Privacy Policy

We collect the following categories of information:

• Account information. When you create an account we collect your email address, display name, and authentication identifiers (e.g. Apple ID, Google ID, hashed password). If you sign in with Apple or Google, we receive only the identifiers and basic profile details those providers share with us.
• Onboarding answers. Your selected goal, self-rated experience level, and regional dabke style — all optional, used to tailor the lesson path.
• Progress data. Which moves you've passed, your best score per move, total XP, current level, and streak count. This is needed to show you your skill path.
• Attempt videos. If you choose to record or upload a clip for AI scoring, we store the video file on encrypted cloud storage tied to your account and retain it until you delete it.
• Subscription data. If you purchase a Pro subscription, our payments partner records the purchase event and the entitlement state. We do not see or store your full payment card number.
• Device + diagnostic data. Standard mobile telemetry (operating system version, app version, crash reports) used to diagnose problems and improve stability. We do not collect precise geolocation.

We use the information above only to:

• Authenticate you and keep your account secure.
• Provide the core service — show your progress, score your attempt clips, gate Pro features.
• Personalize the lesson path based on your onboarding.
• Send necessary service messages (password resets, billing receipts). We do not send marketing email without your explicit opt-in.
• Diagnose crashes, debug performance issues, and improve the App.
• Comply with applicable law and enforce our Terms.

We use a small set of vendors to operate the Service. Each sees only the data they need to do their job.

• Supabase — authentication, account database, and encrypted storage of attempt videos. Supabase acts as our data processor. Supabase privacy policy.
• Apple Sign in with Apple — used when you choose Apple as your sign-in method. Apple may share your email or a private relay email with us per your selection. Apple privacy.
• Google OAuth — used when you choose Google as your sign-in method. Google privacy.
• RevenueCat — handles subscription state and Pro entitlement validation. Receives anonymized purchase events and a user identifier we pass through. RevenueCat privacy.
• Apple App Store / Google Play — process purchases, manage subscription renewals, and provide receipt validation. They retain payment details, not us.
• Expo / EAS — used for over-the-air JS updates and crash diagnostics in the App. Expo privacy.

We do not sell your personal information. We do not share personal information with advertisers.

Depending on where you live (GDPR / EU, CCPA / California, PIPEDA / Canada, and similar laws), you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and the associated data we hold.
• Object to or restrict certain processing.
• Receive a portable copy of your data.
• Withdraw consent at any time (where processing relies on consent).

To exercise any of these rights, email us at learndabkeapp@gmail.com. In-app, you can delete your account from Profile → Sign out → Delete account; this removes your profile, progress, attempts, and uploaded videos from our active systems. Backup copies are purged on our standard cycle.

Dabke is not directed to children under 13 (or the equivalent minimum age in your jurisdiction) and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We retain account and progress data for as long as your account is active. Attempt videos remain stored until you delete them, or until your account is deleted, whichever comes first. Diagnostic and crash logs are retained for up to 90 days. Once you delete your account, we begin a 30-day removal process that purges your data from production systems and removes it from backups on the next cycle.

We use industry-standard practices to protect your information: TLS for transport, encryption at rest for stored videos, Row Level Security on the database so users can only access their own records, and the device keychain (iOS Keychain / Android Keystore) for storing session tokens on your device. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

Your information may be processed in countries other than the one where you live, including the United States. We rely on standard contractual clauses and our vendors' safeguards for cross-border transfers where required by law.

We may update this policy from time to time. The “Effective date” at the top of this page reflects the latest revision. Material changes will be communicated in the App or by email at least 14 days before they take effect.

Questions, requests, or complaints about this policy can be sent to learndabkeapp@gmail.com. We aim to respond within 14 days.