Privacy Policy

1Introduction

“Mudrik” (مُدرك) is an educational Android app (com.mudrik.app) that helps students review and learn through interactive stages and questions. The app is developed and operated by Mudrik dev (“we”).

This policy explains which information the app handles, why, who it is shared with, and how you can delete it. If you have any question, contact us using the details at the end of this page.

2Information we handle

Account information

Using Mudrik requires an account. When you create an account or sign in, we handle:

• Your name as you type it when registering, or the name of your Google account if you sign in with Google.
• Your e-mail address.
• Your password if you register with e-mail: it is sent over an encrypted connection directly to Google’s Firebase Authentication service, which stores it in a protected form that cannot be read. The app does not store your password and we cannot see it.
• An account identifier: a random code that Firebase creates for your account.
• Operational data that Firebase keeps with the account, such as when it was created, the last sign-in and the sign-in method. When you sign in with Google, the account data may include a link to your Google profile picture; the app does not display or use it.

Purchase information

• When you buy a school grade in the app, payment is made through Google Play. We do not collect or see your card or payment method; Google handles it entirely.
• We use RevenueCat to verify your purchases. RevenueCat receives your account identifier and the purchase data provided by Google Play — such as the product you bought, the purchase token, its date and the store country — to determine which grades are unlocked for your account.
• We do not send your name or e-mail address to RevenueCat.

Technical data required by the services

When the app connects to Google services (sign-in and Google Play) and to RevenueCat, technical data such as your IP address, device type, operating system and version, app version and device language are transmitted as part of the connection. These services use it to provide their service and protect it against abuse; sign-in protection may include verification mechanisms provided by Google.

Data that stays on your device

• Your learning progress: the stars you earned in each stage.
• The last subject you opened, to show the “Continue your journey” button.

This data is stored inside the app on your device and is not sent to us or to any server. Details in Learning progress and local data.

What we do not collect

• No ads, and we do not use the advertising ID (Advertising ID).
• No analytics or tracking tools, and no crash-reporting tools.
• We do not request access to your location, camera, microphone, contacts, or photos and files.
• The app has no chat, no public profiles and no communication between users.

App permissions

The app uses the internet and network-state permissions (for sign-in and purchase verification) and the Google Play billing permission (for purchases). The app package also contains technical permissions declared by the Google and Android libraries used for sign-in, including biometric-authentication permissions declared by Android’s credential-management library. The app does not use them to read your fingerprint or any biometric data, and none of it reaches us.

3How we use information

• To create your account, sign you in and protect it, and to send a password-reset e-mail when you ask for one.
• To show your name and e-mail address on the “My account” page.
• To verify your purchases, unlock the grades you bought and restore them.
• To save your progress and show your stages and stars on your device.
• To answer your messages and the support or deletion requests you send us.

We do not use your data for advertising or marketing, we do not sell it, and we only share it with the service providers listed in this policy.

4Sign-in and authentication

• You can sign in with your e-mail address and password, or with your Google account.
• Authentication is provided by Google’s Firebase Authentication service.
• When you choose “Continue with Google”, Google shows its own account picker and then shares your name and e-mail address to create or open your Mudrik account.
• When you tap “Forgot password?”, Firebase sends a reset e-mail to your address.
• Signing out ends the session on the device; it does not delete your account or the progress stored on the device.

5Purchases

• Mudrik unlocks school grades with a one-time purchase per grade, not a recurring subscription.
• Payment and the displayed price are handled by Google Play and are subject to the Google Play terms and Google’s privacy policy.
• Ownership of a grade is linked to your account identifier at RevenueCat; you can restore your purchases from “My account” or from the purchase page.
• Deleting your account does not cancel a purchase and does not mean a refund; refund requests are subject to Google Play’s policies.

6Learning progress and local data

• Your progress (stars in each stage) and the last subject you opened are stored in the app’s private storage on your device; we do not sync them with any server.
• Progress belongs to the device, not to the account: if someone else signs in on the same device they will see the progress stored there, and when you change devices your progress is not transferred through our servers.
• If you used an earlier version of Mudrik, the app automatically moves the progress saved by that version on the same device into the new version, once.
• Android backup: we exclude your progress files from the cloud backup that Android makes to your Google account. When you transfer data directly from an old phone to a new one (Android 12 and later), your progress may be copied to the new device. Android’s backup may include other technical app files, such as the sign-in state and the last subject opened; this is controlled by the backup setting of your device and your Google account.
• This data is removed from the device when you delete your account inside the app, clear the app’s data or uninstall the app.

7Service providers

To run the app we rely only on the following service providers, each of which processes data under its own policy:

• Google — Firebase Authentication and Sign in with Google: account creation and sign-in. Receives name, e-mail address, password (in protected form), account identifier and technical data. Firebase privacy · Google Privacy Policy
• Google Play and Billing: payment, order history and proof of purchase, under your Google account. Google Play Terms
• RevenueCat, Inc.: purchase verification and grade ownership. Receives the account identifier, purchase data and technical data — not your name or e-mail address. RevenueCat Privacy Policy

We do not share your data with anyone else unless the law requires us to. Data may be processed and stored on these companies’ servers outside your country.

8Data retention

• Account data at Firebase: kept while the account exists and deleted when the account is deleted.
• Purchase record at RevenueCat: kept while needed to provide and restore the grades you bought; you can request its deletion by e-mail. If you delete your account inside the app only, this record remains linked to a random identifier that contains neither your name nor your e-mail address.
• Google Play records: Google keeps order and payment records under its own policies and legal obligations.
• Data on your device: kept until you delete your account in the app, clear the app’s data or uninstall it.
• Your messages to us: kept only as long as needed to handle your request and document that it was completed.

9Account and data deletion

You can delete your account at any time inside the app: My account → Sensitive zone → Delete account (in the app these labels are in Arabic: «حسابي» ← «منطقة حساسة» ← «حذف الحساب»).

If you cannot use the app, or you also want your purchase record at RevenueCat deleted, send a request by e-mail. The account-deletion page explains both methods and what is deleted and what remains.

Delete account and data

10Children and students

• Mudrik is an educational app for students of different school levels. It contains no ads or tracking tools, and no chat or public profiles.
• The app requires an account with an e-mail address. If the student is under 13, or under the age their country requires for consent to data processing, a parent or guardian must create or approve the account and supervise its use.
• We do not ask students for any information beyond what this policy describes.
• A parent or guardian can delete the account inside the app or request its deletion by e-mail. If you learn that a child created an account without a parent’s consent, contact us to have it deleted.

11Security

• The app’s connections to Google and RevenueCat services are encrypted (HTTPS).
• The app does not store your password; Firebase handles it.
• Your local data is stored in the app’s private storage on your device, which other apps normally cannot access.
• We will never ask you for your password, by e-mail or any other means.
• No protection is 100% perfect, so we recommend a strong password and keeping your device secure.

12Changes to this policy

We may update this policy when the app or legal requirements change. We will publish the updated version on this page and change the “Last updated” date at the top. We recommend reviewing it from time to time.

13Contact

Developer

Mudrik dev

E-mail

support@mudrikapp.com

App

Mudrik (مُدرك) for Android (com.mudrik.app)