Privacy Policy

Draft for legal review. Effective September 26, 2026. Replace bracketed items before publishing.

The short version

We collect the minimum needed to run the app.
No ads and no selling data. Website analytics only if you accept.
You can ask us to delete your data, except records the law requires us to keep.

1. Who we are

Yalla Batal is operated by 3030works ("we"), [registered address]. We are the controller of personal data processed through the Yalla Batal app and website.

2. What we collect

Parent account: phone number or email, password (hashed), sign-in provider, language and region.
Child profile (entered by the parent): first name, birthdate, boy/girl for Arabic grammar, chosen world.
Activity: habits, completions, stars, rewards, streaks and badges.
Voice messages: recordings made by parents.
Purchases: subscription status from Apple or Google. We never see card numbers.
Device and diagnostics: device type, app version, crash reports.

3. What we don't collect

We do not collect children's email addresses, phone numbers, photos, precise location or contacts. We do not record children's voices. We show no ads and use no advertising identifiers.

4. How we use data

To run the app: show missions, count stars, send the notifications you enable.
To personalize the experience by age (layout) and gender (Arabic grammar).
To provide support, keep the service secure and fix bugs.
To improve the product using aggregated, de-identified statistics.

5. Legal bases

We process data to perform our contract with the parent, with the parent's consent for child data and voice recordings, and for our legitimate interests in security and improvement.

7. Storage, security and transfers

Data is encrypted in transit and at rest and stored in [region]. Where data leaves your country, we use safeguards required by applicable law.

8. Retention

We keep data while the account is active. When you ask us to delete your account or a child profile, we verify your request and delete the data within 30 days of verification.

9. Your rights

You can access, correct, export or delete your family's data, withdraw consent, and object to processing. To access, export or delete your data, email privacy@yallabatal.hishammedhat.com or use the Delete account page on this site. A parent can delete a child profile in Parent Mode. We respond within 30 days.

10. Regional laws

We follow applicable data protection laws, including Egypt's Personal Data Protection Law (No. 151 of 2020), Saudi Arabia's Personal Data Protection Law, the UAE Federal Decree-Law No. 45 of 2021, and, where they apply, the EU GDPR and US COPPA.

11. Changes and contact

We will notify parents in the app before material changes take effect. Questions: privacy@yallabatal.hishammedhat.com.