Alef Mad · Privacy Policy for Windows
1. Controller and scope
Sameh Merzaie, Switzerland. Contact: support@alefmad.com. This policy describes Alef Mad for Windows, its D1–D5 learning levels and email support. Last updated: 13 October 2026.
The Windows Store edition is still being prepared. The online purchase verification sections describe the planned Store feature and apply when it is activated. The current demo and private full-content test do not perform this Store verification. The actual hosting configuration will be checked again before the Store release.
2. Learning and local storage
Learning progress, exercise answers, writing practice and display settings remain in the local app profile. They are not sent to our purchase verification server. No separate Alef Mad account is required. The app has no advertising, built-in usage analytics SDKs, public profiles or chat.
3. Microsoft Store and purchase verification
Microsoft processes payments and associates purchases with your Microsoft account. Alef Mad does not receive payment card details. To check entitlements, the Store edition sends a randomly generated installation identifier and a Microsoft-issued entitlement token to the Alef Mad verification service over HTTPS. The service asks Microsoft which learning levels you are entitled to use. Product identifiers, entitlement status and the installation reference are processed.
The installation identifier is stored locally and associates verification requests with the installation. It is not an Alef Mad account. Apple, Google and Microsoft purchases are handled separately. This Windows implementation does not use Google Play Integrity.
4. Temporary processing and retention
The inspected Windows server implementation processes entitlement tokens temporarily in memory and does not write them to a purchase verification database. Request contents, tokens and account references are omitted from application error messages and logs.
Single-use verification requests expire after two minutes. Access sessions last no more than five minutes. A new verification replaces the previous session for that installation. Expired entries are removed during requests and every 30 seconds. This in-memory data is discarded when the service stops. IP-based request counters are kept in memory for a one-minute window to limit requests. These periods do not apply to hosting provider logs.
5. Protected content and online access
Downloaded full levels are cached using Windows data protection encryption for the current Windows user account. The cache alone does not unlock content. The Store edition requires valid online purchase verification to open full levels. Permanent offline access is therefore not guaranteed. Free demos require no purchase.
6. Hosting and Microsoft services
Separate hosting at Infomaniak in Switzerland is planned for the Windows verification service. The hosting provider may process connection information such as IP addresses, access times and error data. The specific logging and backup retention periods for the Windows environment, which is not yet active, must be defined and added here before public operation.
Microsoft Store and Microsoft Edge WebView2 process data under Microsoft’s privacy information. External guide and support links are also subject to the privacy information of the website or email service used. We do not sell data or use it to create advertising profiles.
7. Backups and deleting local data
You can export learning progress to a JSON file and import it again. The selected file may contain your learning progress. If you save it in a cloud folder or share it, the service or recipient you choose also processes it.
You can remove local data by deleting the Alef Mad app profile. Back up any progress you need first. Uninstalling the app does not necessarily remove separately stored profiles or exported files. Exported backups must be deleted separately. This does not delete the purchase history in your Microsoft account.
8. Support and privacy rights
For support enquiries, we process your email address and message to handle your request. Provide only necessary information, never passwords or payment card details. Messages are retained for as long as needed to handle the request or meet applicable legal obligations.
Under applicable data protection law, you may request access, correction, deletion and, where applicable, object to processing or request data portability. Contact support@alefmad.com. We will clarify how to identify your records securely. Contact Microsoft about Microsoft account and payment data. Deleting data at Alef Mad does not cancel a Store purchase. You may contact the competent data protection authority.
9. Children
Alef Mad is also intended for learners aged nine and above. Parents or guardians should supervise paid purchases and may make privacy requests on behalf of their children where authorised. There are no public profiles or chats.
10. Security and changes
Communication with the verification server is encrypted using HTTPS. Access is restricted to authorised persons. Absolute security cannot be guaranteed for electronic processing. We will update this policy and its date when features or data processing change.