Privacy Policy

01What we collect

We collect only what we need to run the Service:

Telegram use does not require an atef.dev account or email sign-up. The bot stores your Telegram ID, chosen grammatical forms, explanation level, optional daily reminder time and usage counters. Telegram text, captions, voice notes and audio messages are received by our API. Submitted audio is sent to ElevenLabs for transcription; text and transcriptions are sent to AWS Bedrock for translation. A bounded recent history of input file references and translations is retained for up to 24 hours. Mini App practice uses that recent history and saves your review, known and hidden choices until the source phrase expires or you delete your data. Audio binaries are processed without being saved by the bot. With every translation, the Arabic phrase is automatically sent to ElevenLabs for pronunciation and returned as a voice note that plays in Telegram. Generated audio is not saved by the bot. Telegram chats and provider retention are governed by their own settings and policies. Provider attempts and available token, character, byte and duration measurements are recorded to run the service, without storing phrase text in the usage ledger. Use /delete_me and confirm the request to delete your stored bot profile, recent history, reminder settings and linked usage data. This removes your identity from retained provider measurements; this does not delete the Telegram chat or override provider retention. Optional atef.dev account linking uses a short-lived, one-time code and does not infer your identity from a name.

• Account data — your email address, used for signing you in. If you set a password, we keep it only as a hash and never in plain text.
• Content you create — the data you enter into Learn Masri, stored against your account.
• Usage data — anonymous-leaning product analytics (pages, feature use, approximate device info) to improve the Service.

02How we use it

To provide and secure the Service, to maintain your account, to understand and improve how the product is used, and to communicate essential service messages. Our legal bases are performance of our contract with you and our legitimate interest in improving and securing the Service.

03Where your data lives (sub-processors)

We use a small set of trusted providers:

• Ionite Ltd (our own servers) — authentication and per-account application data, in a PostgreSQL database we run and administer ourselves — not on a third-party managed database service. Hosted in Germany. Note that one shared identity serves all atef.dev apps, so a single account works across them.
• Cloudflare — object storage for the files you upload and for our database backups, and the network that carries traffic between your browser and the apps.
• Resend — delivery of the emails we send you — sign-in codes, sign-in links and essential account messages. It receives your email address for that purpose only.
• Telegram — delivering text, captions, voice notes and audio messages, and holding your chat under its own privacy policy.
• ElevenLabs — transcribing submitted voice notes and audio messages, and automatically generating Arabic pronunciation as an inline Telegram voice note with every translation.
• AWS Bedrock — processing submitted text and audio transcriptions to translate into colloquial Egyptian Arabic or English, with pronunciation and explanations.
• PostHog — product analytics and usage diagnostics, hosted in the European Union (eu.i.posthog.com). With your consent this also includes a replay of your browsing session on the site (pages viewed, clicks, scrolling). Text inputs are masked by the recorder, and diagnostic detail when a page errors, so it can be fixed. Decline analytics and none of it is collected.

Your application data is partitioned per account; other users cannot see it.

04Retention

We keep your data for as long as your account is active. When you delete your account, we delete or anonymise your personal data and account content, except where we must retain something to meet a legal obligation.

05Your rights

Subject to applicable law (including the UK GDPR), you can request access to, correction of, export of, or deletion of your personal data, and you can object to or restrict certain processing. To exercise any of these, or to delete your account and its data, email [email protected]. You also have the right to complain to the UK Information Commissioner’s Office (ICO).

06Cookies

We use a strictly necessary session cookie and an analytics cookie. See our cookie policy for details.

07Changes & contact

We may update this policy and will revise the date above. For any privacy question, contact Ionite Ltd (company no. 13839693), 124 City Road, London EC1V 2NX, United Kingdom at [email protected].