Mrs Zoya

Privacy Policy

Effective: 6 September 2026 · Applies to mrszoya.com and the Mrs Zoya Android app · Operated by Rehan School (Rehan Foundation), Pakistan

Summary. Mrs Zoya collects only what is needed to run your speaking lessons: your name, email, optional profile photo, the languages enabled for you, your practice time, scores and streaks. We do not sell your data and we do not show ads.

1. Information we collect

Account: name, email address, and — if you sign in with Google — your Google profile picture. Passwords are stored hashed.
Learning data: minutes practised per day and per language, points, levels, streaks and leaderboard position.
Voice during a lesson: your speech is streamed in real time to our AI provider (OpenAI) so the tutor can understand and reply. Short text captions of the conversation are shown to you and used to score your sentence.
Practice audit: to keep streaks and the leaderboard fair, we keep the transcript of each lesson and a short sample (up to 30 seconds) of your microphone audio from the start of the call. An automated check uses them to confirm that a real conversation took place (and not, for example, a radio playing). School staff can review these samples. They are deleted when you delete your account.
Profile photo: optional; stored so it can appear next to your name on the class leaderboard.
Technical: standard server logs (IP address, browser type, time) kept for security and troubleshooting.

2. Facebook Live (optional feature)

Mrs Zoya can broadcast your practice session to Facebook. If you choose Go Live on Facebook:

You authorise our Facebook app with the publish_video permission. We use the access token only to create and end the live video you start, and store it encrypted on our server for that purpose.
The video/audio stream is generated in your browser (your webcam, microphone and the tutor's audio) and relayed by our server to Facebook. We do not record or keep the stream.
We do not read your posts, friends, or any other Facebook data. You can revoke access at any time from Facebook → Settings → Apps and Websites, or by clicking Disconnect Facebook in Mrs Zoya. We delete the token when you disconnect.

3. How we use information

To run lessons, score your speaking, and show streaks and leaderboards.
To let your school enable the right languages for you.
To keep the service secure and fix problems.

4. Sharing

We share data only with the service providers needed to operate Mrs Zoya: OpenAI (speech and tutoring), Groq (caption translation and scoring), Google (sign-in), and Meta/Facebook (only when you start a live broadcast). Your name and photo appear on the class leaderboard to other learners in your school. We never sell personal data.

5. Children

Mrs Zoya is used by students under the supervision of Rehan School. Schools control which learners have access and which languages are enabled. If you believe a child has provided data without consent, contact us and we will delete it.

6. Your choices & data deletion

You can change your profile photo, disconnect Facebook, or sign out at any time inside the app. To delete your account and all associated data, email ahad@rehanfoundation.com or ask your school coordinator — we remove it within 7 days. Facebook users can also request deletion via the app's Data Deletion instructions at mrszoya.com/privacy#delete.

Data deletion instructions: send an email to ahad@rehanfoundation.com with the subject "Delete my Mrs Zoya data" from the email you used to sign in (or include your Facebook name). We will confirm deletion within 7 days.

7. Security & retention

Data is stored on our own servers with HTTPS in transit. We keep learning data while your account is active and delete it on request.

8. Changes

We may update this policy as the app evolves; the latest version is always at mrszoya.com/privacy and inside the app.

9. Contact

Rehan School · mrszoya.com · ahad@rehanfoundation.com