Privacy Policy

1. Data we collect

We collect only what the Service needs to work:

• Account data: email or mobile number, display name, avatar, and the identifier from a third-party sign-in provider (e.g. Apple, Google) if you use one.
• Content you create: prompts and text you write, settings (mode, dialect, voice), generated audio clips, playlists, titles and descriptions.
• Publishing and interaction data: what you publish to the Xplore page, likes, saves, reports and comments where available.
• Technical data: IP address (stored as a hashed fingerprint for rate limiting and abuse prevention), device type and OS, app version, and error logs.
• Usage and analytics: screens visited and core events (generate, share, play).
• Payment data (if purchases are enabled): handled directly by the payment provider or app store — we receive subscription status only and never store card details.

2. Purposes and legal basis

We process your data for these purposes only:

• Performance of contract: creating your account, generating clips, saving playlists, publishing to Xplore.
• Legitimate interest: abuse and fraud prevention, rate limiting, quality and performance improvement, security.
• Legal obligation: responding to lawful requests from competent Saudi authorities.
• Consent: marketing messages and optional notifications — withdrawable at any time.

3. AI processing of your inputs

Your text prompts and voice settings are sent to AI model providers (e.g. Google Gemini) solely to generate your audio. We do not sell your inputs, and we do not use your private content to train third-party models without your explicit consent.

We may keep minimal logs (without full prompt text where feasible) for security, abuse prevention and handling reports.

Outputs are machine-generated and may be inaccurate; see the Terms for your responsibility for them.

4. Sharing

We do not sell personal data. We share it only with:

• Hosting and database providers (Supabase / cloud providers) to run the Service.
• AI model providers to generate the content you request.
• Analytics and performance tools (aggregated or pseudonymised).
• Payment providers and app stores when you purchase.
• Saudi regulatory or judicial authorities upon a lawful request.

5. Cross-border transfers

Some data may be processed on servers outside the Kingdom (cloud and AI providers). We apply the safeguards required by the PDPL and the Data Transfer Regulations, including contractual protections and minimising what is transferred.

6. Public content on Xplore

When you publish a clip or playlist to Xplore, that content plus your display name and avatar become publicly visible, playable and shareable. Do not publish personal or sensitive information about yourself or anyone else.

You can unpublish at any time, but copies downloaded or shared by others before then may remain outside our control.

7. Retention

Account data is retained while your account is active. Rate-limit records are deleted quickly (typically within 48 hours). Your clips and playlists are kept until you delete them or your account.

After a deletion request we delete or anonymise data within a reasonable period not exceeding 30 days, except where retention is legally required or needed for disputes and security.

8. Your rights

Under the PDPL you have the right to:

• Be informed of how your data is processed.
• Access your data and receive a readable copy.
• Request correction of inaccurate or outdated data.
• Request destruction (deletion) of data no longer needed.
• Withdraw consent for optional processing at any time.

9. Account deletion

You can delete your account in-app (Settings → Delete account) or by emailing wanasa@kayantech.ai. Deletion removes your profile, clips, playlists and Xplore posts.

10. Children

The Service is not directed to anyone under 13. If we learn we collected data from a child under that age without guardian consent, we delete it promptly. Minors below the legal age of majority require guardian supervision.

11. Security

We use encryption in transit, row-level security policies in the database, and least-privilege access. No system is 100% secure; where a breach requires it, we notify the competent authority and affected users.

12. Cookies and measurement

We use cookies and local identifiers to keep you signed in, remember preferences and measure performance, and we may use advertising measurement pixels (e.g. Meta, TikTok) on the website. You can control these in your browser or device settings.

13. Changes

We may update this policy; the last-updated date will change here and we will notify you in-app of material changes.