Mirror Photos LLC Privacy Policy for Shaale Effective Date: March 27, 2026 1. Overview This Privacy Policy describes how Mirror Photos LLC ("Company", "we", "us") collects, uses, and protects personal data in connection with the Shaale app ("Service"), a Kannada language learning application for iOS. 2. Data We Collect Account Information (only if you sign in): - Name and email address, provided via Google or Apple Sign-In and managed by Clerk (clerk.com). - A unique user identifier assigned by Clerk. Learning Progress (stored locally and optionally synced to cloud): - Completed lessons, current level, coins earned, daily streak, and letters learned. - This data is stored on your device using AsyncStorage and, if you are signed in, synced to our database hosted on Supabase (supabase.com). Subscription and Purchase Information: - If you subscribe to Shaale PRO, purchase history and subscription status are managed by RevenueCat (revenuecat.com). We receive your subscription status but do not process or store payment card information. Usage and Device Data: - Basic device information (iOS version, device model) may be collected by our service providers for crash reporting and performance monitoring. 3. How We Use Your Data - To provide and personalize the Shaale learning experience. - To sync your progress across devices when you are signed in. - To verify your subscription status. - We do not use your data to train AI or machine learning models. - We do not sell your personal data to third parties. 4. Third-Party Services We work with the following trusted service providers who may process your data: - Clerk (clerk.com) — authentication and account management. - Supabase (supabase.com) — cloud storage of learning progress. - RevenueCat (revenuecat.com) — subscription and in-app purchase management. - Cloudflare (cloudflare.com) — video content delivery. - Apple — in-app purchases and Sign in with Apple. Each provider has their own privacy policy governing how they handle data. 5. Children's Privacy Shaale is designed to be appropriate for learners of all ages, including children. We do not knowingly collect personal data from children under 13 without parental consent. Account creation (which involves collecting email/name) requires the user to be 13 or older, or to have parental consent. The core learning features of Shaale work without creating an account and without collecting any personal data. If you believe a child under 13 has provided personal information without parental consent, please contact us at support@shaale.ai and we will delete the information promptly. 6. Data Sharing and Disclosure We share data only with the service providers listed above, as necessary to operate the Service, and as required by law. We do not sell, rent, or trade your personal information. 7. Data Security Data is encrypted in transit (HTTPS/TLS) and at rest. We take reasonable precautions to protect your data, though no method of storage is completely secure. 8. Your Rights and Account Deletion You can: - Request access to the data we hold about you. - Request correction of inaccurate data. - Delete your account and all associated data directly from the Profile tab within the Shaale app. Deletion is immediate and permanent. - Contact us at support@shaale.ai for any privacy-related requests. 9. Data Retention We retain account and progress data for as long as your account is active. When you delete your account, all associated data is permanently removed from our systems within 30 days. 10. Changes to This Policy We will post any updates to this policy with a new effective date. Continued use of the Service after changes implies acceptance of the updated policy. 11. Contact For privacy inquiries, contact us at support@shaale.ai