← 333 Sentences

333 Sentences Privacy Policy

Effective 26 October 2026

Sifr Studio operates 333 Sentences. This policy explains what we collect, why we use it, who processes it, and how you can request deletion.

Contact: mohammad@sifr.studio

Data we collect

• Account data: your name, email address, provider account identifier when you sign in with Google or Apple, and a securely hashed password when you use email sign-in. Apple may provide a private relay email address. We never store passwords in plain text. You need an account to use the app, so your plan and progress are saved to it.
• Learning data: languages, sentence progress, practice sessions, and subscription status.
• Setup answers: the first name you give, whether you are male or female, your age range, your level, the moments where you freeze, what happens when you do, your daily pace, and where you found 333. They shape your plan, let the Arabic text address you correctly, and help us understand who uses 333 and which posts bring learners. We store your age as a range, not your date of birth. You can skip the source question.
• Language requests: other languages you tap to be told about, to learn or to have Sentences explained in. We use them to choose the next languages and to tell you when one is ready.
• How you arrived: the ad or link that first brought you (campaign tags, the referring site, TikTok's click id), and in the app the install source: the Google Play install referrer on Android, and Apple Search Ads attribution on iPhone through RevenueCat. We use it only to see which ads and posts work.
• Reminder data: if you turn on practice reminders, your web-push endpoint or app push token and the time of the last reminder.
• Purchase data: product, purchase, entitlement, and billing status from Stripe, Apple, Google Play, and RevenueCat. We do not receive or store your payment card number.
• Analytics and feedback data: pages, events, device and browser information, error reports, and feedback you send. Signed-in analytics may be associated with your email. Your setup answers, including sex and age range, are stored with your analytics profile in PostHog; they are not sent to TikTok. Session replay masks input fields; console logs are used for diagnostics.
• Ads measurement data: pages, events, device and browser information, and a hashed copy of your email when you are signed in, sent to TikTok so we can measure and improve ads.
• Technical data: security and request metadata processed by our hosting, CDN, and security providers.

What we do not collect

333 Sentences does not upload or store your voice. When you record yourself in practice, the recording stays in memory on your device and is gone when you close the practice sheet. Where your browser or phone offers speech recognition, it shows what it heard; that recognition is done by your browser's or phone's speech service (for example Google or Apple), not by us. We do not sell personal data. We use TikTok to measure ads and decide which ads to show.

How we use data

• Sign you in and keep your account secure.
• Save your learning setup and progress, and write to you in the right form.
• Understand who uses 333 and which languages to add next.
• Send optional learning reminders that you enable.
• Provide purchases, subscription access, feedback, and troubleshooting.
• Measure ad performance and improve TikTok ads.
• Prevent abuse, maintain the service, and comply with law.

Service providers

• Google and Apple — account sign-in.
• 333 Sentences — email sign-in and securely hashed account credentials.
• PostHog — product analytics, diagnostics, session replay, and surveys.
• TikTok — ads measurement (browser pixel and Events API).
• RevenueCat, Apple, and Google Play — mobile purchase processing.
• Stripe — web checkout and billing records.
• Zoho — transactional email delivery.
• Cloudflare and Oracle Cloud — networking, security, and hosting.

Cookies and storage

We use a signed sifr_session cookie to keep you signed in. PostHog may use cookies or browser storage for analytics and surveys. TikTok may use cookies or browser storage to measure ads. Web-push subscription data is stored only when you enable reminders.

Retention and deletion

We keep account and learning data while your account is active. You can delete your account and associated 333 Sentences data from the account deletion page. Backups, fraud-prevention records, payment records, and some provider records may remain for a limited period or as required by law.

Your choices and rights

You may request access, correction, export, or deletion by using the deletion page or emailing mohammad@sifr.studio. You can also revoke Google or Apple access in your account settings with those providers.

Children

333 Sentences is not directed to children under 16.

International processing

We and our service providers may process information in the United States and other countries. We use reasonable safeguards for these transfers.

Changes

We may update this policy. We will update the effective date when we do.