Qayyim — Privacy Policy
Effective date: 23 October 2026
Publisher: Hamza Alburaym ("we", "us")
Contact: support@qayyimapp.com
Qayyim is a learning and quiz app for children and adults. We collect as little as we can, we don't sell your data, we don't show ads, and we don't use tracking or advertising tools.
1. What we collect
When you first open the app
- A random account number. The app creates a guest account automatically, so you can play without signing up. It is not linked to your name or phone number.
- Your answers to two questions: boy or girl, and kid or adult. We use them to pick suitable content and to protect children (see section 5).
- Your settings: language, and whether you chose the simpler, bigger-text look. Most settings stay only on your phone.
When you use the app
- Your progress: which quizzes you finished, your answers, your score and stars, and when you played. We use this to show your stars and keep the scores fair.
- A display name, if you set one. It may appear on the leaderboard. Women and kids never appear by name: they are shown with a made-up name (like "The Red Rose").
If you choose "Continue with Google" or "Continue with Apple"
- Your email address and the name on that account. We use them only to sign you in and keep your progress safe across phones.
- For accounts marked as a kid, we never keep the real name from Google or Apple.
- Google and Apple don't give us your password. You type it on their own page.
If you subscribe
- Payment is handled entirely by Apple (App Store) or Google (Google Play). We never see your card details.
- We receive the status of your subscription: which plan, whether it's a trial, and when it ends. This comes through our subscription provider, RevenueCat, so we can unlock premium quizzes.
Automatically
- Basic technical logs: your IP address, the time of a request, and errors. These keep the service working and secure, and we delete them regularly.
- A scrambled code for your phone: the app sends your phone's app ID, and we keep only a one-way scrambled code made from it (it can't be turned back into the ID). We use it only so each phone gets the free welcome period once.
What we do NOT collect
- No location, contacts, photos, microphone or camera.
- No advertising IDs, no ad networks, no analytics or tracking tools.
2. Why we use it
| Purpose | Data |
|---|---|
| To run the app, save progress and show stars | account number, progress |
| To show content suitable for kids or adults | kid/adult |
| To sign you in on more than one phone | email, name (adults) |
| To unlock what you paid for | subscription status |
| To keep scores fair and the service secure | progress, logs |
We rely on our contract with you (providing the app), our legitimate interest (security and fair play), and, where the law requires it, your consent or a parent's consent.
3. Who we share it with
We use a few service providers to run Qayyim. They process data only on our instructions:
- Supabase: sign-in and our database.
- Cloudflare: image storage and network protection.
- Hetzner: our servers (in the EU).
- RevenueCat: subscription status.
- Apple and Google: sign-in (if you choose it) and payments.
We don't sell or rent personal data. We may share data if the law requires it.
Some providers may process data outside your country. When they do, we rely on their standard legal protections for international transfers.
4. How long we keep it
- Your account and progress: until you delete your account.
- Purchase records: as long as tax and accounting laws require. After your account is deleted, they are no longer linked to you.
- Technical logs: a short time, usually under 30 days.
- After you delete your account: a one-way scrambled code made from your email and your Google/Apple account ID, with the date your welcome period started, for 2 years. It can't be turned back into your email, and we use it only so a deleted account can't get a new free welcome period.
5. Children
Qayyim is made for families, and children use it.
- We ask "kid or adult" at the start. Kids see only content suitable for them, and they never appear by name on the leaderboard.
- We don't ask children for their name, email or phone number. A child can play fully as a guest.
- If a child links a Google or Apple account, we keep the email (to sign them in) but never their real name.
- No ads and no tracking, for anyone.
- A parent or guardian can ask us to see or delete a child's data at support@qayyimapp.com, or delete the account in the app (section 6).
If you believe we hold data about a child without proper permission, contact us and we will delete it.
6. Your choices and rights
- Delete your account: Settings → Account → Delete my account. This removes your profile, progress and stars, and your sign-in. Deleting your account does not cancel a subscription: cancel it in your App Store or Google Play settings.
- See, correct or get a copy of your data: write to support@qayyimapp.com.
- Object or complain: write to us first. You may also complain to the data protection authority in your country (for example the SDAIA in Saudi Arabia, or the KVKK in Türkiye).
We answer within 30 days.
7. Security
- Data travels over encrypted connections (HTTPS).
- Access to our systems is limited to people who need it.
- We regularly review the app for security issues.
No service can promise perfect security, but we work to protect your data.
8. Changes
If we change this policy, we'll update the date at the top. If a change is important, we'll also tell you in the app.
9. Contact
Hamza Alburaym — support@qayyimapp.com