Privacy Policy

1. Who is responsible for your data

The data controller is the publisher of the Ifham app.

For any question about your data, write to hello@ifham.app.

2. The data we process

Your account. You sign in with your Apple or Google account (or, in the Chrome extension, with a code sent by email). We receive your email address and a technical identifier. We never receive your password.

Your personal dictionary and reviews. The words and meanings you save, the sentence where you met them, your review progress, your courses, your bookmarks and your reading positions.

Your books and scans. When you photograph a page or import a PDF, the page is sent to our server so its text can be recognised. It is processed on the fly and is not kept there. The recognised text is saved to your account so you can find it on your devices. Your original photos and PDF files stay on your device.

The words you look up. The word you tap is sent to our server, which returns its entry. Some entries are written with the help of an artificial intelligence model. In that case, the word is passed to the model, without your identity.

Your usage. For each account we count scans, entry lookups and searches, with their date. These counters are used to apply the limits of the free plan, monitor the load on the service and detect abuse.

Your usage statistics. If you agree, the app records, for your account, the screens you open, the time spent on each and a few actions (opening an entry, adding to your personal dictionary, starting a scan, reaching a limit of the free plan, opening the Premium page, becoming premium), with their date, your device's system (iOS, Android or web), the app version and the interface language. These statistics never contain your texts, the words you look up or your searches. We use them to understand how the app is used and to improve it. Without your agreement, none of this is recorded.

Your subscription. Payments go through the App Store or Google Play. We know which plan you have, whether it is active and until when. We never have access to your payment details. If you redeem a premium code, we record the code used.

Reminders. If you allow notifications, we store your device's notification token, its system (iOS or Android), the interface language, your time zone and the hour at which you usually open the app.

Word of the day. We record your daily result (word found, number of attempts and hints). A country is recorded only if you declare it yourself for the ranking. It is never inferred from your account or your IP address. The ranking shows totals per country only.

Your reports. When you report a wrong entry or a mistake in a text, we receive the word concerned, its context, the entry you were shown and your comment if you leave one.

Large screen and Chrome extension. The large-screen mode opens a session linked to your account, limited to 24 hours and revocable. The extension only sends the word you select. It reads neither your history nor the rest of the page.

The ifham.app website. If you join the waiting list, we keep your email address to tell you about the launch. The site sets a single cookie, which remembers your chosen language, and stores the light or dark theme in your browser. There is no advertising and no audience tracking tool.

Technical data. Like any online service, our servers and hosting providers see your IP address and keep technical logs, used for security and troubleshooting.

3. Why we use it

• To provide the service (performance of the contract): your account, syncing between your devices, the dictionary, text recognition, reviews, the subscription.
• To protect and improve the service (legitimate interest): usage limits, abuse detection, monitoring the load on the service, dictionary corrections based on your reports.
• With your agreement (consent): notifications, usage statistics, the country declared for the ranking, the waiting list. You can withdraw this agreement at any time.

We do not sell your data and we do not use it for advertising.

4. The providers involved

Your data is shared only with the providers needed to run Ifham, each for its own task:

• Supabase: authentication and the database behind your account.
• Hetzner (Germany): hosting of our server.
• Google Cloud: recognition of page text (Vision) and assisted writing of some entries (Gemini, through Vertex AI).
• Apple and Google: signing in to your account and paying for subscriptions.
• RevenueCat: tracking the status of your subscription.
• Expo: delivering notifications to your device.
• Vercel: hosting of the ifham.app website.

Some of these providers are based outside the European Union, notably in the United States. Transfers are then covered by the safeguards provided by the GDPR, such as the European Commission's standard contractual clauses.

5. How long we keep it

• Your account data is kept for as long as the account exists.
• Usage statistics are kept for 180 days, then deleted automatically.
• When the account is deleted, your profile, personal dictionary, texts, usage counters, usage statistics, notification tokens and reports are deleted. Security logs are kept with no link to your identity.
• Images sent for text recognition are not kept after processing.
• The address left on the waiting list is kept until launch, or until you ask us to remove it.

6. Your rights

At any time you can ask to access your data, correct it, erase it, receive it in a portable format, restrict its processing, or object to a processing.

To exercise these rights, or to delete your account and all associated data, write to hello@ifham.app from your account's address. We reply within one month.

You can turn off notifications in the app or in your device settings, and remove your country from the ranking in the app.

You can accept or refuse usage statistics the first time you sign in, then change your mind at any time in Settings › Usage statistics. Refusing removes no feature. If you withdraw your agreement, recording stops at once; to have the statistics already recorded erased, write to us.

If you believe your rights are not being respected, you can lodge a complaint with the data protection authority of your country. In France, this is the CNIL.

7. Security

Exchanges are encrypted (HTTPS). Each account can only reach its own data, thanks to access rules enforced inside the database itself. Premium status and usage limits are decided by the server and cannot be changed from the app. The access keys to our providers never leave our servers.

8. Minors

Ifham is not intended for children under 15 without the agreement of a parent or legal guardian. If the law of your country sets a different age, that age applies. If you believe a child has given us data without that agreement, write to us and we will delete it.

9. Changes to this policy

This policy may change as the app evolves. The date of the last update is shown at the top of the page. If a change is significant, we will tell you in the app or by email.