Tilawa
August 2026
This policy describes the data processed by the Tilawa application, the purposes pursued and the rights available to you under Regulation (EU) 2016/679 (GDPR).
Harmony Solutions — Salim El Rhalmani, sole trader registered in France, business ID (SIREN) 985 222 603, Rantigny (60290), France. Contact: contact@tilawa-app.com
Using Tilawa requires no registration, no email address and no password. The application generates a random technical identifier, stored on your device, which does not directly identify you. It is used solely to associate your translation credits with your installation.
• Anonymous technical identifier — performance of the contract (Art. 6(1)(b) GDPR).
• Identification audio excerpt (2 to 30 s) — performance of the contract; processed then deleted.
• Audio or video file submitted for translation — performance of the contract; processed then deleted.
• Purchase confirmations sent by the store — performance of the contract and accounting obligations (Art. 6(1)(b) and 6(1)(c)).
• Messages sent through “Report a problem”, application version and device model — legitimate interest in providing support (Art. 6(1)(f)).
• Technical crash reports — legitimate interest in keeping the service stable (Art. 6(1)(f)).
Audio and video files are deleted immediately after processing and are never archived. Translations produced are not stored on our servers. The credit balance and transaction history linked to the technical identifier are kept for as long as the service is provided; accounting records are then retained for ten years as required by the French Commercial Code. Support requests are kept for twelve months. Crash reports are kept for ninety days.
Bookmarks, favourites, memorisation progress, reading plan, language and reading preferences are stored locally on your device and are not sent to our servers. Uninstalling the application erases them permanently.
Google (Gemini) for recitation recognition; OpenAI for transcription and translation; Railway for application hosting; Apple and RevenueCat for purchase management; Sentry for crash reporting. These providers act as processors and are bound by confidentiality and security commitments.
Some processors are established in the United States. These transfers are governed by the European Commission’s standard contractual clauses and, where applicable, by EU-US Data Privacy Framework certification. The data transmitted is limited to what is strictly necessary for the requested processing and contains no directly identifying information.
Transactions are carried out by Apple (App Store) or Google (Play Store). No payment data passes through our servers and we never have access to it. We receive only a purchase confirmation linked to your technical identifier.
No advertising, no advertising trackers, no sale of data, no automated decision-making producing legal effects. No access to contacts, location or communications. Your photo library is read only when you explicitly select a file.
Traffic to our servers is encrypted in transit (TLS). Submitted files are processed in memory or in temporary storage, then deleted once processing ends, including on failure.
Tilawa is intended for a general audience and does not knowingly collect data relating to children under the age of fifteen. As no directly identifying data is collected, the application performs no profiling of underage users.
You have the rights of access, rectification, erasure, restriction, objection and portability. As there is no account, exercising these rights requires providing your technical identifier, available in the application. Requests may be sent to contact@tilawa-app.com and will be answered within one month. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
This policy may be updated to reflect changes to the service or to applicable law. The date of the latest update appears at the top of this document.
This English text is provided for convenience. In the event of any discrepancy, the French version prevails.