Privacy Policy & Data Protection Statement

Welcome to the official Privacy Policy documentation for Al Quran – القرآن الكريم (published by Edu Reminder Ltd., “we”, “our”, or “app”). We are deeply committed to protecting your personal information, respecting your digital privacy, and providing an authentic, secure, and peaceful Quran reading and listening environment.

1. Information Collection & Usage

You can use the core features of the app (reading the Quran, listening to recitations, accessing translations, and managing local bookmarks) completely anonymously without creating an account or providing personal details.

a. Google Account Authentication (Optional)

To enable seamless multi-device backup and cloud synchronization, Al Quran offers optional Google Sign-In:

• Information Received: When you authenticate via Google Sign-In, the app receives basic Google Identity profile information: your Display Name, Email Address, and Profile Photo URL.
• Purpose of Use: This information is used strictly on-device to personalize your user profile header and to authorize your device to interact directly with your personal Google Drive storage.
• Zero Credential Custody: Edu Reminder Ltd. operates no intermediary identity or backend authentication servers. We never receive, collect, or store your Google account password or login credentials. All authentication handshakes occur securely via official Google Play Services and OAuth 2.0 protocols.

b. Cloud Synchronization via Google Drive API

For users who choose to back up or sync their Quran reading journey across multiple devices:

• Direct Private Cloud Sync: The app integrates with official Google Drive REST APIs utilizing the dedicated DRIVE_APPDATA (hidden app data folder) and DRIVE_FILE scopes.
• What Data is Synchronized:

  • Personal Verse Notes & Annotations: Any reflections or commentary you attach to specific ayahs.
  • Bookmarks & Pinned Verses: Saved verses, favorite surahs, and pinned reading markers.
  • Reading Trackers: Current reading progress across Surah, Juz, Page, and Hizb trackers.
  • Memorization (Hifz) Goals: Memorization plans, target dates, and memorized ayah completion statuses.
  • Islamic Book Reading States: Progress markers and page states for downloaded public Islamic books.
  • Custom Preferences: Default reciter selections, Arabic font choices, audio repeat settings, and theme configurations.
• Storage Location & Privacy: All synchronized data is compiled into a private data bundle and uploaded directly into your personal Google Drive's hidden appDataFolder. This folder is restricted and accessible only by the Al Quran app on your authorized devices.
• Zero Intermediary Server Access: Edu Reminder Ltd. operates no relay or storage servers. We cannot view, access, parse, share, or sell any of your synced files or reading habits stored in your Google Drive.

c. Public Content Delivery & Islamic Media (Supabase CDN)

To deliver high-fidelity Islamic content efficiently:

• Read-Only Content Distribution: The app connects to Supabase Storage strictly as a read-only Content Delivery Network (CDN) to fetch verified Islamic books (PDFs), Mushaf scripts, translations, and Tafseer metadata.
• No User Data Sent: No user-generated content, personal verse notes, reading logs, or account identifiers are ever transmitted or saved to Supabase.
• Audio Recitations: Quran recitations by world-renowned Qaris are streamed and cached directly from verified, public Islamic audio distribution networks (e.g., EveryAyah and Quran.com servers). No personal data is transmitted during audio streaming or downloading.

d. Diagnostics & App Reliability (Firebase Crashlytics)

To maintain stability and promptly resolve software issues, we integrate Google Firebase Crashlytics:

• Crash Diagnostics: In the rare event of an unexpected crash or system exception, Crashlytics transmits an automated technical report containing the stack trace, device model, operating system version, and system state at the time of the error.
• No Personal or Spiritual Content: Crashlytics payloads are strictly technical and never contain user names, emails, verse notes, Quran reading history, or personal identifiers.

e. Usage Analytics (Firebase Analytics)

To understand feature adoption and improve user experience, we use Google Firebase Analytics:

• Aggregated Statistics: Collects anonymous, aggregated metrics such as screen visits (e.g., Surah View, Memorization Planner, Book Shelf), session duration, and general navigation flows.
• Privacy Assurance: All analytics data is tied to pseudonymous installation identifiers and cannot be used to identify individual users or reveal personal notes.

f. Push Notifications & Device Tokens (FCM)

To support optional Islamic reminders and app alerts:

• FCM Registration Token: A temporary, unique device token generated by Firebase Cloud Messaging to route notification alerts (e.g., daily Quran reading reminders, Hifz revision alerts, and deep-link actions like alquran://support).
• Security: Tokens are transmitted securely via encrypted HTTPS/TLS connections. You can disable notifications at any time from within the app or your Android system settings.

g. Voluntary Contributions & Sadaqah Jariyah

Al Quran is free to use. For users who wish to support ongoing maintenance and feature development through voluntary Sadaqah Jariyah:

• Payment Processors: In-app contributions are handled directly through Google Play Billing and RevenueCat.
• Zero Financial Data Storage: All payment credentials, credit cards, and billing accounts are processed directly and securely by Google Play. We do not receive, store, or have access to any of your financial credentials or payment details.

2. Information We Do NOT Collect

We maintain a strict minimal-data philosophy. Our app does not collect, store, or share any of the following:

• Passwords, private encryption keys, or biometric records.
• Precise GPS or background location information.
• Contacts, SMS history, or phone call records.
• Personal photos, videos, or unrelated media stored on your device.
• Centralized copies of your personal Quran notes, bookmarks, or reading progress.

3. Device Permissions & Purpose

The app requests only the minimal Android system permissions strictly necessary for its functionality:

4. Offline Data Handling & Local Storage

All primary application data—including downloaded recitation audio, translations, Tafseer texts, Word-by-Word vocabulary data, and personal notes—is stored locally on your device within Android’s secure application sandbox:

• Data is stored in private SQLite/Room databases and app-specific directories.
• You can read the Quran, listen to saved audio, and review your notes completely offline.
• You maintain total control over your local data and can wipe it at any time via Android application settings.

5. Third-Party Service Providers

We collaborate only with established, industry-standard service providers who adhere to strict data privacy standards:

• Google Play Services & Google Drive API: Provides OAuth 2.0 authentication and secure cloud storage directly inside your personal Google Drive.
• Google Firebase (Crashlytics & Analytics): Provides anonymous crash diagnostics and aggregated feature engagement metrics.
• Google Cloud Messaging (FCM): Delivers timely push notifications and reading reminders.
• RevenueCat & Google Play Billing: Securely processes voluntary in-app contributions without exposing financial details.
• Supabase Storage: Serves as a read-only CDN for verified public Islamic literature and translations.

6. Children’s Privacy (COPPA & GDPR-K Compliance)

Al Quran is designed for readers of all ages and is entirely family-safe:

• The application does not contain harmful, mature, or inappropriate content.
• We do not knowingly collect, solicit, or store personal information from children under the age of 13.
• If a child uses the app, all reading progress and notes remain strictly local on the device unless an adult intentionally connects a Google Account for cloud sync.

7. Data Deletion & Digital Sovereignty

We honor your right to be forgotten under GDPR, CCPA, and international data protection frameworks:

• You have absolute control over both your local device data and your Google Drive cloud backups.
• You can permanently erase all local databases, cached audio, and notes by clearing application data in Android settings.
• You can permanently delete your synced cloud backup file directly through Google Drive’s hidden application management settings.
• For step-by-step instructions, please consult our dedicated Data Deletion Instructions.

8. Security Safeguards

We implement rigorous technical safeguards to ensure your data remains secure:

• All network transmissions (audio downloads, Supabase CDN queries, Google OAuth exchanges, and Google Drive sync) utilize end-to-end HTTPS/TLS 1.3 encryption.
• Sync files in Google Drive reside in an isolated appDataFolder accessible exclusively by your authenticated Google Account.
• Local application databases are sandboxed by the Android operating system, preventing unauthorized access by other installed applications.

9. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect new features, updated OS permissions, or evolving legal requirements. Any modifications will be published on this page with an updated lastModified timestamp. We encourage you to review this policy periodically.

10. Contact Us

If you have questions, feedback, or concerns regarding this Privacy Policy or our data handling practices, please contact our support team:

• Email: support@edureminder.com
• Publisher: Edu Reminder Ltd.