Cross-border Data Transfer Terms — Qalam Altalib

Effective date: 3 November 2026 · Data controller: Ali Al-Qarni, Saudi Arabia · ali5250111@gmail.com · +966555821452

Qalam Altalib is run from Saudi Arabia, but some of the services that make it work process data outside the Kingdom. These terms explain what is transferred, where, why and how it is protected, under the Personal Data Protection Law (PDPL) and the Regulation on Personal Data Transfer outside the Kingdom.

Where data goes

RecipientCountryDataPurpose
Supabase (server and database)South Korea (Seoul)Device UUID, quota counters, push token + language, cached answers (hash key, no photo)Run the service
Anthropic (Claude AI)United StatesThe cropped question photo and its OCR text, per requestProduce the solution
Google AdMobUnited States / globalAd identifiers where allowed, device and ad dataAds
Google Firebase Cloud MessagingUnited States / globalPush token, message contentDeliver notifications

Photos solved by Apple's on-device model, and your history, age group and settings, never leave your phone.

Legal basis

Safeguards

Minimal data

We send only what each service needs: the cropped photo and text for a solve, a random ID for counting, and a token for notifications. Children's ad requests are child-directed and non-personalised.

Your choices

See also the Privacy Policy and Data Breach Response Plan.