Last updated: June 9 2026
Welcome to ArewaAI (“we”, “our”, “us”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our mobile application (the “App”) distributed via the Google Play Store. By installing or using the App, you agree to the practices described herein.
Supabase user profile – email address (optional, if the user signs in), unique user ID, and subscription status (is_premium).
Authentication tokens – short‑lived JWTs used to access Supabase services.
Device identifiers – Android device model, OS version, and a randomly generated installation ID stored locally via AsyncStorage.
App usage metrics – number of AI queries per day, rewarded‑ad view counts, and subscription product selections.
Google Play Billing data – product IDs (arewa_weekly, arewa_monthly, arewa_annual) and transaction IDs.
Purchase receipts – forwarded to our server for verification (no credit‑card data is stored on our servers; all payment processing is handled by Google Play).
Network connectivity – to fetch AI responses from our backend services.
Storage – AsyncStorage for caching premium status and usage counters.
We do NOT collect: contacts, location, camera/microphone audio, SMS, call logs, or any personally identifiable information beyond what is listed above.
Purpose
Data Used
Reason
Provide the core AI service
Supabase auth token, usage counters
Identify the user, enforce free‑usage limits, and deliver AI responses.
Manage subscriptions
Google Play Billing data, product IDs
Enable premium features, verify purchases, and maintain subscription state.
Improve the app
Device & usage metrics (aggregated)
Analyze performance, debug issues, and prioritize feature development.
Compliance & Security
Transaction receipts, error logs
Detect fraudulent purchases, protect against abuse, and meet legal obligations.
Communications (optional)
Email address (if user provides)
Send important account updates, receipt confirmations, or policy changes (only if the user opts‑in).
All data is stored only as long as needed for the purposes above and is deleted automatically when a user deletes their Supabase account or revokes the app’s access.
We do not sell or rent your personal data. We may share information with:
Recipient
Data Shared
Reason
Google Play
Purchase receipts, product IDs, transaction IDs
Required for billing, subscription management, and receipt verification.
Supabase (hosting provider)
Auth tokens, user profile, usage counters
Backend storage and authentication services.
Legal authorities
Any data required by law, court order, or government request
To comply with legal obligations.
Service providers (e.g., analytics, crash reporting)
Aggregated, non‑identifiable usage data
To monitor app stability and performance.
All third‑party services are bound by contractual obligations to protect your data in accordance with this policy and applicable law.
Transport encryption – All network traffic uses HTTPS/TLS.
At‑rest encryption – Supabase stores data in encrypted databases; Android’s AsyncStorage encrypts data on the device.
Access control – Only authorized personnel and services can access your data.
Least‑privilege principle – We request only the permissions required for core functionality.
You have the following rights, subject to applicable law:
Access & Portability – Request a copy of your data from Supabase.
Rectification – Update or correct inaccurate personal information.
Deletion – Delete your Supabase account, which removes all stored data.
Object / Restrict Processing – Opt‑out of non‑essential communications.
Data Export – Receive your data in a machine‑readable format.
To exercise any of these rights, contact us at privacy@arewaai.com.
The App is not intended for children under 13 years of age. We do not knowingly collect personal data from children. If we discover such data, we will delete it promptly.
Your data may be transferred to and processed in countries outside your residence, including the United States, where our Supabase backend is hosted. We ensure appropriate safeguards (e.g., standard contractual clauses) are in place.
Account data – retained until the user deletes the account.
Usage counters – reset daily; historical logs are kept for 30 days for debugging.
Billing records – retained for the duration of the subscription plus 7 years (as required by tax regulations).
We may update this Privacy Policy from time to time. Any material changes will be posted within the App and on the Google Play Store listing. Continued use of the App after such changes constitutes acceptance.
If you have any questions, concerns, or requests regarding this Privacy Policy, please email:
This Privacy Policy complies with Google Play’s User Data policies, the European GDPR, and applicable U.S. privacy regulations.