1. Information we handle
- Account information: your email address, password verifier, locale, and the stable account identifiers returned by Google or Apple when you use those sign-in methods. We do not use a client-supplied social-profile email or name as proof of identity.
- AI submissions: the recitation audio you deliberately submit, the selected surah and ayah, processing state, usage estimate, generated feedback, and report.
- Purchases and Credits: product, Store platform, Store environment, transaction identifier or protected digest, verification outcome, and an append-only balance ledger. We do not receive your full payment-card details from Apple or Google.
- Technical records: security events, failures, app version, device/platform category, and operational logs needed to protect and maintain the service.
You can browse guest-accessible content without an account. Audio recorded locally is not sent until you explicitly submit it for AI analysis.
When a chapter-name search needs AI suggestions, its search text and public chapter metadata may be sent to OpenRouter and a selected free AI provider to suggest chapter numbers. This search request does not include your account details or recordings. We do not retain the raw search text in our application database or logs. OpenRouter and the selected provider process the text under their applicable privacy terms.
2. How we use information
We use information to authenticate you, process your requested recitation analysis, meter and restore valid Credits, deliver reports, support password reset, prevent fraud and replay, troubleshoot faults, and comply with law. We do not sell personal information or use the service for behavioral advertising.
3. Audio lifecycle and AI providers
Submitted audio is encrypted in transit. Once a check is accepted, we keep its original recording with your account-linked history whether the AI check completes or fails. This lets you play the recording and submit that same audio for another check. A new check may use AI Credits; retrying the same accepted submission does not create another charge. Audio recorded only on your device remains there unless you submit it.
We use contracted infrastructure and AI processing providers, currently including Google Cloud and Vertex AI, to perform the analysis you request. We configure production processing so that submitted audio is not opted into shared or general model training. Providers may process data as our service providers under their applicable data-processing and security terms.
4. Retention
Submitted recordings, results, and reports remain linked to your account so you can review learning history until you delete the account or ask us to delete eligible data. Purchase ledger and receipt-verification records may be kept longer where needed for fraud prevention, financial reconciliation, Store obligations, disputes, or law. Backups and security logs expire on controlled schedules. When deletion cannot be immediate, we restrict data until it can be removed.
5. Sharing
We share only what is necessary with hosting, email-delivery, AI-processing, and security vendors; Apple or Google for Store verification and authentication; professional advisers; or authorities when lawfully required. We do not let these parties use your information for their own advertising.
6. Platform and environment separation
We associate a verified Store transaction with your authenticated account, its Store platform, and its Store environment. Apple/iOS and Google Play/Android balances remain separate, as do sandbox, internal-testing, TestFlight, and public production records. This separation protects real purchases and helps prevent forged or replayed receipts.
7. Security and choices
We use transport encryption, short-lived reset links, server-side provider-token verification, bounded retries, access controls, and receipt verification. No system is risk-free. Use a unique password and contact us if you suspect unauthorized access.
You may request access, correction, export, or deletion where applicable. You can also stop an upload before submission, decline optional permissions in device settings, and use guest features without signing in. The password-reset page contains no advertising or analytics scripts.
8. Children and international processing
A parent or guardian should supervise a child’s use where local law requires consent. Our service providers may process information in countries other than yours, protected by contractual and legal safeguards appropriate to the transfer.
9. Updates and contact
We may update this policy as the service changes. We will revise the effective date and provide additional notice when required. Privacy questions or requests: contact@learn-quran.co.