Mohallah app privacy policy
Effective date: 9 September 2026
This policy covers the Mohallah app for iPad. The Mohallah website has its own, separate privacy policy.
The short version
Mohallah is made for children. It does not collect personal information from anyone. Everything the app stores stays on your iPad. The app has no account, no server, no internet connection of its own, no advertising, and no analytics. You can delete everything from within the app, and deletion is permanent.
Who we are
Mohallah is made by Mangla & Co LLC, an independent studio in Virginia. You can reach us about privacy at privacy@playmohallah.com.
What the app stores on your iPad
When a parent sets up the app, it stores the following on the iPad, and only there:
- The household name the parent chooses.
- For each child: a chosen display name, an age range (four and under, five to six, seven to nine, or ten to eleven), a profile picture chosen from the app's own built-in set, and, if the parent turns it on, an optional four-digit profile PIN that a child uses to pick their own profile.
- The parent's settings: which games each child may play, and whether the opening phrase is shown.
- Play history: which game a child played, when they last played it, how many times, and their best result.
- Achievements and rewards earned in the app.
- Saved game progress. In this release that is each game's best run for each age range: for Patang, the furthest distance and sky stage reached; for Tides of Kilwa, the best score, the tide reached, and the number of fish caught; for Katak Sawah, the best score; for Threads of Tabriz, the highest cloth reached, the best weave and fastest time for each cloth, which cloth the child is currently on and their time so far, and when their last run ended. Tides of Kilwa, Katak Sawah and Threads of Tabriz also each remember that their short opening demonstration has been seen.
- A random identifier created when the app is first set up. It is used only to tie the Parent Access PIN to this installation. It is not sent anywhere and does not identify a person or the iPad.
- A record of how many times the Parent Access PIN was entered incorrectly, and when it may be tried again.
The app never asks for, and has nowhere to store, a legal name, a date of birth, a gender, an email address, a phone number, a photo from your camera or photo library, your location, or your contacts.
The iPad's own system log
Like any app, Mohallah writes a few technical messages to your iPad's own system log. An example is a numeric error code if the app cannot save the Parent Access verifier properly. These messages record what kind of event happened and, where relevant, the error code your iPad returned. They never contain a household or child's name, a PIN, the identifiers the app uses internally, or saved game progress. They stay in your iPad's own system log, the app cannot read them back, and nothing sends them anywhere.
What never leaves your iPad
Nothing. The app makes no connection to the internet. It has no Mohallah account, no cloud sync, no server, no analytics, no crash reporting, no advertising, no push notifications, and no third-party software development kits inside it. The only two links in the app are in the parent area, behind the Parent Access PIN: an email address, which opens your Mail app so you can write to us, and a link to this policy, which opens in your browser. The app itself sends nothing.
Your iPad's own backup settings (iCloud Backup, or a backup to a computer) decide whether the app's data is included in a backup of your iPad. That backup is between you and Apple or your computer. Mohallah does not receive it and cannot see it.
The Parent Access PIN, Face ID, and your device passcode
The parent area is protected by a six-digit Parent Access PIN. The app never stores the PIN itself. It stores only a one-way verifier, derived from the PIN, in the iPad's Keychain. That verifier is tied to this iPad, is never synced, and is only usable while the iPad has a device passcode. Nobody, including us, can recover a forgotten PIN from it.
If a parent forgets the PIN, the app asks Apple to confirm that the person holding the iPad can unlock it, using Face ID, Touch ID, or the device passcode. Apple tells the app only whether that succeeded. The app never sees your face, fingerprint, or passcode, and never stores any of them. Passing this check lets the parent set a new PIN or reset the app's data; it does not reveal the old PIN. It confirms control of the iPad, not who the person is or that they are the child's guardian.
The optional child profile PIN is a convenience for choosing a profile. It does not protect anything and cannot open the parent area.
Deleting information
A parent can, from the parent area:
- Delete a child's profile. This permanently removes that child's display name, age range, profile picture, profile PIN, settings, play history, achievements, rewards, and saved game progress from the iPad.
- Reset all Mohallah data. This permanently removes the household, every child profile, all settings, history, achievements, rewards, saved progress, the Parent Access PIN verifier, and the app's other local state. The app returns to first-time setup.
Both actions require the Parent Access PIN to be entered again at that moment. If the PIN has been forgotten, a full reset is still possible after Apple confirms the person can unlock the iPad, as described above. Deletion is permanent. Because the app keeps no copy anywhere else, nothing can be restored by us afterwards.
Children
Mohallah is designed for children. The app collects no personal information from children or from anyone else. Children cannot send messages, share anything, make purchases, or open a link from inside the app. The only thing a child can type is a search word to find a game, and that is not saved.
Changes to this policy
If the app changes in a way that changes what it stores or where, we will update this policy at the same address and change the effective date. The address of this policy does not change.
Contact
privacy@playmohallah.com