Privacy policy

1. Who we are

Commerce Zoom, a trading name of Abu Haashir Ltd (London, England), is responsible for the personal information Word Quran uses (the data controller). Email support@wordquran.app for support, privacy questions or deletion requests.

This policy covers the Word Quran app and website. We use information to run your lessons, save your progress and keep accounts safe. App stores handle your payment details.

2. Learners aged 13 to 17

Word Quran is for ages 13 and over. If you are 13 to 17, ask a parent or guardian to help you read this policy and decide what to share. Please do not put your school, address or other private details in your name or in reports.

We do not ask for your date of birth. Sharing your level and when you are online is off until you turn it on. Friends are added by invitation, never from your phone contacts, and there is no public chat. Ads, where shown, are requested with Google's settings for children and under-age users switched on.

For optional uses that need consent, the age at which you can give your own consent is 13 in the UK and varies from 13 to 16 in the EU. Below the age that applies to you, a parent or guardian must give permission before that use starts. Accepting the Terms does not provide that permission. Contact support about an account belonging to someone under 13. We check deletion requests and a parent's authority while protecting the learner's privacy.

3. Your account and sign-in

We keep an account ID, your chosen name and avatar, your verified email if you use email codes, Google sign-in or add a recovery address, your settings and your sign-in sessions. Settings include language, goals, reciter, audio, reminders, time zone and which event notices you have already seen. Signed-out learners keep the seen-notice choice on their phone. Each sign-in session also records the IP address and the app or browser details from when it started.

Passkeys use your device's own security. We keep only the public part of a passkey, never the private key, fingerprint, face scan or device PIN. Sign-in details on your device are kept in its secure storage.

If you choose email codes, we use your address to send a code, check that you control the address, and create or sign you into your account. A verified recovery email or the verified email supplied by Google can also sign you into the same account. Cloudflare sends these emails, and codes expire after five minutes. We keep limited security records to prevent misuse of code sending. Deleting your account removes your email from active account data; backups and security records follow section 12.

If you sign in with Google, we receive your Google account ID and verified email address, not your contacts or photos, and we do not keep Google's sign-in tokens. Sign in with Apple will be offered when Word Quran is available on iPhone.

When you contact support, we receive your message, your contact details and anything you choose to attach. Please never send passwords, codes or full card details.

4. Learning, Play and friends

For signed-in learners we save practice answers, learning and review progress, saved words, study sets and their names, preferences, study activity and rewards. Play records include games and results, invitations, friends, companion names, pearls and their history, gifts and the looks you own.

Friends see your name, avatar and what is needed to play. They see your level and when you are online only if you turn that on. Blocking someone removes the friendship, pending invitations and your games together, for both of you; unblocking does not bring them back.

A report contains both account IDs, the reason and category, any note you add, the reported name, the time and its status. Only our safety reviewers can read it. The reported learner cannot see the report or who sent it. A report does not automatically punish or block anyone.

Events and weekly goals save your participation, goals, time zone, active days, progress, stamps and any reading or listening you confirm. A shared event figure combines everyone's totals and shows no names or ranks. Confirmations are what you tell us. Word Quran does not record your voice.

5. Purchases

When you buy Premium, we keep the store and product IDs, proof of purchase, its status and expiry, and any refund or reversal. RevenueCat receives a random customer ID so it can confirm purchases; we do not send it your learning history, name or email. We check each purchase with the store before turning on Premium.

Google Play handles your payment details, and Apple will when Word Quran is on iPhone. We never receive your full card number. Deleting your account does not cancel a subscription. A small purchase record remains after deletion so that a purchase cannot move to another account.

6. Technical information and errors

Cloudflare receives connection details, including your IP address and the time of each request, to deliver and protect the service. Security checks use limited request and device information. For support, we keep your account's last app version, platform and last-seen time; these are deleted with your account.

Google's Firebase App Check and Play Integrity check that requests come from a genuine copy of the app on a genuine device. They are security checks, not advertising IDs.

When the app hits an error, Sentry receives the error type, where in the app it happened, the time and the app version, along with connection details. We remove error messages, account details, learning text, screenshots and activity trails before sending. Session replay and performance profiling are off.

7. Counting installs from our links

When you install Word Quran from one of our links, Google Play tells the app which link it was. The app sends that link's campaign details, including the referrer text and any click ID in the link, to our own servers with a random installation ID and the time. If you sign in, we link this record to your account so we can connect those counts. We count installs, first completed lessons, and subscription starts and renewals; subscription counts come only from confirmed store purchases.

We do this under our legitimate interests in knowing which links bring learners to Word Quran and help them learn. This campaign counting does not use your device's advertising ID or an advertising network's software. It has no separate setting. Email support@wordquran.app to object or to ask us to delete this information. Turning off usage statistics (section 8) does not affect it.

We do not currently send these campaign records or conversion counts to advertising networks such as Meta, Google Ads or TikTok. AdMob ads have their own data handling, described in section 9. Before sending campaign records to these networks, we will update this policy and offer any choices the law requires.

8. Usage statistics

Firebase counts screen views, lessons, reviews and Play activity using word and lesson IDs, counts and score ranges, never your answers or exact scores. It also receives your app language and app version. Firebase uses a random ID for each app installation and can add session, engagement, install and update events, device and operating system, approximate region and store events. This information is not fully anonymous.

We never send Firebase your account ID, name, email, anything you type, or Quran or search text. Advertising IDs, ad personalisation, Google signals and detailed location and device data are all off. Firebase keeps event data for two months and user data for 14 months; summary reports may last longer.

Where you live decides when collection starts:

• EU and EEA, and places with the same rules: usage statistics are not collected until you agree.
• UK: collection starts after a short notice in the app that shows you how to turn it off.
• Elsewhere: collection is on by default.

The app works out your region from your phone's time zone and region setting, and uses the stricter rule if they differ.

You can turn statistics off at any time with Share usage statistics in Preferences. This stops collection and resets the statistics ID on that device. It does not erase what Google has already received. The choice applies to that device only. We rely on your consent where the law requires it, and otherwise on our legitimate interests in improving Word Quran. Lessons never depend on sharing statistics.

9. Ads, reminders and your device

Word Quran may show ads, through Google AdMob, in two places only:

• a sponsored page you can skip straight away, after you leave a finished lesson for Home;
• an ad you can choose to watch in the Bazaar for a fixed number of pearls, up to a daily limit.

Ads never appear in lessons, ayahs, listening, quizzes, review or results, and Premium removes them.

Outside the EU/EEA, the UK and Switzerland, Google may personalise these ads using your device's advertising ID and your activity in apps; you can turn this off or reset the ID in your phone's settings (on Android: Settings → Privacy → Ads). In the EU/EEA, the UK and Switzerland, we ask for non-personalised ads only. Either way, ad software can process your IP address, approximate location, device advertising or app IDs, which ads you saw or tapped, and technical data. We never share your religious learning or precise location for ads. For an ad in the Bazaar, we check Google's signed confirmation before adding pearls.

We use Google's privacy service to check which rules apply where you are. In the EU/EEA, the UK and Switzerland its under-age setting is switched on, so no consent prompt is shown and ads stay non-personalised. Use Google's privacy options where they are offered. Non-personalised ads still involve data processing; where the law requires consent, that permission is needed before the relevant processing. We use limited ad-reward records to prevent fraud, under our legitimate interests.

Learning and event reminders are optional notifications scheduled on your phone, rather than sent remotely. Event reminders are off until you choose them on the event page: one when the event opens and one on its last day, at most two per event. Your learning reminder choices can be saved to your account. Turning a reminder off cancels it. Notification text may appear on your lock screen; your phone settings control who can see it.

Your phone stores your preferences, progress before you sign in, your statistics choice, downloaded content and secure sign-in details. Signing out removes your account access from the phone. Removing downloads or the app does not delete your account or cancel a subscription.

10. Why we use information

When we rely on legitimate interests, we weigh your rights, especially the interests of younger learners. You can object at any time by emailing support. Accepting our Terms is not consent to other uses.

We do not ask you to state your faith. Learning activity or messages could nevertheless reveal religious beliefs. Please avoid putting beliefs, health details or other sensitive personal information in names, reports or support messages unless needed to explain the problem. We never use this information for ads or to build profiles based on belief. We do not sell your personal information.

11. Who receives information

• Cloudflare hosts our website and servers, stores account data and files, and sends sign-in and recovery emails. Your own email provider also handles those emails.
• Google provides Google sign-in, Firebase statistics, security checks, AdMob ads and Google Play purchases.
• RevenueCat helps manage purchases.
• Sentry receives limited error reports.
• Apple will provide sign-in and purchases when Word Quran is on iPhone.

The Quran Foundation provides Quran content services. When you play audio, the host that serves the recording receives connection details. Other learners see only what section 4 describes. Our support and safety reviewers see what they need for your request or report. We disclose information when the law requires it.

Cloudflare, RevenueCat and Sentry, and Google for services it runs on our behalf, process information to provide those services. Stores, sign-in providers and ad services also have their own privacy responsibilities and policies.

Providers may process information outside the UK or EEA, including in the United States. Transfers require a recognised level of protection or approved contractual safeguards, such as EU standard contractual clauses and the UK addendum or international data transfer agreement. Email support to ask which safeguard applies to your information and how to obtain a copy.

12. How long we keep information

To delete your account, go to Profile → Privacy & data → Delete account, or email support with "Delete my Word Quran account". You may need to sign in again. We confirm the account is yours through a verified sign-in method; a name, screenshot or account ID alone is not enough.

Deletion removes your profile, learning progress, saved words, rewards, owned looks, linked campaign records, email address, sign-in methods and sessions, and cancels pending data downloads. Some files and shared game records are cleaned up shortly afterwards. Another player may keep their own game result. A small deletion record stops a backup from bringing the account back; purchase records kept after deletion do not include your learning.

Deleting your account does not erase records that app stores or other providers hold for themselves, and resetting statistics on a device is separate. Contact support for help with those. Deleting your account does not cancel a subscription: cancel through Google Play, or the App Store when available.

13. Your rights, choices and security

Use Privacy & data → Download my data to get a copy of your learning data, including reports you have sent and the install-link records tied to your account (but not other people's information or reports about you). Email support for anything it does not include.

Depending on the law where you live, you can ask to see, correct, delete, move or restrict your information, object to uses based on legitimate interests, and withdraw consent. Withdrawing consent does not affect what happened before. We may ask you to show the account is yours, and we will explain any legal reason we cannot meet part of a request. We normally respond free of charge within one month. If the law allows more time for a complex request, we will tell you why and when to expect a response.

Use Preferences for statistics and learning reminders, the event page for event reminders, friend settings for what friends see, and your phone's settings for notifications. Use Google's ad privacy options where offered. Email support to object to counting installs from our links.

We use encrypted connections, secure storage on your phone and restricted access to our servers, and deleting an account needs a fresh sign-in. No service can promise perfect security; if something goes wrong, we will tell affected people and the authorities when the law requires.

The app uses fixed rules to choose reviews, calculate progress and give Play rewards, and the store decides whether a purchase is confirmed. Security rules may refuse suspicious requests. Reports never lead to automatic action against anyone. None of these rules judge faith or spiritual worth. Contact support if a rule has wrongly affected your account or a purchase.

14. Website, changes and complaints

Our website has no visitor analytics or advertising cookies. Cloudflare receives network information to deliver and protect it. Linked sites have their own policies.

We will keep the date and version of this policy up to date, and tell you about significant changes where the law requires. Email support@wordquran.app with a privacy complaint. You can also complain to the UK Information Commissioner's Office or the data protection authority where you live.