Privacy

In short

• You can use the whole app without an account. Then nothing leaves your device.
• If you sign in, we keep your email address and the items you choose to sync, so they follow you between devices.
• No ads. We never sell your data. There are no analytics or tracking in the apps or on this site.
• You can delete your account and all your synced data at any time.

Without an account

All the Quran text and translations are inside the app. Your bookmarks, progress and settings stay on your device.

The app uses your location on your device to work out prayer times and the qibla direction. Your location is never sent to our servers.

If you sign in

Sign-in is handled by Amazon Cognito. It stores:

• your email address (or the private relay address Apple gives you if you choose "Hide My Email");
• the link to your Apple or Google identity, if you sign in with one of them;
• a scrambled form of your password, if you sign in with email and password (we cannot read your password);
• whether your email address is verified.

We send email only to verify your address and to reset your password. We do not send marketing email.

The sign-in page for Apple, Google and email sign-in is hosted by Amazon Cognito (part of AWS) on an AWS domain.

You stay signed in on a device for up to 365 days.

Signing out keeps the data already on your device and returns the app to signed-out mode. It does not delete your account. When you sign in again, the app asks whether to add the data on the device to that account.

What is synced

When you are signed in, these items are copied to our servers. Each one carries a time stamp, so the newest change wins.

• your bookmarks;
• the ayahs you marked as read;
• your last reading position;
• your display settings (script, layout, whether Arabic, transliteration and translation are shown, the transliteration style, text sizes, theme and appearance);
• your prayer settings: calculation method, Asr method, the alert type for each prayer, reminder minutes, Hijri date adjustment, "same alert on all devices", and whether automatic location is on or off.

No location or coordinates are synced. Only the setting "automatic location on or off" is.

When you remove a bookmark or a read mark, we keep a small "removed" marker so the removal reaches your other devices. These markers are deleted with your account.

TV sign-in

To sign in on a TV, the TV shows a short code. The code works for 10 minutes. You enter it on your phone, tablet or Mac.

The TV then gets a token that lets it read your synced items. It is read-only, so a TV can never change your data. The token is valid for 365 days.

We keep TV tokens and the long device code only as hashes, a one-way scrambled form. We cannot read the original token back from what we store. The short code shown on the TV is stored as plain text and expires after 10 minutes.

Deleting your account

On a phone, tablet or Mac, open Profile → Account → Delete account. You can also ask with the contact form. See how to delete your account.

Deleting removes every synced item, every TV token and your Cognito account. Data kept only on your device is not touched by this.

For 2 hours afterwards we keep a small deletion marker. It holds your internal account ID, not your email address. It stops any old token from working. Expired records are then cleared automatically, usually within a few days.

Backups

Our database keeps point-in-time backups for 7 days. After that, deleted data is gone from the backups too.

Server logs

Server logs are kept for 14 days. They contain error types and short sign-in denial reasons (such as an expired token). They hold no email address, no personal data and none of your synced content.

We do not keep IP address logs for the API.

Contact form

The Support and Delete pages have a contact form. It sends the email address you enter and your message.

Your message is emailed to Shehzad Shaikh through Amazon SES in Asia Pacific (Mumbai). The app backend does not store it. Shehzad Shaikh keeps your email address only as long as needed to answer you.

The backend's logs for the form record only the form type, the outcome and a request ID, plus an error type if sending fails. They never contain the message text or any email address. They are kept for 14 days.

This website

This site sets no cookies and has no analytics or tracking tools. The only script is the one that sends the contact form, and it runs only on the Support and Delete pages. It is built to stay that way.

The site is hosted on shehzadshaikh.com, which writes standard access logs. They cover every page on shehzadshaikh.com, this one included, and record your IP address, the page you request (including any query string), the page that linked you here (the referrer), the date and time, and your browser user agent. Shehzad Shaikh keeps them for up to 90 days for security and troubleshooting. They are not used for analytics or tracking.

Who else handles data

Amazon Web Services runs our servers, in Asia Pacific (Mumbai) (ap-south-1). Apple or Google handle your sign-in only if you choose to sign in with them.

Contact form messages are delivered to Shehzad Shaikh's email inbox, which is run by that mailbox provider.

There are no ads, no ad networks, no analytics or tracking tools, and we never sell your data.

Children

The app is not aimed at young children and does not ask for their age. An account needs only an email address. If you think a child has made an account without a parent knowing, contact us and we will delete it.

Changes to this policy

If we change this policy, we will update the date at the top of this page.

Contact

Questions about your data? Use the contact form. We aim to reply within 7 days.