Zabaan Privacy Policy

Last updated: August 29, 2026

Zabaan is designed with your child's privacy in mind. We do not collect, store, or share any personal information about you or your child.

• No accounts or sign-ups required.
• No personal data collected.
• No analytics or tracking.
• No third-party advertising.

Microphone usage

Zabaan uses the device microphone solely for pronunciation practice exercises. Audio is sent to Google Cloud Speech-to-Text for evaluation and is not stored by Zabaan or Google after processing. No audio recordings are saved on the device or transmitted elsewhere.

Children's privacy (COPPA)

Zabaan is designed for children ages 8–12. We comply with the Children's Online Privacy Protection Act (COPPA). We do not collect personal information from children: there are no accounts, no names or contact details are sent anywhere, and speech audio is processed in real time and never stored. The only record kept outside the device is the anonymous purchase record described under "In-app purchases"; to have it deleted, email us at the address below.

Data stored on device

Lesson progress and settings are stored locally on the device only. This data is never transmitted to any server. Optional daily practice reminders are scheduled on the device itself; no data leaves the device for them.

In-app purchases

Zabaan offers optional in-app purchases to unlock additional levels. Purchases are made through Apple's App Store or Google Play, and Zabaan never receives or stores payment details. We use RevenueCat, a purchase-management service, to verify purchases and restore them on a new device. RevenueCat receives an anonymous, app-generated identifier and the purchase history tied to it; it never receives your name, email address, or any information about your child.

Keeping the speech service safe

To protect our speech-recognition service from abuse, the app proves it is a genuine copy of Zabaan using Apple DeviceCheck (iOS) or Google Play Integrity (Android) through Firebase App Check. Our server also keeps a one-way hash of the device's network address for up to two hours to limit how many requests a single source can make. Neither is linked to a person or used for any other purpose.

Changes to this policy

If we make changes to this privacy policy, we will update the "Last updated" date above.

Contact

If you have questions about this privacy policy, contact us at pbakhtary@gmail.com.