Privacy Policy

Mu’min Kids is an Islamic learning app designed primarily for children ages 3–10 and their families, published by Bright Frontier Labs ("we", "our", or "us"). This Privacy Policy explains what information the app handles, where it is stored, and the choices parents have.

The short version: children learn as guests, everything a child creates stays on the device, there are no ads and no tracking, and only parents can access account or subscription features.

Core learning in Mu’min Kids works as a guest — no child account is required. Everything related to a child’s learning is stored locally on the device, including:

• Child nickname, age group, and chosen avatar;
• Learning progress, rewards, and streaks;
• App settings and locally scheduled reminders;
• Temporary pronunciation recordings made during practice.

Pronunciation recordings are never uploaded. They stay on the device and are deleted or replaced locally as practice continues. Android backup is disabled for the app, so this on-device data is not copied to cloud backups.

Mu’min Kids is built to be safe by default. The app:

• Contains no advertisements and uses no advertising SDKs;
• Does not collect advertising identifiers;
• Uses no third-party product analytics;
• Does not track children across apps or websites;
• Has no chat, social features, or public profiles;
• Never sells personal data.

Parents may optionally sign in to the parent-only area of the app. Parent sign-in uses Firebase Authentication and Google Sign-In. When a parent signs in, these services may process the parent’s display name, email address, phone number, authentication UID, IP address and device metadata, security tokens, and sign-in events.

This information is used solely to authenticate the parent and keep the account secure. Children cannot access or create these accounts.

Optional Plus and Family subscriptions are purchased by parents through Google Play Billing or Apple StoreKit, with subscription management provided by RevenueCat. The app never receives card or bank details — payment is handled entirely by the store.

To operate subscriptions, RevenueCat may process an app user ID, purchase history and receipts, entitlement and product status, locale and currency, and request metadata. This is used for billing, restoring purchases, fraud prevention, and subscription reporting.

Quran recitation audio that is not bundled with the app may be requested from everyayah.com when a recitation is played. Like any web service, everyayah.com can receive normal connection metadata such as IP address and user agent. We do not add a child’s name, account ID, or advertising identifier to these requests.

The app is designed on-device first, which removes most risk by keeping children’s data off our servers entirely. For the limited parent account and subscription data handled by our providers (Google Firebase, Google Play, Apple, RevenueCat), industry-standard technical and organizational safeguards apply. No method of transmission or storage is completely secure, but we choose providers and designs that minimize what is collected in the first place.

On-device learning data is kept until a parent clears it in Parent Controls or uninstalls the app. Parent account data is kept until the parent deletes the account in the app. Purchase and subscription records held by the stores or RevenueCat may be retained where legally required or where needed for purchase restoration and fraud prevention.

Our service providers (Google Firebase, Google Play, Apple, and RevenueCat) may process the limited data described above in countries other than your own. Where they do, they apply appropriate contractual and technical safeguards as described in their own privacy policies.

Mu’min Kids is made for children, with parents in control. Children use the app as guests; the personal data their learning generates stays on the family’s device. Account and subscription features are gated behind parent-only flows, and we do not knowingly collect personal information from children off the device.

Parents can, at any time:

• Delete the parent account in-app via the Parent tab → Parent Account → Delete Parent Account;
• Clear all local learning data via the Parent tab → Privacy & Data → Clear Learning Data;
• Request deletion or ask questions by emailing us — see our Data Deletion page for exact steps.

Depending on where you live, you may also have additional legal rights to access, correct, or delete personal data. Contact us and we will help.

We may update this Privacy Policy as the app evolves. The latest version will always be posted on this page with an updated "Last updated" date. Material changes will also be noted in the app where appropriate.

Questions about privacy, data, or deletion? Email us at support@brightfrontierlabs.com. We aim to respond within two business days.