Introduction
This Privacy Policy describes how Ruwwaad ('we', 'our', or 'us') collects, uses, and protects information when children use YapZap ('the App'). YapZap is an educational app designed for children ages 5-8 where they can ask questions and receive fun, age-appropriate AI responses through voice interaction. This policy is effective as of the date listed below and complies with Google Play Store requirements, Google Play Families Policy, COPPA (Children's Online Privacy Protection Act), GDPR, and other applicable privacy laws. We are committed to protecting children's privacy and ensuring a safe, fun, and educational experience. By downloading and using this app, parents acknowledge that they have reviewed this Privacy Policy and consent to the data practices described herein.
Information We Collect
YapZap collects the following information from children (with parental consent obtained through Google Play Store's age verification):
- Voice Recordings: We collect voice recordings only when a child actively uses the voice chat feature to ask questions. These recordings are transmitted to our secure servers for processing and are necessary to provide fun, age-appropriate AI-powered responses. Voice recordings are processed in real-time and deleted immediately after the AI response is generated (typically within 5-10 seconds).
- Speech Recognition Data: The app uses device-based speech recognition (via Expo Speech Recognition) to convert voice to text. This processing occurs on the device and only the transcribed text is sent to our servers.
- Local Preferences: Theme preferences (male/female avatar), language settings (English/Urdu), and other app configurations are stored locally on the device using AsyncStorage and are never transmitted to our servers.
We do NOT collect from children:
- Personal identification information (name, email, phone number, address)
- Location data or GPS coordinates
- Contact lists or phone contacts
- Photos or videos
- Persistent identifiers or device IDs
- Any data for behavioral advertising or user profiling
- Any data for training AI models
We collect only the minimum information necessary to provide the voice chat and educational service. No personal information is required to use the app.
How We Use Your Information
We use the collected information for the following purposes:
- Voice Processing: Voice recordings are converted to text using device-based speech recognition, then the text is sent to our secure backend server. The server uses OpenAI's GPT-4o AI model to generate fun, age-appropriate, and child-friendly responses. The AI response is then converted to speech using Microsoft Edge Text-to-Speech (Edge-TTS) service. Each voice recording is processed in real-time and deleted immediately after the response is generated.
- Service Delivery: Voice data is used solely to provide the core functionality of the app - answering children's questions in an educational and entertaining manner.
- Legal Compliance: We may process data to comply with legal obligations or respond to lawful requests from authorities.
We do NOT use your child's voice data for:
- Training or improving AI models
- Creating user profiles or behavioral tracking
- Behavioral advertising or targeted marketing
- Sharing with third parties for commercial purposes
- Any purpose other than providing the immediate response to the child's question
We do NOT engage in behavioral advertising. The app displays contextual ads through Google AdMob, but these ads are not personalized based on your child's data or behavior.
Data Storage, Retention, and Security
Data Storage: Voice recordings are temporarily stored on our secure backend servers (hosted on Railway cloud infrastructure) only during the processing time required to generate an AI response. The processing typically takes 5-10 seconds. Once the response is generated and sent back to the device, voice recordings are immediately and permanently deleted from our servers. No voice data is stored permanently or archived.
Data Retention: Voice recordings are processed in real-time and deleted within seconds (maximum 10 seconds) after the AI response is generated. We do not retain voice recordings for any period of time after processing is complete. Audio files containing the AI-generated speech responses are temporarily stored on our servers for delivery to your device and are automatically deleted after 1 hour if not accessed.
Security Measures: We implement industry-standard security measures including:
- HTTPS encryption (TLS 1.3) during all data transmission between the app and our servers
- Secure server infrastructure hosted on Railway with regular security updates
- Access controls limiting server access to authorized personnel only
- No persistent storage of voice recordings
- Automatic cleanup of temporary audio files
- Regular security monitoring and updates
Local Data: Theme preferences, language settings, and other app configurations are stored locally on your device using React Native AsyncStorage and are never transmitted to our servers. This data remains on your device and can be cleared by uninstalling the app.
Third-Party Services and Data Sharing
Third-Party Services Used:
- OpenAI (GPT-4o Model): We use OpenAI's GPT-4o API to generate AI responses to children's questions. OpenAI processes the transcribed text (not voice recordings) and returns text responses. OpenAI is bound by their Privacy Policy and Terms of Service, which prohibit using customer data to train their models. Your data is not used to improve OpenAI's services.
- Microsoft Edge Text-to-Speech (Edge-TTS): We use Edge-TTS to convert AI-generated text responses into speech audio. Edge-TTS processes text on Microsoft's servers and returns audio files. Microsoft's privacy practices apply to this service.
- Google AdMob: The app displays banner and interstitial ads through Google AdMob. AdMob may collect device information and ad interaction data in accordance with Google's Privacy Policy. We have configured AdMob to request non-personalized ads only, meaning ads are not targeted based on user behavior or personal information.
- Railway (Hosting Provider): Our backend servers are hosted on Railway cloud infrastructure. Railway provides hosting services and does not access or use your data.
Data Sharing: We do NOT sell, rent, or share your personal data with third parties except:
- With the third-party service providers listed above, which are necessary for app functionality
- When required by law or legal process
- To protect our rights, privacy, safety, or property
International Data Transfers: Your data may be processed in countries outside your jurisdiction (including the United States where OpenAI and Microsoft servers are located). We ensure adequate safeguards are in place through service provider agreements and compliance with applicable data protection laws.
Children's Privacy (COPPA Compliance)
YapZap is an educational app designed for children ages 5-8. We are fully committed to COPPA (Children's Online Privacy Protection Act) compliance and protecting children's privacy.
Parental Consent: Parental consent is obtained through Google Play Store's age verification system when parents download the app. By downloading YapZap from Google Play Store, parents acknowledge that they have reviewed this Privacy Policy and consent to the data practices described herein. The app does not require additional in-app consent mechanisms as Google Play Store's age gate serves as the parental consent mechanism.
Target Audience: This app is specifically designed for children ages 5-8. We do not knowingly collect data from children under 5 or over 13 without appropriate parental consent.
Limited Data Collection: We collect only the minimum information necessary to provide the voice chat and educational service. We do NOT collect:
- Personal identification information (name, email, phone number, address)
- Location data or GPS coordinates
- Contact lists or phone contacts
- Photos or videos
- Any persistent identifiers or device IDs
- Any information for behavioral advertising
Parental Rights: Parents and guardians have the right to:
- Review any personal information collected from their child
- Request deletion of their child's data at any time
- Refuse further collection or use of their child's information
- Revoke consent at any time by uninstalling the app or disabling microphone permissions
- Request information about third-party services used
To exercise these rights, parents should contact us at ruwwaaad@gmail.com with 'Parental Request' in the subject line. We will respond within 30 days.
If you are a parent and believe we have collected information from your child without your consent, please contact us immediately at ruwwaaad@gmail.com.
Parental and Children's Privacy Rights
Parents and guardians have the following rights regarding their child's data:
- Right to Access: Request information about what data we have collected from your child. Since voice recordings are deleted within 5-10 seconds after processing, we can provide information about our data practices but cannot provide copies of deleted recordings.
- Right to Deletion: Request deletion of any data we may have collected. Voice recordings are automatically deleted immediately after processing, but we will confirm deletion procedures if requested.
- Right to Review: Review this Privacy Policy and understand what data is collected and how it's used.
- Right to Correction: Correct any inaccurate information (for locally stored preferences like theme or language settings).
- Right to Object: Object to processing of your child's data by disabling microphone permissions or uninstalling the app.
- Right to Withdraw Consent: Withdraw parental consent for data processing at any time by uninstalling the app or disabling microphone permissions.
- Right to Refuse Collection: Refuse to allow further collection or use of your child's information by not granting microphone permission or uninstalling the app.
- Right to Portability: Request a copy of any data we have stored (though we store minimal data and voice recordings are deleted immediately).
Children's Rights: Children can stop using the voice chat feature at any time by not tapping the microphone button, which will prevent further data collection.
To exercise these rights, parents should contact us at ruwwaaad@gmail.com with 'Parental Request' in the subject line. We will respond within 30 days.
Since voice recordings are automatically deleted within 5-10 seconds after generating the AI response, there is no persistent voice data stored on our servers to access or delete. However, we will provide information about our data practices and confirm our deletion procedures upon request.
Parental Consent and Controls
Parental Consent Required: Before a child can use YapZap's voice chat feature, we require parental consent. Parental consent is obtained through Google Play Store's age verification system when you download the app. By downloading YapZap, you acknowledge that:
- You are the parent or guardian of the child using the app
- You have reviewed and understand this Privacy Policy
- You consent to the data collection and processing practices described herein
- You understand that voice recordings will be processed by third-party AI services
Consent Mechanism: By downloading and installing YapZap from Google Play Store, you agree that your child's voice data may be:
- Recorded when using the voice chat feature (microphone permission required)
- Transmitted to our secure servers for processing
- Processed through OpenAI (GPT-4o) to generate responses
- Converted to speech using Microsoft Edge-TTS
- Temporarily stored during processing (deleted within 5-10 seconds after response generation)
Parents can withdraw consent at any time by:
- Uninstalling the app from the device
- Disabling microphone permissions in the device settings (Settings > Apps > YapZap > Permissions > Microphone)
- Contacting us at ruwwaaad@gmail.com to request data deletion
Parental Controls: Parents have full control over:
- Whether their child can use the voice feature (via microphone permission)
- App installation and removal
- Device-level permissions management
- Ability to review this Privacy Policy at any time
No voice recording occurs without microphone permission being granted. Voice recordings are deleted immediately after the AI response is generated, ensuring minimal data retention.
Advertising and Google AdMob
YapZap displays advertisements through Google AdMob to support the free availability of the app.
Ad Configuration: We have configured AdMob to request non-personalized ads only. This means:
- Ads are not targeted based on your child's behavior, interests, or personal information
- Ads are not personalized based on previous app usage
- AdMob may collect device information (device type, OS version) and ad interaction data
- AdMob's data collection is governed by Google's Privacy Policy
Ad Types Displayed:
- Banner ads: Displayed at the top and bottom of the app interface
- Interstitial ads: May appear when navigating between certain screens
Children's Data and Ads: We do NOT use children's voice data, questions, or any personal information for advertising purposes. AdMob's data collection is limited to standard ad serving metrics and is not linked to your child's voice interactions.
Parental Controls: Parents can limit ad exposure by:
- Using device-level ad blocking (if available on your device)
- Restricting in-app purchases (to prevent accidental ad-related purchases)
- Monitoring app usage
For more information about Google AdMob's data practices, please review Google's Privacy Policy at https://policies.google.com/privacy.
Data Breach Notification
In the unlikely event of a data breach that compromises children's personal information, we will:
- Notify affected parents/guardians within 72 hours of discovering the breach (as required by COPPA and GDPR)
- Report the breach to relevant data protection authorities as required by law, including:
- The Federal Trade Commission (FTC) for COPPA violations
- Your local data protection authority
- Google Play Store (if applicable)
- Provide clear information about:
- What data was affected
- When the breach occurred
- What we are doing to address the breach
- Steps parents can take to protect their child
- How to contact us for more information
Notification Methods: Since we do not collect email addresses, breach notifications will be provided through:
- An in-app notification when you next open the app
- A notice on our website (if applicable)
- Public disclosure if required by law
We maintain incident response procedures and regularly test our security measures to prevent breaches. Given that voice recordings are deleted within 5-10 seconds after processing and no persistent personal data is stored, the risk of a significant data breach is minimized. However, we take all security threats seriously and will respond promptly to any incidents.
Device Permissions
YapZap requires the following device permissions:
- Microphone Permission: Required only when using the voice chat feature. The app requests this permission when you first tap the microphone button. You can deny this permission, but voice chat functionality will not be available. Microphone access is used solely to record your child's voice questions and is not used for any other purpose.
- Speech Recognition Permission: Required for converting voice to text. This permission is requested along with microphone permission. Speech recognition processing occurs on your device, and only the transcribed text is sent to our servers.
- Storage Permission: Not required. App preferences (theme, language) are stored locally using device storage APIs and do not require explicit storage permission.
You can manage these permissions at any time through your device's settings:
- Android: Settings > Apps > YapZap > Permissions
- iOS: Settings > YapZap > Microphone
Revoking microphone permission will disable voice chat functionality but will not affect other app features (you can still view the app interface).
We do NOT request unnecessary permissions such as:
- Location or GPS access
- Contacts or phone access
- Camera or photo access
- Phone call access
- SMS or messaging access
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Updating the 'Last Updated' date at the bottom of this policy
- Posting a notice in the App
- Sending an email notification (if we have your email address)
We encourage you to review this Privacy Policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.
If you do not agree with any changes, you may stop using the App and request deletion of your data.
Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, especially regarding your child's privacy, please contact us:
Company: Ruwwaad
Email: ruwwaaad@gmail.com
We will respond to your inquiries within 30 days. For parental requests or data protection requests, please include 'Parental Request' or 'Privacy Request' in your subject line and specify:
- Your request type (access, deletion, correction, consent withdrawal, etc.)
- Your relationship to the child (parent/guardian)
- Relevant details to help us process your request
- Verification of your identity and parental relationship (required for child data requests)
For complaints about our data handling, especially regarding children's privacy, you also have the right to contact:
- Your local data protection authority
- The Federal Trade Commission (FTC) for COPPA-related complaints
- Google Play Store support for app-related privacy concerns
Last Updated: January 26, 2026