Privacy Policy

1. What we collect

The app collects nothing by default. It requires no account or sign-up, and we use no analytics SDKs, advertising networks, or tracking identifiers of any kind. We never sell anything about you, and we build no profile of you.

If you turn on optional multi-device sync, your devices exchange data through a relay we operate. What that relay stores is described in section 4.

2. Data stored on your device

Everything the app remembers is stored locally on your device, under your control:

• Your reading position, settings, and chosen reciter
• Bookmarks, personal notes, and colour tags
• Memorization program, review schedule, streaks, and milestones
• Weak-spot history, the verses where you tend to stumble
• Optional recitation recordings you make during self-testing

This data is never sent anywhere unless you explicitly enable multi-device sync (see below).

3. Recitation checking

Your recitation audio never reaches us. The app has no way to send it to us, and the recordings you choose to keep are written to your device’s own storage and stay there.

Where the live, word-by-word listening happens depends on the device you are using:

• iPhone and iPad: on your device by default. The app asks iOS for on-device recognition only, and the audio never leaves the device. If your device cannot recognise Arabic without the network, the app does not listen anyway: it shows you how to add the Arabic dictation language (recommended, and just as accurate) and offers you the choice of using Apple’s online speech recognition instead. That choice is yours, it is off until you make it, it is shown on screen for as long as such a session is running, and you can turn it back off at any time in Settings. Only if you turn it on, and only when your device has no Arabic of its own, is your recitation audio sent to Apple to be transcribed, under Apple’s privacy policy rather than ours.
• Android: through your phone’s own speech recognition service, which on most phones is Google’s. Depending on your device and on the language packs installed, that service may send the audio to its provider to transcribe it, under that provider’s privacy policy rather than ours. Installing the offline Arabic language pack in your Android settings keeps the listening on the device.

In every case the audio is used only to follow along with the verse in real time, and it is never uploaded to us or to anyone else on our behalf.

4. Optional multi-device sync

Sync is off by default. If you turn it on, your bookmarks, settings, and progress are transmitted to a relay we operate over encrypted connections (HTTPS / WSS). You pair your devices with a short share code that you create, control, and can revoke at any time. A read-only “monitor” mode lets a parent follow a child’s progress through the same mechanism.

Sync payloads are encrypted on your device before transmission. Today the encryption key is derived from your share code, and our relay stores that code in order to route pairing requests, so we are technically able to derive the key. We do not do so, and we are changing the design so that we cannot. Until that change ships we would rather tell you this plainly than describe the current design as end-to-end encrypted.

What the relay holds while sync is on:

• The identifier of your sync room, and the fact that the room exists.
• Your share code, which the app builds from the profile name you chose plus four digits, and that same profile name as the label of each linked device.
• How many devices are linked, and each one’s role (owner or monitor).
• A random identifier generated per app install for each device, and when that device was last seen. It is never derived from your phone’s hardware.
• Payload sizes, message counts, version numbers, and timing.
• Your IP address and connection metadata, as with any service behind Cloudflare.
• Per sync room, one snapshot plus the most recent changes (up to 2,000).

None of this is shared with any third party, used for advertising or analytics, or used to build a profile of you. Unlinking a device releases the share code and removes the key from that device.

5. Network & downloads

The app reaches the network only for these purposes:

• Reciter audio is downloaded on demand from our own audio mirror (a server we operate on Cloudflare), falling back to the original providers (EveryAyah.com or quranpedia’s CDN) only if the mirror is unreachable.
• An optional offline speech model for recitation checking is downloaded once, on demand, and stored locally.
• Optional sync exchanges your encrypted data between your devices (see section 4).
• Word-analysis list (Android, English or French interface): at most once a day, when you open a word’s details, the app downloads a small file (a few kilobytes) from our own website that says which words have an analysis page. The request carries no account, cookie or identifier and nothing about what you read. As with any request to a site behind Cloudflare, your IP address and the request time are processed to deliver it.
• Analyze with Kalima (optional button on some words): if you tap it, kalima.chat opens (in your browser, or in the Kalima app if you have it), a separate paid service by the same developer, with the word you tapped. Nothing is sent unless you tap, and Kalima’s own privacy policy applies from there.

These requests are subject to the providers’ own infrastructure. They carry no account or advertising identifier from the app.

6. Permissions

• Internet: downloading reciter audio, the speech model, the word-analysis list, and optional sync.
• Microphone: listening to your recitation while you check it, and recording it when you ask for that (see section 3).
• Notifications: daily Hifz reminders (optional, fully user-controlled).
• Vibration: haptic feedback on interactions.

The app intentionally requests no location, contacts, storage-wide, or exact-alarm permissions, and declares no advertising or tracking permissions.

7. This website

This website is served from Cloudflare’s network. Standard, transient web-server logs (such as IP address and request time) may be processed by Cloudflare to deliver and protect the site; we do not use cookies, analytics, or advertising trackers on these pages.

There is no contact form or sign-up. If you email us, we use your message and your address solely to reply to you, and we never sell or share them with third parties.

8. Children’s privacy

The app is suitable for all ages and is safe for children: it contains no ads, no chat, and no user-generated content sharing. As it is installed, with sync off, it collects nothing at all, from children or from anyone else. If a parent turns sync on, what the relay holds is listed in section 4, and none of it is used for advertising, analytics, or profiling.

9. Data retention & deletion

Because your data lives on your device, you are always in control. Clearing the app’s data or uninstalling the app permanently deletes everything stored locally. If you used sync, you can revoke your share code to stop sharing between devices. Write to us if you would like the relay’s copy of your sync room removed as well, and please do not include your share code in that message. To have any email you have sent us deleted, just write to us and we will remove it.

10. Changes & contact

We may update this policy as the app evolves. Material changes will be reflected here with a new “last updated” date. For any question about your privacy, or to request deletion of an email you have sent us, write to us: