.: Privacy Policy

In accordance with CalOPPA, we agree to the following:

• Users can visit our app anonymously (without creating an account)
• Our Privacy Policy link is accessible from our Settings page
• We notify users of privacy policy changes via app updates
• Users can change their personal information through Settings

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.