Hekaya Privacy Policy

7 April 2026

Privacy Policy for Hekaya (حكاية)

Last updated: 7 April 2026

Hekaya (“we”, “our”, “the app”) is a children’s Islamic storytelling app published by Husain Al Hashim. This policy explains what information the app collects, how it is used, and the choices you have. Hekaya is designed to comply with Google Play’s Families Policy, COPPA, and the EU GDPR.

1. Information We Collect

Hekaya does not ask for, collect, or store any personally identifiable information (name, email, address, phone number, photos, contacts, location, or microphone audio) from children or parents.

The app processes the following limited, non-personal data:

  • App content: story files, audio, and images downloaded from our Firebase backend.
  • Local preferences: language, theme, and last-read story — stored only on your device.
  • Anonymous diagnostics: crash reports and aggregated, non-identifying usage counters via Firebase, used solely to keep the app stable.
  • Subscription status: handled by RevenueCat and the Google Play billing system; we never see your payment details.

2. Advertising

Free tiers of Hekaya may display advertisements served by Google AdMob. In line with Google Play’s Families Policy, all ads in Hekaya are configured as child-directed (COPPA), max content rating G, and non-personalized — no behavioral targeting, no advertising ID used for profiling. Ads are served only from Google’s families self-certified ad network.

3. Third-Party Services

4. How We Use Information

The minimal data described above is used only to deliver story content to your device, keep the app running reliably, and process subscriptions. We do not sell, rent, or share any data with advertisers, data brokers, or analytics resellers.

5. Children’s Privacy

Hekaya is built for children and complies with the Children’s Online Privacy Protection Act (COPPA) and Google Play’s Families Policy. We do not knowingly collect personal information from children. Account creation, social features, in-app purchases, and external links are gated behind a parental gate (an adult-level math question).

6. Data Retention & Deletion

Because we do not collect personal data, there is nothing personal to retain or delete from our servers. Local preferences can be cleared at any time by clearing the app’s storage from your device settings or uninstalling the app.

7. Security

All data in transit between the app and our backend is encrypted with HTTPS/TLS. Firebase data is hosted on Google Cloud infrastructure with industry-standard protections.

8. International Users

The app is available worldwide. Firebase data is stored on Google Cloud servers, which may be located outside your country. Your continued use of the app constitutes consent to this transfer.

9. Changes to This Policy

We may update this policy from time to time. The ‘Last updated’ date at the top reflects the most recent revision. Material changes will be announced inside the app.

10. Contact

For any privacy questions or requests, contact Husain Al Hashim at hekaya@haali.dev.