Privacy Policy
Orahi ("we", "us") provides the mobile app "amena" (the "Service"). This policy explains what personal data we collect, why, who processes it for us, and when we delete it. Orahi is the data controller and is based in the Republic of Korea.
1. Data we collect
| Category | Data | When |
|---|---|---|
| Account | Email address, password (stored encrypted) or your Google or Apple sign-in identifier, and the display name and profile photo your sign-in provider shares | When you sign up |
| Settings | Country, app language, learning language, time zone, level, daily goal, reminder time | When you sign up or change settings |
| Shadowing | Your voice recordings, pronunciation scores and per-word results, progress and streak | When you use the feature |
| AI tutor | Your conversations with the tutor (text and voice), conversation reports, and the verses, expressions and corrections you save | When you use the feature |
| Tutor memory | A short summary of past conversations and the mistakes you repeat. You can turn this off or clear it in Settings. | When you talk with the tutor |
| Reflection notes | The notes you write | When you write them |
| Purchases | Subscription status, product, renewal and expiry dates, credit balance and usage. Apple and Google handle your payment details; we never receive them. | When you buy |
| Usage | Screens viewed, whether feature requests succeeded or failed, and AI usage and cost. If you are not signed in, these records are not linked to an account. | Automatically, while you use the app |
| Diagnostics | Error details, device model, and OS and app version | Automatically, when the app crashes or hits an error |
Study reminders are scheduled on your device. Our servers do not send push notifications.
2. Information related to your faith
The Service is built around Bible verses, so your reflection notes and tutor conversations may reveal your religious beliefs. We process this content only to provide the Service (storing it, generating tutor replies, suggesting corrections). We do not use it for advertising or profiling, and we do not sell it. These features only run when you enter content yourself; you can listen to verses and practice shadowing without them.
3. How we use data
- To identify you, sign you in and prevent abuse
- To provide pronunciation scoring, AI tutor conversations, expression practice and writing help
- To save your study history and calculate streaks and progress
- To provide subscriptions and credits and check purchase status
- To manage free usage limits and account for AI and speech processing costs
- To diagnose errors and improve the Service
We do not use your recordings or conversations to train our own AI models. We do not sell personal data or use it for advertising.
4. Legal bases (EEA, UK and similar laws)
- Performance of our contract with you: account, settings, study features, tutor, purchases.
- Legitimate interests: usage records, diagnostics, abuse prevention and cost accounting.
- Consent: content that reveals religious beliefs, and microphone access. You can withdraw consent at any time by deleting the content or your account.
- Legal obligation: purchase records we are required to keep.
5. How long we keep data
| Data | Retention |
|---|---|
| Account, settings, study history, recordings, tutor conversations and memory, reflection notes, saved items, credit balance | Until you delete your account. Deletion is immediate. |
| Tutor reply audio files | Deleted automatically 30 days after they are created |
| Usage records and AI usage and cost records | When you delete your account, we remove the link to your account and keep the records in a form that no longer identifies you, for statistics and cost accounting. |
| Diagnostics | Up to 90 days |
| Purchase and contract records (held by Apple, Google and RevenueCat) | 5 years, as required by Korean e-commerce law |
| Records of complaints and disputes | 3 years, under the same law |
6. Service providers and international transfers
We do not share personal data with third parties for their own purposes unless you consent or the law requires it. The providers below process data on our behalf. Our main database is in the Republic of Korea, and some providers use servers in the United States, so your data may be processed outside your country. Data is sent over encrypted connections each time you use the related feature.
| Provider (country) | What they do | Data | Retention |
|---|---|---|---|
| Supabase, Inc. (US company; data stored in the Seoul region, Republic of Korea) | Database, sign-in, file storage | All account, settings, study, tutor, reflection, purchase status and usage data in section 1 | Until you delete your account |
| Microsoft Corporation — Azure Speech (US company; processed in the Korea region) | Pronunciation scoring, tutor speech synthesis | Shadowing recordings, the sentence you read, tutor reply text | Not kept after processing |
| OpenAI, L.L.C. (United States) | Tutor replies, conversation reports, writing help, and backup speech recognition and synthesis | Tutor conversation text, reflection text, tutor memory, and in some cases the audio you speak to the tutor | Deleted after up to 30 days (abuse monitoring) |
| Groq, Inc. (United States) | Transcribing what you say to the tutor | The audio you speak to the tutor | Not kept after processing |
| RevenueCat, Inc. (United States) | Managing subscription and credit purchases | Account identifier, products and purchase status | Legally required period |
| Functional Software, Inc. — Sentry (United States) | Error collection | Error details, device model, OS and app version | Up to 90 days |
| Apple Inc., Google LLC (United States) | In-app purchases, sign-in | Payment details (never received by us), sign-in identifier | Per their policies |
Where data leaves the EEA, UK or Switzerland, we rely on the providers' standard contractual clauses or equivalent safeguards.
7. Your rights
- Access and correction: see and edit your study history and saved items in the "Me" tab.
- Tutor memory: turn it off or clear it under "Remember our conversations" in Settings.
- Deletion: go to "Me" → "Delete account". It takes effect immediately. If you cannot use the app, follow the account deletion instructions.
- A copy of your data, restriction, objection, or any other request: email us at the address below. We reply within the period the law requires.
Deleting your account does not cancel a subscription. Cancel it separately in the App Store or Google Play.
Depending on where you live (for example the EEA, UK, Brazil or California), you may have additional rights, including the right to lodge a complaint with your data protection authority. We do not sell or share personal data for cross-context behavioral advertising, and we do not discriminate against anyone for exercising their rights.
8. Children
The Service is not directed to children under 14, or under the age at which your country requires parental consent (13 in the United States, up to 16 in parts of Europe). We do not knowingly collect their personal data, and we delete it if we learn it was collected.
9. Security
- Encryption in transit, and passwords stored encrypted
- Row-level access control on every table, so you can only reach your own data
- Recordings kept in private storage only you can access
- Secret keys for outside services kept on our servers, never in the app
10. Contact
- Privacy officer: Chanho Yun
- Email: privacy@orahi.app
11. Changes to this policy
We will announce changes in the app and on this page at least 7 days before they take effect, or 30 days for changes that matter to your rights.