Mohallah app privacy policy

Effective date: 19 October 2026

This policy covers the Mohallah app for iPad. The Mohallah website has its own, separate privacy policy.

The short version

Mohallah is made for children. It does not collect personal information from anyone. Everything the app stores stays on your iPad. The app has no account, no server, no internet connection of its own, no advertising, and no analytics. You can delete everything, and deletion is permanent.

Who we are

Mohallah is made by Mangla & Co LLC, an independent studio in Virginia. You can reach us about privacy at privacy@playmohallah.com.

What the app stores on your iPad

When a parent sets up the app, it stores the following on the iPad, and only there:

• The household name. New families are given "Our Mohallah"; families from earlier versions keep the name they chose.
• For each child: a display name (the first child starts as "Player 1" until changed), an age range (four and under, five to six, seven to nine, or ten to eleven), a profile picture chosen from the app's own built-in set, and, if the parent turns it on, an optional four-digit profile PIN that a child uses to pick their own profile.
• The parent's settings: which games each child may play, and whether Bismillah is shown before games.
• Play history: which game a child played, when they last played it, how many times, and their best result.
• Achievements and rewards earned in the app.
• Saved game progress, kept with each child's profile. For Patang, the furthest distance and sky stage reached; for Tides of Kilwa, the best score, the tide reached, and the number of fish caught; for Katak Sawah, the best score and which version of the rules it was set under; for Threads of Tabriz, the highest cloth reached, the best weave for each cloth, the fastest total time taken to reach each cloth, and which cloth the child is currently on with their time so far; for Thirsty Gardens, which puzzles have been solved and, for each puzzle, solved or not, how many times the water ran out and how many hints (up to two) were used; for Nova Rush, the best score, stars and light sparks, the total number of stars collected across all runs, how many runs have been played, a difficulty level the game adjusts to the child's play — with its best results at each level and how far the child has progressed towards the next one — and a separate best for its endless mode; and for Rickshaw Rush, the best time on the route, the time at each checkpoint, and a recording of that run — where the rickshaw was, which way it was facing and whether it was boosting, ten times a second, for up to five minutes.
• More about those last two, because they keep more than a score:
  • Rickshaw Rush keeps movement samples in memory during every run and saves them only when a child finishes the route with a new best time. It does this at every age; children of seven and over can also race against the saved run as a ghost. The recording is how the child drove in the game, saved with their profile. It holds no camera, microphone, location, room or device information. The five minutes is how much of a run is recorded, not how long it is kept: a saved recording stays until a faster run replaces it, or until the child's profile is deleted.
  • Nova Rush, while a run is paused, keeps a detailed snapshot of it: how far through it was, where the ship was and the score, hearts left and recovery timers, which sparks and trail pieces were collected or missed, streaks and near misses, which route was taken at each gate, how the challenge waves and the final stretch went, which achievements have already been reported, and the run's own length and the random pattern it was built from. An unfinished run is also summarised: the score, sparks collected, which act it reached, how long it lasted, why it stopped, and the difficulty level. Only one such snapshot is kept at a time: pausing another run replaces it, and finishing a run clears it.
• Tides of Kilwa, Katak Sawah, Threads of Tabriz and Nova Rush also each remember that their short demonstration has been seen.
• Whether the parent area is protected by a Parent PIN or by a grown-up question, and whether the app has already offered to add a Parent PIN.
• A random identifier created when the app is first set up. It is used only to tie the Parent PIN to this installation. It is not sent anywhere and does not identify a person or the iPad.
• A record of recent incorrect answers to the Parent PIN or the grown-up question, how many times the grown-up question has paused, and when it may be tried again. The answers themselves are never stored.

The app never asks for, and has nowhere to store, a legal name, a date of birth, a gender, an email address, a phone number, a photo from your camera or photo library, your location, or your contacts.

The iPad's own system log

Like any app, Mohallah writes a few technical messages to your iPad's own system log. An example is a numeric error code if the app cannot save the Parent PIN verifier properly. These messages record what kind of event happened and, where relevant, the error code your iPad returned. They never contain a household or child's name, a PIN, the identifiers the app uses internally, or saved game progress. They stay in your iPad's own system log, the app cannot read them back, and nothing sends them anywhere.

What never leaves your iPad

The app sends nothing. It makes no connection to the internet. It has no Mohallah account, no cloud sync, no server, no analytics, no crash reporting, no advertising, no push notifications, and no third-party analytics, advertising or tracking code inside it. The app links only to this policy and to our privacy email address, both in the parent area, behind the Parent PIN or, for a family without one, a grown-up question. The email address opens your Mail app so you can write to us, and the policy opens in your browser. The parent area's About page can also copy the app's version, build number and source-code revision, with each game's name and version, to the iPad's clipboard, so you can paste them into a message to us. This contains no family or profile information, and the copy stays on this iPad: it is not passed to your other Apple devices.

Your iPad's own backup settings (iCloud Backup, or a backup to a computer) decide whether the app's data is included in a backup of your iPad. That backup is between you and Apple or your computer. Mohallah does not receive it and cannot see it.

The parent area, the Parent PIN, Face ID, and your device passcode

A family can protect the parent area with a six-digit Parent PIN. The app never stores the PIN itself. It stores only a one-way verifier, derived from the PIN, in the iPad's Keychain. That verifier is tied to this iPad, is never synced, and is only usable while the iPad has a device passcode. Nobody, including us, can recover a forgotten PIN from it. From this version on, whenever a Parent PIN is set up or replaced, the app also keeps a small record in the Keychain that this has happened on this iPad, with the random identifier described above and the date. The record is made as setup begins, so it stays even if setup does not finish. It is never synced either.

A family that has not set a Parent PIN opens the parent area by answering a grown-up question — a multiplication problem, with a new one after each wrong answer and a pause after several. It is there to slow a young child down; it is not a lock, and anyone who can do the sum can open it. A Parent PIN is the stronger choice, and can be added at any time on an iPad that has a device passcode.

Some actions need more than the question. For a family without a Parent PIN, adding the first PIN, deleting a child's profile and resetting all data each ask Apple to confirm that the person holding the iPad can unlock it, using Face ID, Touch ID, or the device passcode. The same check lets a parent who has forgotten the Parent PIN set a new one. Apple tells the app only whether the check succeeded. The app never sees your face, fingerprint, or passcode, and never stores any of them. The check confirms control of the iPad, not who the person is or that they are the child's guardian. On an iPad without a device passcode, these three actions are not available, because there is no way to confirm who can unlock it.

One exception carries over from earlier versions. A family that began setting up Mohallah on an earlier version but never finished continues on that version's setup screen. Until setup is finished there, it can add children and choose its first Parent PIN without the grown-up question or Apple's confirmation, as it could before. Choosing that PIN still needs the iPad to have a device passcode.

The optional child profile PIN is a convenience for choosing a profile. It does not protect anything and cannot open the parent area.

Deleting information

A parent can, from the parent area:

• Delete a child's profile. This permanently removes that child's display name, age range, profile picture, profile PIN, settings, play history, achievements, rewards, and saved game progress from the iPad.
• Reset all Mohallah data. This permanently removes the household, every child profile, all settings, history, achievements, rewards, saved progress, the Parent PIN verifier, the record that a PIN was set, and the app's other local state. When the reset finishes, the app returns to first-time setup.

Both actions require the Parent PIN to be entered again at that moment or, for a family without one, Apple's confirmation that the person can unlock the iPad. If the Parent PIN has been forgotten, Apple's confirmation lets the parent set a new one, and a full reset is then possible from the parent area. On an iPad without a device passcode, a family without a Parent PIN cannot delete a profile or reset from inside the app; deleting the Mohallah app removes its data instead. Deletion is permanent. Because the app keeps no copy anywhere else, nothing can be restored by us afterwards.

If the iPad's own storage is failing, the app tells you so before a reset and cannot promise the deletion is complete: it may remove only part of the data and leave some of it on the iPad. It still asks Apple to confirm you can unlock the iPad before it tries. Whatever it does remove is gone for good.

Any reset removes your family's data first and the Parent PIN records last. If the app cannot remove those records, or cannot confirm they are gone, your family's data may already be deleted while the app stays locked until the reset can finish.

Deleting the Mohallah app removes its data with it, but the iPad may keep the small Keychain records about the Parent PIN described above. If a reinstalled app finds any of them, including a Parent PIN verifier left by an earlier version of Mohallah, it does not start as if it were new. Before anything else it asks you to confirm you can unlock the iPad, and then either to set a new Parent PIN or, under "Can't recover access?", to reset everything, which, once it finishes, removes those records and starts the app afresh. If it cannot read the records safely, it stays locked. Your family's earlier data is not brought back; it was deleted with the app. To remove the records before deleting the app, reset all Mohallah data from inside it first.

Children

Mohallah is designed for children. The app collects no personal information from children or from anyone else. Children cannot send messages, talk to anyone, or make purchases through the app. On the screens children play from, the only things anyone can type are a search word to find a game, which is not saved, and, if a parent has turned one on, a four-digit profile PIN. The screens that open or recover the parent area also accept a Parent PIN or an answer to the grown-up question; neither the PIN nor the answer is saved. Adding a child, editing child profiles, opening the links above and copying version details all sit behind the Parent PIN or, for a family without one, the grown-up question, except during the unfinished earlier-version setup described above. A child who can answer that question can do these things. Switching between players needs only that player's profile PIN, if one is set.

Changes to this policy

If the app changes in a way that changes what it stores or where, we will update this policy at the same address and change the effective date. The address of this policy does not change.

Contact

privacy@playmohallah.com