Alef Mad · Privacy Policy for Android

Last updated: 13 October 2026

Data controller:
Sameh Merzaie, Switzerland
Contact: support@alefmad.com
Website: https://www.alefmad.com

1. General information

Protecting your personal data matters to us. This privacy policy explains what data is processed when you use the Alef Mad Android app, why it is processed and what rights you have.

Alef Mad is an app for learning Dari and Farsi, with guidance in German and English. It offers the D1–D5 learning levels and is also intended for learners aged 9 and above.

The app has no advertising, behavioural analytics, public user profiles or chat features. You do not need an Alef Mad account.

2. Learning and local data storage

Alef Mad stores learning progress, exercise answers, handwriting and display settings exclusively in your device’s local storage.

This information is not sent to our purchase verification server.

The app does not record your voice or access your contacts, camera or location.

You do not need to register or provide personal contact details to use the learning features.

3. Google Play purchases and purchase verification

Google Play processes payments and associates purchases with your Google account. Alef Mad does not receive credit card or other payment card details.

When you purchase, restore or verify access to a paid learning level, the app sends the following information over an encrypted HTTPS connection to our purchase verification server at api.alefmad.com, hosted by Infomaniak in Switzerland:

• The learning level’s product identifier
• Proof of purchase from Google Play
• A Play Integrity token bound to the specific request

The server checks the purchase and integrity token with Google before granting access to protected content.

The free demos do not require a purchase.

4. Google Play Integrity

Alef Mad uses Google Play Integrity to verify the authenticity of the app and eligibility to access paid content.

This may involve processing the following information in particular:

• Information about the verification request
• App version and app signature
• Google Play licensing status
• Device-related integrity information

These checks help protect against fraud, tampering and unauthorised access. They are not used for advertising or to create advertising profiles.

Google’s privacy policy also applies to data processed by Google.

Further information:
Google Play Integrity
Google Privacy Policy

5. Storage of purchase verification data

Our purchase verification server stores only the data designated for purchase verification:

• A cryptographic hash of the purchase token
• The product identifier
• The verification status
• Verification timestamps

The original purchase and integrity tokens are not stored permanently in the database or in application logs.

Learning pages do not receive these tokens.

Payment card details, learning progress and exercise answers are not sent to the purchase verification server.

A private review code may only be used by authorised app reviewers. It is checked by the same server and does not create a Google Play purchase.

6. Retention periods

Purchase verification data is removed from the active database after 90 days without a new verification.

Automatic cleanup runs hourly and when the server restarts.

If you restore a purchase later, your entitlement is checked with Google again.

Single-use request tokens expire after two minutes.

Temporary request-limit counters are held in memory and reset in the next active one-minute window.

App access authorisations are time-limited and require renewed online checks.

The current Android version does not provide permanent offline access to paid content.

7. Hosting and technical logs

The purchase verification server is hosted by Infomaniak in Switzerland.

For technical operation and security, Infomaniak may process the following data in particular:

• Connection IP addresses
• Technical access logs
• Error logs
• Technical security information

According to the hosting documentation, these logs are retained for at least seven days.

Hosting backups are subject to Infomaniak’s backup cycle.

We do not sell this data or use it to create advertising profiles.

Further information:
Infomaniak access and error logs
Infomaniak Privacy Policy

8. Exporting and importing learning progress

You can export your learning progress as a JSON file or import it again using the Android file picker.

Alef Mad accesses only the file you select.

If you choose a cloud storage service as the destination, its provider may process the file under its own privacy policy.

Automatic Android backups of app data are disabled.

You can remove locally stored learning progress by clearing the app’s storage or uninstalling the app.

Files you have already exported must be deleted separately.

9. Deleting purchase verification data

You can request access to, correction of or deletion of your purchase verification data.

Send your request to:
support@alefmad.com

If possible, include the relevant learning level and purchase date.

We will then clarify what additional information is needed to identify the relevant records securely.

Please do not send passwords, credit card numbers or other confidential payment information.

Deleting purchase verification data does not cancel a purchase held by Google.

Restoring a purchase later may create a new verification record.

For payment and account data stored directly by Google, please contact Google Play.

10. Support enquiries

If you contact our support team, we process your email address and the content of your message to respond to your enquiry.

Please provide only the information needed to handle your request.

Support messages are retained only for as long as needed to handle the enquiry or meet applicable legal obligations.

We do not use support messages to create advertising profiles.

11. Children’s privacy

Alef Mad can also be used by learners aged 9 and above.

The app has no advertising, public profiles or chat features.

An Alef Mad account is not required to use the learning features.

Parents or guardians should supervise children when making paid purchases.

Parents or guardians may send privacy requests on behalf of their children to support@alefmad.com, provided they are authorised to do so.

12. Your privacy rights

Under applicable data protection law, you may request information about the processing of your personal data.

Where applicable, you may request correction of inaccurate data or deletion of personal data.

Where provided for by law, you may object to processing or request a copy or transfer of your personal data.

You can send requests concerning your privacy rights to support@alefmad.com.

We handle these requests in accordance with applicable legal requirements.

If you believe your privacy rights have been infringed, you may contact the competent data protection authority.

13. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and misuse.

Communication between Alef Mad and our purchase verification server is encrypted using HTTPS.

Access to data stored on the server is restricted to authorised persons.

Purchase tokens are not permanently stored in their original form; they are replaced by cryptographic hashes as described in this privacy policy.

Despite appropriate security measures, absolute security cannot be guaranteed when data is transmitted or stored electronically.

14. Changes to this privacy policy

We may update this privacy policy if app features, technical processes or legal requirements change.

The current version is published on our website.

The date of the latest update appears at the beginning of this privacy policy.

15. Contact

If you have questions about privacy or the processing of personal data, you can contact us.

Alef Mad
Data controller: Sameh Merzaie
Switzerland

Email: support@alefmad.com
Website: https://www.alefmad.com

Android privacy policy:
https://www.alefmad.com/privacy-android/en.html