Privacy Policy

Quran Islam Pro is a privacy-first product. That is not a tagline added after the fact - it is the founding reason the app exists. Here is what that means in practice:

• Prayer times and Qibla direction are computed entirely on your device. Your location never leaves your phone for these features.
• Your Quran reading progress, dhikr counts, prayer logs, and habits are stored locally by default. Sync to the cloud is optional and requires you to create an account.
• We do not sell, rent, share, or broker your data. Not to advertisers. Not to governments. Not to anyone.
• There are no third-party advertising SDKs in the build. We enforce this as a dependency policy, audited before every release.
• You can export everything or delete your account at any time, directly from the app. No forms to fill, no waiting period beyond what the law requires.

We collect only what is necessary to provide the product. Every data point we hold has a specific, stated purpose. Here is the complete list.

Device identifier

A random UUID generated locally on first launch. Used to enforce the free-tier AI question limit (3 per day) without requiring an account. Never linked to a name, email, or location.

Account email

Only collected if you choose to create an account for multi-device sync. We use Supabase Auth. Your email is stored server-side, encrypted at rest. It is used only for authentication and critical service notifications.

Prayer logs and reading progress

Stored locally on your device. If you enable sync, a copy is stored on our servers keyed to your user ID, protected by row-level security so only your account can access it.

AI questions

Questions you send to Ask QIP are processed on our backend to generate an answer. We store a count per user for rate-limiting. The text of the question is not stored after the session ends unless you have conversation history enabled in settings.

Subscription status

We use RevenueCat on mobile to manage subscriptions. RevenueCat has its own privacy policy. We receive only whether your entitlement is active; we do not receive payment card details.

Crash reports

Anonymous crash data to identify and fix bugs. No personal data is included. This can be disabled in Privacy settings.

Background location (Mosque Mode, optional)

Only if you enable Mosque Mode on Android and grant background-location access after an in-app disclosure. The app registers an on-device geofence around a mosque location you save, so it can silence your phone when you arrive and restore your sound when you leave while the app is closed. The geofence and your mosque coordinates stay on your device, are never sent to our servers or any third party, and the feature is off by default. iOS does not use background location. You can revoke the permission any time in system settings.

For details on how AI questions are specifically handled, read how our AI works.

Several features handle data that is particularly private. Each is treated with extra care beyond the baseline.

• Women's health data (cycle tracking, hayd rules) is stored on-device only, encrypted with AES-256-GCM using a key held in the platform keychain (iOS Keychain / Android Keystore). It is excluded from OS-level automatic backup. It is never synced to any server. It is scoped by profile so it is not visible across Family Mode profiles.
• Mood entries and dream journal are encrypted on-device with the same mechanism and are also excluded from OS backup. No server copy exists.
• Islamic will (Wasiyyah) is stored locally, encrypted, and excluded from backup. It is never transmitted.
• Family Mode PIN is stored as a PBKDF2-HMAC-SHA256 hash with a per-install salt. The plaintext PIN is never stored anywhere.

• We do not sell your data to data brokers, advertisers, or any third party.
• We do not share your prayer times, Qibla usage, or location data with anyone.
• We do not use your data to build an advertising profile.
• We do not include any third-party advertising SDK, analytics SDK that sends data to an ad network, or location broker SDK in the app binary.
• We do not transmit your AI questions to any model provider for training purposes. Questions are sent to Google Gemini for inference only. Prompts and responses are processed under the paid tier data protection terms and are not used to train the provider's models.
• We do not retain the text of AI questions after the session ends unless you have explicitly enabled conversation history in Settings.

We use a small number of external services to operate the product. Each is chosen for minimal data exposure and governed by a data processing agreement.

• Supabase - Database and authentication. Your account data and synced prayer logs are stored here. Data is encrypted in transit and at rest. EU data residency available on request.
• Google Gemini - Powers the Ask QIP AI feature on the Paid Services (data not used to train) tier. Questions are sent for inference only. Prompts and responses are processed under the paid tier data protection terms and are not used to train the provider's models.
• RevenueCat - Manages in-app subscription entitlements on mobile. Receives your app-store anonymous subscriber ID and subscription status. No payment card data reaches us or RevenueCat.
• OpenStreetMap / Overpass API - Used for the mosque and halal place finder. Your search query (a typed city name or one-time coordinates) is sent to retrieve results. Nothing about your request is stored on our side after the response is returned.
• Google ML Kit - On-device machine-learning for barcode and ingredient-label scanning (Halal scanner) and the AR salah/pose features. Processing happens on your device, but Google's ML Kit mobile SDK may send diagnostic and usage data (device and app info, a per-install identifier, performance metrics) to Google. We do not receive this data and it is not used for advertising.
• Open Food Facts - The Halal scanner looks up a scanned product barcode against the Open Food Facts database. Only the barcode is sent; it is not linked to your identity.
• Resend - Sends the launch-notice and newsletter emails you ask for. Receives only the email address you submit, and only for the purpose you selected. Governed by its own privacy policy.
• Sign-in providers (Apple, Google) - If you choose Sign in with Apple or Google, that provider authenticates you and returns a token. We receive only the identity you consent to share. Used solely for authentication.
• Content delivery networks - Static assets (including some fonts) may be served over a CDN, which necessarily receives your IP address and user agent to deliver the file. No tracking identifier is attached.

You have the following rights regardless of where you live. We honour them without requiring you to prove jurisdiction.

• Access - Export all your data from Settings > Privacy Dashboard > Export My Data at any time.
• Deletion - Delete your account and all associated data from Settings > Privacy Dashboard > Delete Account. Local data is wiped immediately; server data is deleted within 30 days.
• Correction - Update any stored personal information from your account settings at any time.
• Portability - The data export produces a structured JSON file you can import into another service.
• Objection to processing - You can disable optional data collection (analytics, conversation history) from Settings at any time without losing core features.

The app includes a Kids Mode designed for children under 13. When Kids Mode is active, no account creation is permitted for that profile, no AI features are available, no external links are shown, and no data is transmitted. The Family Mode PIN is required to exit Kids Mode.

We do not knowingly collect personal data from children under 13 outside of Family Mode's locally-stored assignment data. If you believe a child has provided personal data through a channel we have not anticipated, contact us at privacy@quranislampro.com and we will delete it promptly.

When we make material changes, we will notify you through the app and update the date at the top of this page. Continuing to use the app after the effective date constitutes acceptance of the updated policy. If the changes are significant enough that you would not have chosen to use the app under the new terms, you can delete your account before the effective date and we will honour that choice.

Questions about this policy, data deletion requests, or formal GDPR requests can be sent to our privacy contact.

Email

privacy@quranislampro.com

Response time

Within 5 business days for routine queries; within 30 days for formal data requests.