Privacy Policy

Account information (optional): the name and email address you give when you register and, if a user is under 13, the parent or guardian email needed for consent. Learning progress: lessons completed, quiz results, streaks, saved verses and hadith, hifz progress, the salah log and journal entries, synced to our servers via the /me/data endpoint so you can resume across devices. Questions you choose to send for scholar review.

Recitation audio (optional, only when you tap record). (a) Instant recitation check: the clip is sent, with your consent, to a speech-to-text service that turns it into Arabic text, which is then compared with the āyah on your device. We do not keep this audio. (b) Recitation sent to a teacher: the recording is stored privately so a qārī can review it. Only you and that reviewer can hear it, and it is deleted with your account. Children cannot record until a guardian has given recording consent.

Usage statistics: anonymous feature-use events, for example that a hadith search returned no results. They never contain what you typed, your account, a device ID or cookies, and you can switch them off below. They also count which kind of page was opened (for example “a hadith page”, never which one or what you searched), whether you use the website, the installed web app or the phone app, page-speed ranges and error counts — never the address, the text of an error or anything that identifies you. Location: the app does not read your device location. Prayer times are calculated on your device for the city you choose, and that choice stays on your device.

We use your data only to provide the service: authenticating your account, saving and restoring your learning progress, personalising your home screen, and (where enabled) showing accurate prayer times. We do not sell your personal data. We do not use your data for advertising profiling.

Account and progress data are stored on our servers and transmitted over encrypted (HTTPS) connections. Device-only data (such as prayer location and preferences) stays in your browser/app local storage. We retain your data while your account is active.

You may access and export your account data. You can permanently delete your account at any time: sign in, open Profile and choose "Delete account" (you will be asked for your password). This erases your account, synced progress and any stored recitation recordings from our servers. If you cannot sign in, email support@hidayah24.com from the address on the account and we will delete it for you. Data kept only on your device (settings, offline progress) is removed when you clear the app data or uninstall the app.

Hidaya includes family and children features. We ask for age at registration. If a user is under 13 (or the applicable minimum age in their region), we require verifiable parent or guardian consent and a parent/guardian email before the account is created, and the account is set up as a supervised child account. We collect the minimum data needed for the child to learn, do not show behavioural advertising to children, and a parent or guardian may review, export or delete the child’s data at any time by contacting us or using account deletion.

We use a small number of service providers, who process data only to do their job for us and may not use it for their own purposes: our hosting provider (Hostinger), which stores account data; Google (Gemini speech-to-text), which receives a recitation clip only when you run the instant recitation check; and OpenStreetMap’s Overpass service, which receives the map area you search when you use the mosque finder, sent directly from your device. Qur’an text and some app files are loaded from public services (alquran.cloud, jsDelivr) without any personal data. We do not sell personal data, show ads, or share data with advertisers.

For any privacy request (access, export, deletion or a question about a child’s data), email support@hidayah24.com. We aim to reply within 30 days.