Alif Bey Pey Privacy Policy
Effective date: 19 October 2026
App: Alif Bey Pey (iOS and Android)
Developer: Lunera AI Solutions
Contact: atta.develops@gmail.com
Alif Bey Pey teaches young children (ages 4 to 8) the Pashto alphabet. We made
it for children, so we built it to keep nothing about them.
The short version
- We do not share or sell any personal information. Without an account we keep none; with a grown-up's optional account we keep only what the backup needs (see Optional grown-up account below).
- Talk is optional, and a grown-up can turn it off. It is on when the app is installed. When it is on, the child's spoken answers are sent over the internet to be understood, and are not kept by us or by the services we use (see Talk below).
- Children never sign in. A grown-up may sign in (Google, or email and password) from the grown-ups area to back up progress and drawings and use them on another device. It is optional; the app works fully without it.
- No ads, no analytics, no tracking, and no third-party SDKs for advertising, analytics, attribution or crash reporting.
- Without an account, progress stays on the device. Stars, streaks, practice history, settings and drawings are saved only in the app's private storage on the device and are never uploaded.
- Deleting is easy. Use Grown-ups > Reset all progress, Delete account, the web page https://alif-talk.attashah.dev/delete-account, or uninstall the app.
What the app stores, and where
The app saves the following on the device, in the app's private storage, so
the child can continue where they left off. Without an account it stays
only on the device; with a grown-up's account, the items marked *backed
up* are also stored in the backup (see below):
| Data | Purpose | Where it is kept |
|---|---|---|
| Stars, daily goal, days in a row | Show progress and rewards | On the device (backed up) |
| Practice history (which letters and words were played, tries and misses) | Pick the next activity; the Grown-ups progress report | On the device (backed up) |
| Drawings made in the Draw tab | Let the child see their drawings again | On the device (backed up) |
| Which Talk words the child has said, and recent Talk questions | Choose the next Talk word or question | On the device (backed up) |
| Settings (sound, haptics, reduced motion, daily goal, whether Talk is on) | Remember a grown-up's choices | On the device |
| A random Talk ID (only once Talk has been used) | Limit how much Talk one phone can use each day | On the device; sent with each Talk request |
| The character's voice clips in Talk | Play them again without downloading them | On the device (cache) |
None of this data names the child. The child's profile is called "Little
Learner"; the app does not ask for the child's name, photo, age, location or
contact details. Without an account we, the developer, cannot see or access
any of it.
The app does not use the camera, contacts, photos or location. It uses the
microphone only in Talk, and only after the phone has been given permission
to use it. Apart
from Talk and an optional grown-up account, it does not need an internet
connection and sends nothing over the internet.
Optional grown-up account and backup
Children are never asked to sign in, and nothing in the app needs an
account: the welcome screen can be skipped. Continue with Google opens
Google's own sign-in page; signing in with an email address asks for the
grown-ups check first.
- How: Continue with Google (we receive the Google account's email address and whether Google has verified it; not the name, photo or contacts), or an email address and password (we email an 8-digit code to confirm the address; the password is stored only as a salted hash).
- What is kept: the email address, the sign-in records needed to keep the grown-up signed in, and a backup of the items marked backed up in the table above. Device settings (sound, haptics, motion, whether Talk is on) and Talk recordings are not backed up.
- Why: to restore progress and drawings on another phone or tablet, or after reinstalling, and to keep the family's devices in step.
- Where: the backup is stored by Convex (convex.dev), our database provider, which processes it on our behalf. Sign-in and confirmation emails are sent through Resend (resend.com). If Google sign-in is used, Google handles that sign-in under its own privacy policy.
- How long: until the account is deleted. Reset all progress clears the backup as well as the device. Email accounts whose code is never entered are removed after a day.
Talk (optional)
Talk lets the child practise speaking Pashto with a friendly character. It is
on when the app is installed. A grown-up can turn it off at any time in
Grown-ups > Settings, behind the grown-ups check; turning it back on (there
or in the Talk tab) goes through the same check.
What happens when the child answers. When the character has finished
talking, the microphone turns on by itself, only on the Talk screen, and a red
wave shows that it is listening. The child says a word and taps the button. If
the child says nothing, the microphone turns off again after a few seconds and
nothing is sent. The recording (a few seconds) is sent over an encrypted (HTTPS)
connection to our Talk server, which passes it through OpenRouter to Google's
Gemini model to work out what the child said and what the character should
say back. The character's reply (text written by the model) is turned into
speech by ElevenLabs. ElevenLabs receives only that reply text, never the
child's recording.
What is kept: nothing about the child.
- Our server holds the recording only while answering (in memory, and in a temporary file deleted within seconds). Its logs record only timings and errors: never the recording, what was said, the replies, or who sent them.
- Requests to Gemini go only to providers that keep no data and do not use it for training (OpenRouter's zero-data-retention routing, with data collection denied).
- The app deletes the recording from the phone once it has been sent.
Identifiers. Each install makes a random Talk ID, not linked to the child,
the device or any account. It is sent with each Talk request, together with
the phone's network (IP) address, and both are used only to limit how many
Talk turns one phone can use each day. The counts are kept in the server's
memory and cleared every day.
Safety. The child's words and the character's replies are checked by an
automated safety filter on every turn; anything unsuitable is replaced by a
simple prompt to try again.
Crash reports
We do not include any crash-reporting or analytics SDK. If a parent or device
owner has chosen to share diagnostics with Apple (Settings > Privacy &
Security > Analytics & Improvements > Share With App Developers) or Google
(Android usage & diagnostics), Apple or Google may give us aggregated crash
reports and performance statistics. These come from the operating system and
store, under Apple's or Google's own privacy policies and the device owner's
choices. They do not contain the child's progress, drawings or any personal
information collected by our app, and we use them only to fix bugs.
Children's privacy (COPPA and GDPR-K)
The app is directed to children. Apart from Talk, the app does not collect
personal information from children, as defined by the U.S. Children's Online
Privacy Protection Act (COPPA), and does not process personal data of children
as described in the EU and UK GDPR (including Article 8). Talk sends the
child's spoken answers to be understood and keeps none of them, as described
above, and a grown-up can turn it off in the grown-ups area.
The optional backup account is meant for a grown-up, with the grown-up's own
Google account or email address. The child's progress and drawings
are backed up only when that grown-up chooses to sign in, and are used only
to provide the backup to them; they are not shared, sold or used for
advertising. The grown-up can delete the account and the backup at any time
(see Deleting data).
The grown-ups area and parental gate
Settings, the progress report, the account and backup, "Reset all
progress", this privacy policy and any link that leaves the app (apart from
Google's sign-in page) are behind a grown-ups check: press and hold a
button for three seconds. Any future in-app purchase will also be behind
this check.
Advertising, sharing and selling
There is no advertising in the app. We do not share, sell or rent any data.
The backup is used only to give it back to the grown-up who signed in. In Talk, the services named above process the
child's answers and the character's replies on our behalf, only to run Talk,
and keep none of it. Talk's character is not a chat with other people; there
are no social features, and apart from Google's sign-in page no links that a
child can open without the grown-ups check.
Deleting data
- Reset: open the Me tab, tap Grown-ups, pass the check, and use Reset all progress (type RESET to confirm). This deletes stars, streaks, practice history and drawings from the device and, when signed in, from the backup and the family's other devices. Settings are kept.
- Delete the account: in Grown-ups > Account & backup > Delete account (type DELETE to confirm), or without the app at https://alif-talk.attashah.dev/delete-account (we email a code to the account's address). This deletes the email address, the sign-in records and the whole backup straight away. Progress on the device stays until it is reset or the app is uninstalled.
- Uninstall: removing the app deletes everything it stored. Device backups (iCloud / Google) may contain the app's local data as part of the device owner's own backup, which is controlled by the device owner.
Without an account we hold no data about you or your child (Talk keeps
none), so there is nothing for us to delete on our side. To stop Talk, turn
it off in Grown-ups. You can still contact us with any question.
Security
Data stays in the app's private storage on the device, protected by the
operating system's app sandbox and the device's own security (passcode,
encryption). The sign-in token is kept in the phone's secure storage. Talk
requests and the backup travel only over encrypted (HTTPS) connections, and
the backup is encrypted at rest by our database provider.
Your rights
Depending on where you live (for example, under GDPR, UK GDPR or US state
laws), you may have rights to access, correct or delete personal data and to
object to processing. Without an account we hold no personal data; with one,
you can delete it yourself as described above, or contact us to access or
delete it, and you can always delete on-device data as described above. You can also
complain to your local data protection authority.
Changes to this policy
If we change this policy, we will update the effective date above and, for
any material change, show a notice in the app's Grown-ups area before the
change takes effect.
Contact
Lunera AI Solutions
Email: atta.develops@gmail.com