Privacy Policy
AyaQuest is built for children ages 5–12. Privacy is a feature, not a footnote. We collect as little as possible, never sell data, and design every flow with COPPA and Apple’s Kids Category guidelines in mind.
Who runs this app
AyaQuest is published by Muhammad Ashar Rizqi (“we”, “us”). Contact: hello@ayaquest.ai.
What we collect
On the device (no account required)
- Child’s first name, age tier (5–7, 7–9, or 10–12), and avatar choice.
- Lesson progress: which surahs are mastered, story choices made, quiz answers.
- Garden state, traits earned, daily play-time target, and reminder time.
- Aya chat history with timestamps so parents can review it.
All of this lives in standard iOS storage on the device. It never leaves the device unless you sign in (below).
If a parent signs in with Apple
- The Apple-issued user identifier and (if you choose to share it) the parent’s name and email relay.
- An anonymous account ID that ties the device to a server-side profile so progress can be backed up and restored.
- If you start a Pro subscription, Apple processes the payment. We never see card numbers — only Apple’s receipt confirming the subscription is active.
Aya conversations
When a child asks Aya something, the message is sent to our backend and to a language-model provider so an age-tuned answer can be generated. Conversations are stored against the device profile so parents can review them in the parent dashboard and flag any message. We do not use this content to train models, and we do not sell it.
What we do NOT collect
- No precise location, no contact list, no microphone or camera access.
- No advertising identifiers (IDFA). No third-party advertising or analytics SDKs.
- No social-network logins beyond Apple Sign In.
- No browsing or cross-app tracking.
How we use the data
- To run the app — show progress, save the garden, deliver lessons offline once cached.
- To generate Aya’s replies in the moment.
- To provide the parent dashboard (chat history, progress, flags).
- To process subscription receipts from Apple so Pro features unlock.
- To respond to direct support requests sent to hello@ayaquest.ai.
We do not show ads. We do not sell, rent, or share personal data with marketers. We do not allow data brokers near this app.
Service providers we use
- Apple — App Store, TestFlight, Apple Sign In, StoreKit (subscriptions). Apple’s privacy policy applies to those flows.
- Google Cloud — Cloud Run hosting and Firestore for the backend that powers progress sync and Aya chat. Data is held in their U.S. data centres.
- Language-model provider(s) — Aya’s replies are generated by a third-party LLM. We send only the relevant prompt and the child’s age tier. We do not share names or account identifiers.
These providers are bound by their own data-handling commitments and process data only on our instructions.
Children’s privacy (COPPA & Kids Category)
AyaQuest is designed primarily for children. Following COPPA and Apple’s Kids Category requirements, we:
- Do not require children to provide personal information beyond a first name and age range.
- Do not include behavioural advertising or third-party analytics.
- Provide a parent dashboard so a verifiable parent can review and delete the child’s on-device data and Aya conversations at any time.
- Limit Aya’s scope to Quran stories and values; off-topic prompts redirect.
If you believe we have inadvertently collected information from a child without verifiable parental consent, write to hello@ayaquest.aiand we will delete it.
Your rights
You may at any time:
- Delete the app to remove all on-device data.
- Email hello@ayaquest.ai to request deletion of any backed-up profile or conversation history. We respond within 30 days.
- Cancel a subscription anytime through Apple’s Settings > Subscriptions.
Data retention
On-device data persists until the app is deleted. Backend profile and chat data persist while the account is active. If you delete your account, we remove personal data within 30 days, except where retention is required by law.
Security
Traffic between the app and our backend is encrypted with TLS. Authentication uses Apple Sign In. We do not store passwords. Backend access is restricted to the developer.
International users
By using AyaQuest you consent to your information being processed in the United States, where our infrastructure providers are located.
Changes to this policy
If we make a material change to this policy, we will update the “Last updated” date and surface an in-app notice. Continued use of the app after an update means you accept the revised policy.
Contact
Questions? Write to hello@ayaquest.ai.