Privacy policy

Last updated: 7 November 2026 · Applies to darijaplus.site and the Darija+ Android app.

Darija+ is a free language-learning project for Moroccan Darija and Amazigh. This policy explains, in plain language, what happens to data when you use the website or the Android app. We have tried to keep it short and honest.

1. Who we are

Darija+ is developed and operated by Youssef Elfahfouhi, an independent developer based in Morocco. For any privacy question, write to [email protected].

2. Data we do not collect

• You do not need an account, and we do not ask for your name, email, phone number, address or date of birth.
• We do not request access to your location, contacts, photos, camera or microphone.
• We do not run advertising SDKs and we do not sell, rent or share personal data with data brokers.
• We do not build a profile of you across other websites.

3. Data the service uses

• A random device identifier. The first time you use AI Practice on the website or in the app, a random ID is created and stored on your device. It is not linked to your name, email or Google account. It exists only to apply the free daily message limit.
• A daily message counter. Our server stores a counter per device ID and per calendar day. The counter expires automatically after roughly two days and is not used for anything else.
• The messages you send in AI Practice. When you send a message, the last few messages of that conversation are sent to our server and forwarded to the AI provider to generate a reply. Our server does not retain the content of your messages. The reply is returned to your device.
• Technical logs. Our hosting providers may keep short-lived standard logs (IP address, timestamp, requested URL, user agent) for security, abuse prevention and reliability. These are not used to identify you personally.

4. Data stored in your browser or on your phone

The website uses your browser’s local storage for:

• your chosen theme (light or dark);
• the phrases you mark as learned, and your quiz best score;
• the random AI Practice device ID described above.

In the Android app, the same kind of information (progress, theme, random device ID) is stored in the app’s private storage. Clearing site data in your browser, or clearing the app’s data, removes it. We cannot recover it because it never reaches us.

5. AI practice and third parties

AI replies are generated by an AI provider (currently Anthropic) through a server running on Cloudflare Workers. These providers receive only the data needed to produce a reply: your message, the recent conversation context, the selected language and scene, and the random device ID used for rate limiting. Their handling of data is governed by their own privacy policies.

Please do not enter personal information — names, phone numbers, addresses, ID numbers, health or financial details — into AI Practice. It is a language-practice tool, not a private channel.

The website loads fonts from Google Fonts and may load optional services only if they are configured by the site owner. If advertising or analytics are enabled in future, this policy will be updated before they go live.

6. Cookies and analytics

Darija+ does not set advertising cookies. Local storage is used as described above. If privacy-friendly, cookie-free analytics are enabled, they would process aggregated page views only. At the time of writing, no analytics service is configured by default.

7. Your choices and rights

• Stop using AI Practice at any time. Everything else works without it.
• Remove local data by clearing site data in your browser or the app’s data on your phone.
• Object or ask questions by emailing [email protected]. Because we do not hold an account or identity for you, we may be unable to locate any data about you beyond a random ID.
• Where the GDPR or similar laws apply, you have rights of access, rectification, erasure, restriction and objection. We will respond within a reasonable period, normally 30 days.

8. Children

Darija+ is a general-audience learning service and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information in AI Practice, contact us and we will help remove it.

9. Security and retention

Traffic is served over HTTPS. The AI endpoint is rate-limited and does not store message content on our server. Daily counters are short-lived. No system is perfectly secure, so please avoid sending sensitive personal information through the service.

10. Changes

We may update this policy as the service evolves. The “last updated” date at the top shows the current version. Material changes will be announced on this page.

11. Contact

Questions, corrections or privacy requests: [email protected].

This page is provided for transparency and is not legal advice. If you operate in a jurisdiction with specific requirements, adapt the text with a qualified professional.