Your notebook. Your voice. Your device.
Nathrah Privacy Policy
Updated October 8, 2026
Who operates Nathrah?
The Nathrah app and its companion list-sharing service are operated by Khaled ALmushali. This policy explains data handling in the app and shared-list pages. For support or privacy questions, contact khaledooou1@gmail.com.
Your notebook stays on your device
Nathrah stores notes, lists, original dictation text and text drafts in the app’s device storage. No account is required. Notebook content is not sent to the advertising provider. Apple device backups may include notebook data according to your settings.
Advertising and your choices
Ads start disabled, and the session in which you first save a note stays free of full-screen ads. If enabled later, a small banner may appear above the notebook and a full-screen ad may appear after a successful Save and organize, at most one full-screen ad every five minutes. The banner has its own space and does not cover note controls. Ads need an internet connection; failure to load never prevents saving or organization. We do not send Google your notes, dictation or search terms. When ads are requested, Google AdMob may process your IP address, device information, diagnostics and ad interactions to deliver and measure ads and prevent fraud. Google presents consent choices when required; you can change them through Ad privacy options in Settings when that entry is required. Notebook content is kept separate from ad requests.
Apple tracking permission
Tracking is optional, and its dialog is not opened automatically. In Settings, Choose tracking permission opens Apple’s dialog when the choice is still undetermined. If you allow it, Google AdMob may use your device’s advertising identifier and data across other companies’ apps and websites to measure ad performance, subject to Google’s consent choices as well. We request non-personalized ads whether you allow or decline tracking; non-personalized ads can use identifiers for measurement and frequency capping. If you decline or iOS restricts permission, Google AdMob does not send the advertising identifier. We do not send notebook content for advertising. Notes, dictation and local AI remain available when you decline. Settings shows the actual permission reported by Apple. You can change your choice in device Settings; Google’s choices do not override it.
Service configuration
We use Google Firebase Remote Config to update the ad activation setting. It can connect while ads are disabled and uses an app installation ID and technical data such as country, language, time zone, OS version and app identity to deliver configuration. Its provider may receive your IP address during connection. Requests contain no notebook, dictation or search content. Firebase Analytics and Crashlytics are not included. Failed configuration requests do not prevent note taking; ads remain disabled without valid service authorization.
Dictation and permissions
Microphone and speech permissions are requested when you start dictation. The app uses on-device recognition in your selected language, Arabic or English, when your device supports it. Audio is not sent to an AI service and original audio recordings are not saved. A local text draft remains until you save or delete it. Unsaved drafts may be cleared after 90 days without an update; save important words as a note. Dictation pauses when you leave the app; returning alone does not restart the microphone. You can change permissions in iOS Settings.
Local AI and downloading
Local AI files are an optional download that requires internet access and storage space. Files come from Hugging Face, which may receive your IP address and connection data needed to deliver them. Download requests do not contain your notes or dictation. Text is processed on your device. iOS manages background downloading while you switch apps or lock your screen. Force-quitting from the app switcher stops the transfer until you open the app again. Network, power or storage conditions may delay a download. You can pause or resume it in the download window.
Results and notifications
Dictation and local AI can make mistakes; review results before relying on them. Original dictation text stays available so you can check and edit the note. Completion notifications are optional and contain a short message without your note’s contents. Notification permission is requested only when you enable this option.
Sharing is your choice
Your notebook is not shared automatically. Sharing text or a file sends its contents to the app or person you choose, whose policies apply to that copy. An offline copy contains the list title, text, items and marks at export in a readable format. Recipients need Nathrah to interact with the file. Their marks are stored on their device and do not sync with the sender’s notebook or other recipients.
Sharing a link
When you choose a link, the app encrypts the list title, text and items before sending them to the sharing service. The decryption key stays in the link fragment and is used by the recipient’s browser. The service stores encrypted content, random list and item identifiers, purchased marks, timestamps and a hash of the access token, without storing readable list content. The hosting provider may receive connection data such as an IP address. The sharing page includes no analytics tools. Anyone holding the link can read the list and change its marks. Messaging apps or browsers may retain the link and list title you choose to share. Forwarding the link gives the new recipient the same access.
Using a link offline
Creating a link and opening it for the first time require internet access. After offline preparation completes, the browser retains a local copy and pending changes. Others see those changes after successful synchronization while the list is open or when you reopen it online. Clearing browser data removes the local copy and unsynchronized changes. Messaging previews may not retain list data; offline use depends on the browser and successful preparation.
Deletion and retention
You can delete notes or a dictation draft in the app. Saved notes remain until you delete them. Unsaved dictation drafts may be cleared after 90 days without an update and are excluded from backups. Apple backups of saved notes may remain according to your settings. Deleting a note or the app does not revoke links already sent or remove files and browser copies retained by others. The sharing service retains encrypted content and shared marks. There is currently no interface to revoke a link or delete its service copy. Do not share a link to content you want to keep exclusively private.
Service providers and data transfers
We use Google for app configuration and advertising when enabled, Hugging Face to download local AI files, and Sites to host shared-list pages. These services may receive the connection and technical data described above and may process it outside your country under their policies. Your notes and dictation are not sent to Google or Hugging Face. The sharing server cannot read encrypted list content without its key; anyone with the complete link can open it. Provider privacy links are included on this page.
Privacy requests
You can delete local notes and drafts in the app, manage microphone, speech and tracking permissions in Apple device Settings, and change Google choices through Ad privacy options when that entry is required. To ask about sharing-service data or request access, correction or deletion under applicable law, contact khaledooou1@gmail.com. We may need limited information to verify your request and locate the relevant record. Do not send private note text, a list decryption key or a complete list link in a support message. There is currently no in-app button to revoke a published link; deleting a local note does not revoke access to it.
Service retention periods
Shared links currently have no automatic expiry. The sharing service retains encrypted content, random identifiers, marks and timestamps until its record is removed from the service. Removal does not erase copies retained by recipients. Firebase retains the app installation identifier under Google’s policy, which may persist until deletion is requested from that service. Advertising, download and hosting providers retain technical data according to their own policies. See the linked policies or contact us about a specific request.
Policy updates
We may update this policy when the app, its services or legal requirements change. The date at the top identifies the latest update. This policy does not override consent choices or system permissions.
Download provider privacy · Advertising provider privacy · Configuration service privacy
Khaled ALmushali