Privacy Policy

Ozzie is operated by Ozzie LLC, a company registered in the United Arab Emirates.

Postal address: Ozzie LLC, Shams Business Center, Sharjah Media City Free Zone, Al Messaned, Sharjah, United Arab Emirates. Phone: +971 50 358 9898. Email: salam@myozzie.app. The person responsible for privacy at Ozzie is Mamoon Ali, reachable at the same email.

A parent or guardian who is 18 or older creates the account, sets a PIN, and adds each child. A child uses Ozzie through that account and cannot change settings, see this policy, or reach anything outside the lessons without the PIN. We do not offer accounts to children.

From you, the parent: your email address. If you sign in with Google, Google also sends us your name and a link to your profile picture; we do not show or use them, but they are stored with your account. If you sign in with Apple, we receive only an email address, which may be Apple's relay address if you chose Hide My Email. We never receive your phone number, date of birth, address, or contacts. Your PIN is stored as a one-way hash, which means we cannot read it back.

About each child, as you enter it: a first name or nickname, year of birth, whether the child is a boy or a girl, and the cartoon avatar you pick.

About each child, as they learn: which verses they have practised, their scores, word-level results from the recitation checker, time spent, badges, streaks, and hasanat points. This is what the parent area shows you.

Voice recordings: when your child recites, Ozzie records their voice to check it. This has its own section below because it matters most.

From the device: a random identifier the app creates on first install (not the advertising ID and not a hardware serial), the platform, app version, operating system version, device model, language setting, and time zone. If the app crashes, it sends us the error, the screen it happened on, and the same identifier, so we can fix it. Crash reports carry no child name, account, email, or recording.

Something we do not collect: location, contacts, photos, the advertising identifier, or anything from other apps.

A note on faith. Using a Quran learning app reveals something about your family's religion. Data protection law treats that as sensitive, which is why the app asks for your explicit consent to it, separately, before any child is added.

To run the lessons and show you your child's progress. Legal basis: the agreement you make with us when you create the account, and, for everything about your child, your consent as their parent.

To check recitation and give feedback. Legal basis: your consent, given on the consent screen and withdrawable at any time.

To improve Ozzie. We look at how lessons are used in aggregate, for example which verses children find hard, and we use crash reports to fix problems. Legal basis: our legitimate interest in making the app work well, applied only to data we already hold for the lessons.

To train Ozzie's listening model, only with recordings you have explicitly opted in to keep. Legal basis: your separate, optional consent.

To write to you. We email you for the account itself: sign-in codes, your data export, deletion confirmations, and changes to this policy. We do not send marketing email today. If we start, every such email will have an unsubscribe link and you will be able to say no without losing anything.

We do not sell personal data, share it for advertising, build a profile of your child, or show advertising anywhere in Ozzie.

Every recitation is sent to Ozzie. The app records your child, sends the audio to our recitation checker, and shows the result about two seconds later. The checker is software; no person listens. The recording exists on our server only for the moments it takes to check it and is then deleted. What we keep from every attempt is the result: the score and which words were right or wrong.

Keeping recordings is optional and off by default. On the consent screen you can choose to let us keep your child's recordings for up to 24 months to help Ozzie hear children better. If you do not tick that box, nothing changes in how Ozzie works. You can turn it off for any child at any time in Parent Control, and when you do, that child's stored recordings are deleted straight away.

One limit you should know before opting in. If a recording has already been used to train Ozzie's model before you withdraw, the model keeps what it learned from it. The recording itself is still deleted, and it is never used again.

Never used to recognise your child. Recordings are used to teach the model what children's recitation sounds like in general. We do not build a voiceprint, match voices, or identify a child by voice, and we never will without asking you again.

We use a small number of service providers. Each one may process data only on our instructions, under a written data processing agreement.

• Supabase hosts our database, sign-in, and stored recordings, in the United States (Northern California). Transfers of European and UK families' data to it are covered by the EU standard contractual clauses and the UK addendum.
• RunPod runs the recitation checker, hosted in the European Union (Romania) wherever possible, with the same contractual safeguards for any processing elsewhere.
• Resend sends our emails (sign-in codes, exports, confirmations) and holds the waitlist, in its European region.
• Vercel hosts this website.
• Google and Apple handle sign-in if you choose them, under their own privacy policies.

Ozzie LLC is in the United Arab Emirates, so data is also accessible to our team there, under the same safeguards.

• Your account and your children's profiles and progress: for as long as the account exists. If an account is not used for 24 months, we email you and, if we hear nothing, delete it 30 days later.
• Recordings you opted to keep: up to 24 months from the day they were made, then deleted automatically. Earlier if you withdraw or delete.
• Recordings you did not opt to keep: deleted as soon as they have been checked, usually within seconds.
• Crash reports: 12 months.
• The record that you gave consent: six years after the account is deleted, because we must be able to show that consent was obtained.
• Waitlist details (name, email, country): until you ask us to remove them or the waitlist closes.

You can delete one child, or the whole account, in Parent Control. You can also delete the account without the app at myozzie.app/delete-account.

Deleted outright: every recording, your email address and sign-in, your PIN, each child's name and year of birth, and your way back into the account.

Kept, with nothing that says who: the learning record itself: that a child of a given gender and avatar practised a verse, how it scored, and when. We keep it because it tells us which verses are hard for children in general. It is not linked to a name, email, birth year, or device once the account is gone.

Kept on purpose: the dated record that you gave consent, which holds a one-way scrambled code derived from your email (it cannot be turned back into your address, even by us), the boxes you ticked, and the version of this notice you agreed to. Nothing about your child is in it.

In the app, behind your PIN, you can see everything we hold about each child, change names and years of birth, turn recording retention on or off per child, get a copy of your data by email (a readable file and a machine-readable file), delete a child, and delete the account.

By email to salam@myozzie.app you can ask for the same things, ask us to correct anything, ask for copies of stored recordings, object to any use we base on legitimate interest, or withdraw a consent. We answer within 30 days.

If you are unhappy with how we handle your data, you can complain to a data protection authority: the UAE Data Office; in the EU, the authority of your country; in the UK, the Information Commissioner's Office. We would rather hear from you first.

Ozzie is designed for children aged 6 to 12 and is used through an account their parent controls. We collect from a child only what the lessons need: the profile you enter, their progress, and their recitations. We ask you, the parent, for consent before any of it is collected, and we do not ask a child for more information than the lessons require.

Where the United States COPPA rule, the EU and UK children's data rules, or similar laws apply, your consent as the parent is the basis for everything about your child. You can review or delete your child's data, or refuse further collection, at any time in the app or by emailing us. If you do not give consent when asked, nothing about your child is collected and any details entered so far are deleted.

The website itself uses no analytics or tracking. The waitlist form sends your name, email, and country to Resend so we can write to you about the launch. The recording page at myozzie.app/recite, where families help train Ozzie's listening, has its own privacy note.

If we change how we handle your data in a way that affects you, we will tell you before it takes effect and, where the change needs it, ask for your consent again in the app. Each version of this notice is dated, and the app records which version you agreed to.