تكرار Tikrar

Privacy

Last updated

Tikrar is typing practice for spoken Arabic. It is built and run by one person, Mohsin, in Riyadh. This page lists what the app keeps about you, why, where it lives, and how to have it deleted.

What we keep

  • Your sign-in. If you continue with Google, Google tells us your email address, your name, your profile picture and your Google account ID. If you sign in with an email code, we get your email address from the moment you ask for the code, with no name or picture. There is no password to store.
  • Your sessions. Each time you sign in, or start as a guest, we record when, your IP address and which browser you used. Supabase, which handles sign-in, keeps this with the session; it is also how we spot abuse.
  • Your practice. For every line you finish: which line it was, your speed, your accuracy, the letters you mistyped and what you typed instead, how often you replayed the line and whether you slowed it down, whether the on-screen keyboard was showing, whether you typed on a touchscreen or a keyboard, which keyboard layout the board used (Windows, Mac or Mac PC) or that your keyboard was none of these, and when.
  • Your reports. When you flag a line as wrong: which line, when, and the note you wrote. If a line turns out to be broken, the app files that report itself, with no note from you.
  • Guests. You can try a line without an account. The app makes a guest account, with no name or email attached, and keeps your practice under it. Sign in later and it becomes your account, practice included; if that Google account or email already has a Tikrar account, you are signed in to that one and the guest practice is not carried over. A guest account is deleted, practice and all, about 30 days after it was made, by a clean-up that runs every week. Sign in before then to keep it.

What your browser holds

A cookie that keeps you signed in. Your settings: theme, typing sounds, the hand guide, auto-replay, your keyboard layout and the one the app last saw you typing on, and a couple of notes about what the app has already shown you. Results that have not reached the server yet.

No advertising cookies. No tracking pixels.

What we do not do

No analytics or tracking tools, no ads, nothing that records your screen. Nothing you type is sent to an AI or voice service; the audio is made ahead of time. We do not sell your data or share it. The services listed below handle it only to run Tikrar.

If any of this changes, this page changes with it.

Why we keep it

To show you your own progress, and to see which lines and letters trip people up so we can fix them. Your email address is used to sign you in and to answer mail you send us, nothing else. Your name and picture arrive with Google sign-in; the app does not use them.

Who can see it

You see your own. Mohsin can see all of it, because he runs the database. No other learner can see yours.

Where it lives

  • Supabase holds the database and handles sign-in, in Frankfurt, Germany.
  • Vercel runs the website. The app's servers are in Frankfurt too; your requests reach them through the part of its network nearest you.
  • Google signs you in if you choose Continue with Google, and runs the Gmail inbox our mail lands in.
  • Resend delivers the code email, so it handles your email address when you ask for a code, and keeps its own record of sending it.
  • Cloudflare forwards mail sent to privacy@tikrar.app to that Gmail inbox.

These are American companies, and Mohsin reads the database from Saudi Arabia, so your data does not stay only in Germany.

Like any web host, Supabase and Vercel keep technical logs of requests (IP address, page, time) for no more than a week.

Deleting your data

A signed-in account and its practice are kept until you ask us to delete them. Email privacy@tikrar.app from the address you sign in with. Within 7 days we delete your account and everything we hold with it: your sessions, your practice and your reports. Ask at the same address for a copy of what we hold, or to correct it.

A guest account has no address we can look it up by; it is deleted on its own, as described above.

Two things sit outside our database: Resend's record of the code emails it sent you, and your email to us. We delete your email once it is answered, if you ask.

To clear what your browser holds, sign out and clear this site's data in your browser settings. If you signed in with Google, you can also remove this app from the connected apps in your Google account.

Beta terms

Tikrar is in beta and free. It comes as it is, with no guarantees: it may break, change or stop, and your progress may be reset while we fix things.

Changes

When this page changes, the date at the top changes with it. Questions go to privacy@tikrar.app.

Back to Tikrar