Learn Quran AI

Privacy Policy

This policy describes how Learn Quran AI handles information when you explore the app, create an account, buy AI Credits, or request AI feedback.

Effective: September 9, 2026

1. Information we handle

• Account information: your email address, password verifier, locale, and the stable account identifiers returned by Google or Apple when you use those sign-in methods. We do not use a client-supplied social-profile email or name as proof of identity.
• AI submissions: the recitation audio you deliberately submit, the selected surah and ayah, processing state, usage estimate, generated feedback, and report.
• Purchases and Credits: product, Store platform, Store environment, transaction identifier or protected digest, verification outcome, and an append-only balance ledger. We do not receive your full payment-card details from Apple or Google.
• Technical records: security events, failures, app version, device/platform category, and operational logs needed to protect and maintain the service.

You can browse guest-accessible content without an account. Audio recorded locally is not sent until you explicitly submit it for AI analysis.

2. How we use information

We use information to authenticate you, process your requested recitation analysis, meter and restore valid Credits, deliver reports, support password reset, prevent fraud and replay, troubleshoot faults, and comply with law. We do not sell personal information or use the service for behavioral advertising.

3. Audio lifecycle and AI providers

Submitted audio is encrypted in transit and retained only while a job is queued or processing. The service deletes the raw uploaded audio after the job reaches a terminal state—completed or failed—subject to a short operational retry window. Generated results, reports, ledger entries, and security records are retained separately as described below.

We use contracted infrastructure and AI processing providers, currently including Google Cloud and Vertex AI, to perform the analysis you request. We configure production processing so that submitted audio is not opted into shared or general model training. Providers may process data as our service providers under their applicable data-processing and security terms.

4. Retention

Results and reports remain linked to your account so you can review learning history until you delete the account or ask us to delete eligible data. Purchase ledger and receipt-verification records may be kept longer where needed for fraud prevention, financial reconciliation, Store obligations, disputes, or law. Backups and security logs expire on controlled schedules. When deletion cannot be immediate, we restrict data until it can be removed.

5. Sharing

We share only what is necessary with hosting, email-delivery, AI-processing, and security vendors; Apple or Google for Store verification and authentication; professional advisers; or authorities when lawfully required. We do not let these parties use your information for their own advertising.

6. Platform and environment separation

We associate a verified Store transaction with your authenticated account, its Store platform, and its Store environment. Apple/iOS and Google Play/Android balances remain separate, as do sandbox, internal-testing, TestFlight, and public production records. This separation protects real purchases and helps prevent forged or replayed receipts.

7. Security and choices

We use transport encryption, short-lived reset links, server-side provider-token verification, bounded retries, access controls, and receipt verification. No system is risk-free. Use a unique password and contact us if you suspect unauthorized access.

You may request access, correction, export, or deletion where applicable. You can also stop an upload before submission, decline optional permissions in device settings, and use guest features without signing in. The password-reset page contains no advertising or analytics scripts.

8. Children and international processing

A parent or guardian should supervise a child’s use where local law requires consent. Our service providers may process information in countries other than yours, protected by contractual and legal safeguards appropriate to the transfer.

9. Updates and contact

We may update this policy as the service changes. We will revise the effective date and provide additional notice when required. Privacy questions or requests: [email protected].