Back to Home
Koraa Trust & Safety

Privacy Policy

Complete transparency. Your personal data stays on your device and 100% under your control.

Last updated: August 12, 2026
Developer: Dev-sott — dev-scott.me
100% Local Privacy
Contents:

1. Introduction

01

Koraa is a mobile app for learning African mother tongues. Your privacy matters to us. This policy explains how the app handles your data.

At a glance

In short: Koraa does not collect any personally identifiable data without your consent. Your progress and preferences are stored on your device. Some features (pronunciation, voice transcription) require sending audio data to our server for processing (see section 4). The app uses Supabase to manage your account and sync your progress (see section 7).

2. Data Collection

02

Koraa only collects data strictly necessary for the app to function properly:

Your email address: only if you create an account, for authentication purposes

Your learning progress: completed lessons, scores, practice statistics

Your preferences: interface language, visual theme, language(s) you are learning

No analytics or advertising tracking services are used

Basic lessons can be accessed entirely offline — only voice recognition and sync features require a connection

No banking or financial data is collected

3. Camera and Photos

03

Koraa does not request access to your camera or photo gallery. The app does not use any feature requiring images from your device.

4. Microphone and Voice Recognition

04

Koraa uses your device's microphone for pronunciation exercises, which are at the heart of the learning experience.

Explicit activation: the microphone is only activated when you press the record button inside a pronunciation exercise. It is never activated in the background.

Server-side processing: the captured audio is converted to base64 and sent to our Supabase server, which forwards it to a speech-to-text transcription service to analyze your pronunciation and provide feedback.

No audio storage: the audio file is never stored on our servers. Only the text transcription is used to evaluate your pronunciation and is immediately deleted after processing.

Local result: your pronunciation score and feedback are stored locally on your device to track your progress.

Revocable: you can revoke microphone permission at any time in your phone settings (Settings > Koraa > Microphone). Pronunciation exercises will then be unavailable, but the rest of the app remains accessible.

5. Payment and Purchases

05

Koraa is entirely free in its base version. Certain languages or advanced features may be offered as an optional subscription in a future version.

No banking data: Koraa does not directly collect, store or process any banking or financial data. Any future payment is handled exclusively by Apple App Store or Google Play Store, subject to their own privacy policies.

6. Local Storage

06

The app stores the following data locally on your device (via AsyncStorage):

Your session: the Supabase authentication token allowing you to stay logged in without re-entering your credentials

Your course cache: recently viewed lesson data, to allow offline access

Your preferences: interface language, visual theme and personal settings

Storage Guarantees:

Are stored on your device

The course cache can be cleared from the app settings

Can be fully deleted by uninstalling the app or deleting your account

7. Account and Sync (Supabase)

07

Koraa uses Supabase as its backend infrastructure to manage user accounts and sync progress. When you create an account or use the app online, the following data is stored on Supabase servers:

Your email address: used solely for authentication and account recovery

Your progress: completed lessons, scores, weekly practice statistics (minutes spoken, minutes listened)

Your session tokens: secure access tokens to maintain your login session

No plaintext passwords: passwords are hashed and secured by Supabase Auth — Koraa never has access to them

Servers: data is hosted on Supabase servers, whose infrastructure is located in Europe (EU). Supabase is GDPR-compliant.

Deletion: you can request full deletion of your account and all associated data from the app settings or by contacting us directly.

8. Third-Party Services

08

Koraa integrates the following third-party services, each subject to its own privacy policy:

Supabase (database and authentication): secure storage of your account and progress — supabase.com/privacy

Voice transcription service (speech-to-text): temporary processing of your audio recordings to evaluate your pronunciation — data is not retained after processing

Expo / React Native: open-source mobile framework, does not collect any user data

9. Your Rights

09

In accordance with the General Data Protection Regulation (GDPR) and applicable laws, you have the following rights:

Right of access: you can request a copy of all data we hold about you

Right of rectification: you can correct your information directly from the app settings

Right to erasure: you can delete your account and all associated data at any time

Right to portability: you can request an export of your progress data in a readable format

Right to object: you can object to any processing of your data by deleting your account

10. Changes

10

This privacy policy may be updated occasionally to reflect changes in the app or legal requirements. Any changes will be reflected by the update date at the top of this document. In the event of a substantial change, you will be notified within the app. We encourage you to review this page regularly.

11. Contact

11

For any questions regarding this privacy policy, to exercise your rights, or to request deletion of your data: