Privacy policy

Family Quran is built so that reading the Quran asks nothing of you. This policy says exactly what stays on your phone, what reaches our servers, and why — in the plainest language we can manage.

Last updated: 31 October 2026

The short version

You do not need an account to read the Quran, to listen to it, to see prayer times or to practise memorisation. No permission is requested until a feature genuinely needs it, and declining any of them costs you only that feature.

We never sell your data, and there is no advertising in the app.
Your own recitation practice is never recorded: speech recognition runs on your device. The one exception is a live Halaqa or Tasmee' call that a teacher chooses to record — everyone in it is told while it happens, and the recording is deleted after 30 days.
Your location never leaves your device — prayer times and the Qibla are worked out on it. Usage counts carry a country, and it comes from your IP address, not from your location.
Your reading progress, bookmarks, notes and memorisation records are stored on your device.
What reaches our servers reaches them only because a family circle needs it — and only if you join one.
You can delete your account, and this device's data with it, from inside the app.

What stays on your device

Most of what the app knows about you never leaves the phone it is on. We cannot read any of it, and none of it is backed up to us.

Where you are in the mushaf, and every page you have read.
Bookmarks, notes and the verses you have saved.
Your memorisation records — which surahs are done and which are in progress.
Your tasbih counts, fasting record and khatm plan.
Your approximate location, used to calculate prayer times and the Qibla on the device.
Your settings: theme, page colour, type size, language, reciter and notification preferences.
Recitations you have downloaded for offline listening.

What reaches our servers

The app talks to our servers for one reason: things that involve other people. If you never join a family circle, the list below is almost empty.

A device account is created automatically the first time the app needs one. It is an identifier generated on your phone — not your name, not your email and not anything we can trace to you on its own. It exists so that a circle can tell one member from another.

A device account identifier, created automatically and not linked to you.
A display name, if you set one — so the rest of your circle knows who wrote what.
An email address, only if you choose to link one to your profile.
Which circles you belong to, your daily page goal in each, and your progress against it — visible to the members of those circles and to nobody else.
Messages you send in a circle's chat, so they can be delivered to that circle.
Feedback you send us from inside the app, with the app version, platform and language, so we can place the report.
Usage events — which screens and buttons are opened. Never what you read, wrote, searched for or memorised.
A little context alongside each usage event, so those counts mean something: app version, platform and its version, interface language, theme, reading mode, whether you are in a circle, which reminders you have switched on, and the hour and weekday on your own clock.
An approximate country with those events — the two-letter code, worked out from your IP address in the same lookup that places prayer times when you have not granted location. Never a city, never coordinates.

Permissions, and why each one is asked for

Every permission below is optional. None of them is needed to read the Quran, and each is requested at the moment the feature that needs it is opened, not on first launch.

Location — prayer times and the Qibla direction, used while the app is open and calculated on the device. You can set a city by hand instead and never grant it.
Microphone — memorisation practice, and voice notes in a circle's chat. Recognition for memorisation runs on the device and no audio from it is recorded, stored or transmitted. A voice note is recorded only while you hold the recording open, and is sent to your circle only when you press send. In a live Halaqa or a Tasmee' call your voice is sent to the other people in it; if a teacher records the session, your voice is in the recording.
Photos — saving a verse or hadith card you created, and choosing a picture to send in a circle's chat. The app never browses your photo library: it receives only the pictures you pick yourself, through the system's own picker.
Camera — only if you choose to take a picture to send in a circle's chat.
Notifications — prayer, azkar, reading and circle reminders. Each type has its own switch.

Family circles and chat

A circle is the only part of the app where other people see anything about you, and you have to join one for that to be true. Inside a circle, members can see your display name, your daily goal and your progress against it, and anything you write in the chat.

Messages are stored on our servers so they can be delivered to the circle, and are filtered for profanity before they reach anyone. Any member can report a message or block another member; an administrator can remove a member from the circle. Reported messages are reviewed so that we can act on them.

Messages are not end-to-end encrypted. They are sent over an encrypted connection and stored on our servers, which means we are technically able to read them — and do so only to act on a report or where the law requires it. Please do not use the chat for anything you would not want stored.

Pictures and voice notes sent in a chat are stored with Cloudflare, our storage provider, and are shown to the circle through a web address that is long and random. Anyone who is given that address can open the file without signing in, so treat a picture or a voice note in a circle as you would a photograph you hand to the people in it: do not send what you would not want passed on. The file is deleted when you or an administrator delete the message, unless the message has been reported, in which case it is kept until the report has been reviewed, and in every case it is removed automatically after about four months at most.

A teacher can record a live Halaqa, a one-to-one Tasmee' call, or a recitation heard inside the Halaqa. Recordings are audio only and are made only when a teacher starts one: everyone in the room is shown, for as long as it runs, that it is being recorded and how long it is kept. A recording of the Halaqa can be played by the circle's members; a recording of a call or of a recitation can be played only by the circle's teachers and by the member it was with. Recordings are stored with Cloudflare in a private store with no public address, and are played through an address that works for ten minutes. Each one is deleted automatically after 30 days, and a teacher can delete it sooner. If you do not want to be recorded, leave the room before a recording starts, or when you are told that one has.

Children

The app is rated for everyone and is built to be used by children — that is much of the point of a family circle. It asks for no personal information, and a child using it outside a circle sends us nothing at all.

A child in a family circle can send and receive messages with the other members of that circle. We ask parents and teachers to be the administrator of any circle a child is in, to approve who joins it, and to know who its members are. An administrator can remove any member at any time.

A child in a circle can be heard in a live session or call, and if a teacher records it, the child's voice is in the recording. Parents who administer a circle should know when recording is used in it. A teacher can delete any recording at any time, and none is kept past 30 days.

How long anything is kept

Device account records and circle membership are kept while the account exists. Delete the account and they go with it.

Chat messages are kept so the circle's history stays readable, and are removed when the circle is deleted or when you delete your account, whichever comes first.

Pictures and voice notes are removed as soon as the message is deleted, and in any case no more than about four months after they were sent.

Recordings of live sessions and calls are deleted automatically 30 days after they were made, or sooner if a teacher deletes them.

Usage events are tied to the device account while it exists — that is how we can tell a hundred people opening a screen once from one person opening it a hundred times. Delete the account and they are detached from it, leaving counts that belong to nobody.

Anything stored only on your device is kept until you delete it or uninstall the app.

Your choices

You are in charge of all of the following without asking us for anything:

Decline any permission, and keep using everything else.
Leave a circle, or mute its chat and stay in it.
Unlink an email address you added.
Delete your account from Profile → Delete my account, with the option to erase this device's data at the same time.
Turn off any category of notification independently of the others.

Security

Traffic between the app and our servers is encrypted in transit. Access to the database is restricted to the systems that need it, and administrative access is protected by a secret held outside the application.

No system is perfect, and we will not claim otherwise. The best protection here is structural: the app collects almost nothing, so there is almost nothing to lose.

Changes to this policy

If this policy changes in a way that affects what we collect or who sees it, we will change the date at the top and say so in the app's release notes. Continuing to use the app after a change means the new version applies.

Contact

Questions about this policy, or a request about your data, go to [email protected]. Anything else about using the app goes to [email protected].