Privacy Policy

Effective date: October 21, 2026

This Privacy Policy explains how BOUFOUS IT LIMITED (“IQRAA,” “we,” “us,” or “our”), the publisher of the IQRAA app and the controller of your personal information, collects, uses, discloses and protects personal information when you use the IQRAA mobile app and the services behind it (together, the “Service”). It also describes the choices you have and the rights you may have under U.S. state privacy laws. By using the Service, you acknowledge that you have read this Privacy Policy.

1. Information we collect

1.1 Information you provide

• Account information. You can sign in with your email address and a password, with Google, or with Sign in with Apple. If you create an account, we receive your email address and the display name you choose. Your password is handled by our sign-in provider (Google Firebase Authentication); we never see it. If you sign in with Google, Google shares your name, email address and profile picture with us. If you sign in with Apple, Apple shares your email address, or a private relay address if you choose to hide yours, and your name if you choose to share it.
• Voice recordings. When you tap the record button, the app records your recitation and sends it, with the chapter and verse you are practicing, to our servers so we can prepare your feedback. When you search by voice in the Quran library, it sends the few words you recite so we can find the verse (see section 2).
• Learning preferences. The answers you give when you start, such as the chapter you want to learn and your level.
• Communications. The information you include when you contact us or submit a request, such as an account deletion request or a message sent through the feedback form in the app (the message and, if you add it, your email address, kept so we can answer you).

1.2 Information collected when you use IQRAA

• Learning activity and progress: recitation results (words recognized as correct or incorrect, accuracy score, Tajweed feedback and the text recognized from your recitation), session history (verse, date, time and duration), statistics, streaks, points, achievements, course progress and where you left off.
• Daily usage: how many corrections you used today, so we can apply the free plan limit.
• Usage statistics (only if you opt in): when you tap “Share” in the “Help improve IQRAA” prompt, the app records which screens you open and when, which features you use, your recitation scores, how long feedback takes and app errors, together with your app version, device type and operating system. These are linked to your account ID so that we can follow your learning journey, never to your name or email. They never include your voice, your recordings, the words you recited or your location. If you tap “Not now”, the app sends no usage statistics, and the statistics our servers keep about your requests are anonymous. You can change your answer at any time in Settings → Share usage statistics.
• Crash reports: if the app crashes, a report with the technical state of the app at that moment (stack trace, device model, operating system, app version, free memory, an installation identifier and your account ID when you are signed in) is sent to our crash reporting provider so that we can fix the problem. Crash reports never include your recordings.
• Device and technical information: when the app connects to our servers or to the services described in section 5, those services receive your IP address and basic technical details, such as device type, operating system, app version and the time of the request. Our servers keep short-term technical logs to keep the Service secure and fix problems. These logs may include your account identifier, the verse you practiced and the text recognized from your recitation, but not your email address or your recordings.

1.3 Information from third parties

• Google Sign-In or Sign in with Apple, if you choose to use them (see section 1.1).
• Google Play or the App Store, through our subscription management provider: if you subscribe to IQRAA Premium, we receive your plan, the product purchased (monthly or yearly) and its renewal or expiration date. We never receive your card or bank details; Google Play (on Android) or Apple’s App Store (on iPhone) handles all payments. You manage and cancel your subscription in Google Play on Android, or in your App Store account settings on iPhone.

1.4 Information that stays on your device

Some information is stored only on your device and is not sent to us:

• Location. If you allow location access, the app uses your device’s position to calculate prayer times and the Qibla direction on your device. The Qibla compass also reads your device’s compass sensor, on your device only. To display the name of your town, the app uses your device’s built-in geocoding service (provided by Google on most Android devices and by Apple on iPhone). If you type a city instead, the text you type is sent to a place search service (Open-Meteo) and to your device’s geocoding service to find matching places. We do not receive your location.
• Settings and app data, such as your language, theme, text size, reciter, daily goal, prayer reminder choices, the name and guide character you pick, downloaded recitation audio, and your recent recordings (kept in the app’s temporary storage so you can play them back).

1.5 What we don’t collect or do

• IQRAA shows no advertising and contains no advertising or cross-app tracking tools. The usage statistics described in section 1.2 are collected only with your consent, are used only to improve IQRAA, and are never shared with advertisers or data brokers.
• We don’t collect biometric identifiers. We don’t use your voice to identify you, and we don’t create voiceprints.
• We don’t collect your precise location, your contacts, your photos or your payment details.

2. Your voice recordings

This is what happens when you record a recitation:

1. The app uploads your recording over an encrypted connection to our servers, which are located in the United States.
2. The recording is converted into text by our speech recognition service provider, Groq, Inc. (United States), acting on our behalf. Groq may use the recording only to perform this service for us. Before your first recording is sent, the app asks for your permission (“Before you recite”); nothing is sent until you tap Allow and continue, and you can withdraw your permission at any time in Settings → Send recordings for checking. Groq may keep the audio and transcript for up to 30 days, only for reliability and abuse checks, then deletes them.
3. If you are a Premium member and the Tajweed check is on (it is on by default, and you can switch it off in Settings → Enable Tajweed Analysis), the recording is also analysed for Tajweed by our own software, which runs on servers of our hosting providers Render and Railway (both United States), acting on our behalf. The recording is deleted from those servers as soon as the check is complete, and the hosting providers may use it only to run our service for us.
4. We compare the text with the verse and prepare your feedback, including short clips of your individual words so you can replay them next to the reference recitation.
5. The full recording is deleted from our servers as soon as your feedback is ready, normally within seconds. The short word clips are deleted automatically, generally within 24 hours.

Finding a verse by voice. When you tap the microphone in the Quran library and recite a few words, the app sends that recording the same way, with the same permission, to find the verses it comes from. Groq converts it into text, we match the text against the Quran, and the recording is deleted from our servers as soon as the results are ready. No word clips are made and the search is not added to your progress.

We use your recordings only to give you feedback on your recitation and to find the verse you recite. We do not sell them, use them for advertising or use them to identify you. Recording is optional: you can read the Quran, listen to recitations and follow the courses without recording your voice.

3. Sensitive information

Because IQRAA is a Quran learning app, the fact that you use it, and your learning activity, may reveal information about your religious beliefs. Several U.S. state laws treat information about religious beliefs as “sensitive” personal information.

We use this information only to provide the Service you request. We never use it for advertising or profiling, we never use it to infer characteristics about you, and we disclose it only to the service providers described in section 5, who act on our behalf. By creating an account or using IQRAA’s features, you consent to this limited use. You can withdraw your consent at any time by deleting your account (section 8).

4. How we use information

We use personal information to:

• create and manage your account, sign you in, and keep your progress available across sessions and devices;
• analyze your recitation and give you feedback;
• show your history, statistics, streaks and achievements;
• apply the free plan limits, provide Premium features, and manage and restore subscriptions;
• send the prayer reminders you set up (scheduled on your device);
• respond to your messages and handle your privacy requests;
• keep the Service secure, prevent fraud and abuse, and diagnose and fix problems;
• maintain and improve the Service;
• comply with the law, enforce our Terms of Use, and protect the rights, safety and property of our users, the public and IQRAA.

If we want to use personal information for a purpose that is materially different from those listed here, we will update this Privacy Policy and, where the law requires it, ask for your consent first.

5. How we disclose information

We disclose personal information only as described below, and only what each recipient needs:

• Service providers. Companies that process information on our behalf and under contracts that restrict them from using it for any other purpose: cloud hosting for our servers (Render and Railway, both United States); sign-in and database services (Google Firebase); speech recognition (Groq, Inc., United States, only with your permission, see section 2); subscription management (RevenueCat); delivery of the messages you send through the feedback form to our support mailbox (Google Workspace); crash reporting (Google Firebase Crashlytics); and, only if you opted in, usage statistics (PostHog, stored in the European Union; we have configured it not to store your IP address or derive your location from it).
• Google Play and the App Store. Google processes Google Play purchases and Apple processes App Store purchases, each under its own terms and privacy policy. We receive only your subscription status.
• Google Sign-In, if you choose to sign in with Google, under Google’s privacy policy.
• Sign in with Apple, if you choose to sign in with Apple, under Apple’s privacy policy.
• Content and location services. When the app downloads recitation audio (EveryAyah and Quran.com), word timings and word audio (Quran.com), the Arabic font (Google Fonts) or article images (Unsplash), or looks up a place (Open-Meteo, or your device’s geocoding service), those services receive your IP address and basic device information. They receive no account information.
• Legal and safety reasons. When we believe in good faith that disclosure is required by law, subpoena, court order or other legal process, or is needed to protect the rights, property or safety of our users, the public or IQRAA.
• Business transfers. As part of a merger, acquisition, financing, reorganization, bankruptcy or sale of all or part of our business. We will notify you before your information becomes subject to a different privacy policy.
• With your consent or at your direction.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising, as those terms are defined under U.S. state privacy laws, and we have not done so in the past 12 months. We do not disclose personal information to third parties for their own direct marketing purposes.

6. How long we keep information

We keep personal information only as long as needed for the purposes described in this Privacy Policy:

We may keep information longer where the law requires it, or where it is reasonably needed to resolve disputes, prevent fraud or abuse, or enforce our agreements.

7. Your choices

• Microphone: needed only to record your recitation. The app records only after you tap the record button.
• Sending recordings for checking: the app asks for your permission before your first recording is sent to our speech recognition provider (section 2). “Not now” means nothing is recorded or sent. You can give or withdraw this permission at any time in Settings → Send recordings for checking; without it, you can still read, listen and follow the courses, but your recitation cannot be checked.
• Location: optional, used only for prayer times and the Qibla direction. You can type a city instead.
• Notifications: optional, used for prayer time reminders. Reminders are scheduled on your device; we don’t send them from our servers.
• Profile: you can change your display name in the app at any time.
• Usage statistics: optional. The app asks once, on your first visit to the home screen; “Not now” means nothing is sent. You can turn them on or off at any time in Settings → Share usage statistics.

The app asks before using your microphone, location or notifications, and you can change your choice at any time in your device’s settings.

8. Deleting your account

• In the app: go to Settings → Delete account and confirm. This immediately deletes your profile, learning history and progress from our database, your subscription customer record, and your sign-in account.
• Without the app: use the request form on our account deletion page.
• Subscriptions: deleting your account does not cancel a Google Play or App Store subscription. Cancel it first in Google Play, or in your App Store account settings on iPhone.
• Usage statistics and crash reports: they are linked to your account ID only, which identifies no one once your account is gone. If you want them removed as well, say so in your deletion request or write to us (section 17) and we will delete them from our analytics and crash reporting providers.
• Uninstalling the app does not delete your account.

9. Your U.S. state privacy rights

Depending on the state where you live (for example, California, Colorado, Connecticut, Texas, Virginia and other states with comprehensive privacy laws), you may have the right to:

• Know and access the personal information we have collected about you, including the categories of information, its sources, our purposes and the categories of recipients, and get a copy of it;
• Correct inaccurate personal information;
• Delete personal information we have collected from you;
• Data portability: receive your personal information in a portable, readily usable format;
• Opt out of the sale of personal information, targeted advertising, and profiling that produces legal or similarly significant effects. We don’t do any of these;
• Limit or withdraw consent to the use of sensitive personal information. We use it only as needed to provide the Service you request (section 3);
• Not be discriminated against for exercising any of these rights. We will not deny you the Service, charge you a different price or provide a different quality of service because you exercised them.

How to make a request

You can delete your account and change your display name directly in the app. For any other request, contact us as described in section 17. To protect your account, we will verify your identity before acting on a request, for example by asking you to write from the email address linked to your account. You may use an authorized agent to make a request for you; we may ask the agent for proof of your written permission and may ask you to verify your identity directly.

We will respond within 45 days. If we need more time, we may extend this period by up to 45 more days, and we will tell you why.

Appeals

If we decline to act on your request, you may appeal by replying to our decision or contacting us with the subject line “Privacy appeal.” We will respond within the time required by your state’s law and explain the reasons for our decision. If you disagree with the outcome, you may contact your state’s Attorney General.

10. Additional information for California residents

This section supplements this Privacy Policy under the California Consumer Privacy Act, as amended (CCPA), and serves as our notice at collection. In the past 12 months, we have collected the following categories of personal information:

We collect this information from you, from your device, and from Google and Apple (sign-in, and Google Play or App Store purchases), for the purposes described in section 4, and we keep it for the periods described in section 6. We do not sell or share personal information, and we do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA, so the rights to opt out and to limit do not apply to our practices. We do not knowingly sell or share the personal information of consumers under 16.

“Shine the Light.” California Civil Code section 1798.83 allows California residents to ask about disclosures of personal information to third parties for their direct marketing purposes. We make no such disclosures.

11. Do Not Track and Global Privacy Control

Some browsers and devices can send “Do Not Track” or Global Privacy Control (GPC) signals. Because IQRAA does not track you across third-party apps or websites and does not sell or share personal information, there is nothing for these signals to turn off. Where the law requires it, we treat a GPC signal as a valid request to opt out of the sale or sharing of personal information.

12. Children’s privacy

IQRAA is not directed to children under 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent, as required by the Children’s Online Privacy Protection Act (COPPA). If you are a parent or guardian and believe your child under 13 has given us personal information, contact us (section 17) and we will delete it. Users under 18 should use IQRAA with the involvement of a parent or guardian.

13. Security

• Connections between the app, our servers and our service providers are encrypted (HTTPS).
• Requests about your account are checked against your sign-in, and our database rules allow only your signed-in account to read your data.
• The credentials for our service providers are kept on our servers, not in the app, and access to our production systems is limited to the people who need it.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security breach affects your personal information, we will notify you and the authorities as required by applicable law.

14. International transfers

We are established in the United Kingdom. Our servers and most of our service providers (cloud hosting, speech recognition, authentication and database, subscription management) are located in the United States, so your information is transferred to, stored and processed there, where data protection laws differ from those in the United Kingdom and the European Economic Area. For these transfers we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, on the UK Extension to the EU–US Data Privacy Framework where a provider is certified under it, or on the European Commission’s Standard Contractual Clauses, together with the security measures described in section 13. You can ask us for details of the safeguards in place by contacting us (section 17).

15. Your rights in the UK and the European Economic Area

This section applies if you are in the United Kingdom or the European Economic Area. BOUFOUS IT LIMITED is the controller of your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and, for users in the EEA, under the EU General Data Protection Regulation (GDPR).

Lawful bases

• Performance of a contract (Article 6(1)(b)): creating and managing your account, processing your recitations to give you feedback, saving your progress, providing Premium and handling purchases.
• Legitimate interests (Article 6(1)(f)): keeping the Service secure, preventing abuse of the free quota, fixing errors (including crash reports) and improving the accuracy of the feedback, and keeping anonymous statistics about how our servers are used (request counts, response times and error rates that are not linked to you). We do not use your information for advertising or profiling.
• Consent (Article 6(1)(a)): optional features that you switch on yourself, such as sharing usage statistics, using your device location for prayer times and the Qibla direction, and receiving notifications. You can withdraw consent at any time in the app or in your device settings; withdrawing it does not affect what was processed before.
• Legal obligation (Article 6(1)(c)): keeping purchase records as required by tax and accounting law.

Because IQRAA is a Quran learning app, your use of it may reveal your religious beliefs, which is special category data. We process it only to provide the Service you have asked for, on the basis of your explicit consent given when you create an account and use the recitation features (Article 9(2)(a)), and we never use it for any other purpose.

Your rights

You have the right to access the personal information we hold about you, to have it corrected, to have it erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where processing is based on consent. You can delete your account and data yourself in the app (Settings → Delete Account) or through our account deletion page; for any other request, contact us (section 17). We respond within one month, extendable by two further months for complex requests, and we may ask you to verify your identity first. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

Complaints

If you believe we have not handled your personal information properly, you can complain to the UK Information Commissioner’s Office (ico.org.uk, telephone 0303 123 1113) or, if you are in the EEA, to the supervisory authority of your country of residence. We would appreciate the chance to address your concern first.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the effective date at the top. If we make material changes, we will notify you in the app before they take effect. If a change would allow us to use personal information we have already collected in a materially different way, we will ask for your consent where the law requires it.

17. Contact us

For questions about this Privacy Policy or to make a privacy request, email us at support@iqraatajweeds.com. For account deletion, you can also use our account deletion page.