Last updated: 2026-04-22
Privacy Policy
This policy describes how Kalima ("we", "us", "the app") collects, uses, and protects information when you use the iOS or Android application (app.trykalima.kalima) and the web site at https://trykalima.app.
1. What we collect
1.1 Account information
If you create an account, we store your email address and a Kalima user identifier. We do not store your password — authentication is handled by our identity provider (WorkOS).
1.2 Content you generate
We store your lesson progress, vocabulary review history, and AI-tutor conversation history under your account so you can resume across devices.
1.3 Voice recordings
When you tap the microphone to practice recitation, your audio is sent to our speech-recognition backend over an encrypted connection. We process the recording, return word-by-word feedback to your device, and delete the recording within minutes. We do not retain voice data, do not use it for training, and do not associate it with advertising.
You may use the Listen and Understand parts of every lesson without ever granting microphone permission.
1.4 Camera frames (Pose feature)
When you open the Pose screen, the camera analyses your posture on-device. Frames are not sent off-device or stored.
1.5 Diagnostics
With your consent (controllable in iOS/Android settings) we collect crash reports and basic usage analytics (screen names, feature usage counts) to fix bugs. Diagnostics are linked to a random Kalima device identifier, not your name or email.
1.6 Subscriptions
Subscriptions are processed by Apple App Store or Google Play. We use RevenueCat as a subscription processor; RevenueCat receives a hashed user identifier and the subscription receipt. We never see your payment card details.
2. What we do not collect
- ◆ We do not collect contacts, location, photos, or files outside what you explicitly upload.
- ◆ We do not sell, rent, or share personal data with advertisers.
- ◆ We do not track you across other apps or websites.
3. How we share information
We use a small number of vetted processors:
- ◆ Anthropic (AI tutor) — receives your tutor messages.
- ◆ Modal (speech recognition) — receives your audio for transcription, then deletes it.
- ◆ Neon / Postgres (database) — stores account + progress data.
- ◆ WorkOS (auth) — handles login.
- ◆ RevenueCat / Apple / Google (subscriptions).
- ◆ Upstash Redis (rate limiting).
We sign data-processing agreements with each. We do not share data for advertising or marketing.
4. Children
Kalima is appropriate for ages 4+ but is not designed as a children's app. Parents should supervise account creation for users under 13. We do not knowingly collect personal data from children under 13 without parental consent.
5. Your rights
You may at any time:
- ◆ Export your data — write to privacy@trykalima.app
- ◆ Delete your account and all associated data — write to privacy@trykalima.app, or use Profile → Delete account in the app
- ◆ Disable diagnostics — iOS Settings → Privacy → Analytics & Improvements; Android Settings → Google → Usage & diagnostics
For users in the EU/UK we recognise GDPR/UK-GDPR rights of access, rectification, erasure, restriction, portability, and objection.
6. International transfers
Our processors are based in the United States and the European Union. Where data crosses borders we rely on Standard Contractual Clauses or equivalent safeguards.
7. Security
We use TLS 1.2+ for all network traffic, encrypt data at rest, and audit our processors periodically. No system is perfectly secure — please report vulnerabilities to security@trykalima.app.
8. Changes
If we materially change this policy we will notify you in-app and update the "Last updated" date above.
9. Contact
Privacy: privacy@trykalima.app
Security: security@trykalima.app
Mailing address: Kalima, Alexandria, Egypt