Privacy Policy
Last updated: October 23, 2026
Hifzly ("the App") is a Quran memorization app for Android and iOS. This policy explains what data we collect, why, how it's stored, and the choices you have. Plain language only — no legalese. hifzly.net is an informational website; the App itself runs on your phone.
What we collect
- If you sign in with Google: your email address, display name, and profile picture URL. We request only the
openid email profilescopes — nothing else. - If you sign in with Apple: the identifier Apple gives us for your account, your email address (or the private relay address Apple creates if you choose Hide My Email), and your name if you choose to share it. Apple shares your name only the first time you sign in.
- While you use the App: your memorization progress (verses recited, passages saved, review schedule, training session stats). This data lives first on your device and is stored on our server when you're signed in; syncing it across devices is part of Pro.
- Free trial and daily allowance: to apply the 7-day Pro trial once per Android device and the free daily allowance, we store your account or anonymous ID, an app-generated device identifier, the trial dates, and how many seconds of the metered features you used each day. We don't collect advertising IDs.
- Subscription status: if you subscribe to Pro, Google Play or the Apple App Store processes the payment. We receive the purchase record needed to confirm and renew your subscription (product, purchase token or transaction ID, start and expiry dates, and renewal status). We never receive or store your card or payment details.
- Your voice while you recite: Recite mode and Live Follow stream your microphone audio to our speech-recognition provider so the App can follow you in real time. We don't keep recordings of your recitation.
- Tajweed Coach: a short audio snippet is sent to our server, forwarded to Google Gemini for tajweed analysis, and then discarded. We never retain the audio after feedback is returned.
- Anonymous users: if you don't sign in, we generate a random anonymous ID stored on your device. No personal info is collected.
How we use your data
- Authenticate you when you sign in with Google or Apple.
- Save your memorization progress, and sync it across your devices if you have Pro.
- Apply the free trial, the daily allowance, and your Pro subscription.
- Follow your recitation and generate tajweed feedback.
- Operate and improve the App's core features (spaced-repetition scheduling, session history, daily verse).
We do not use your data for advertising, profiling, selling, or sharing with marketers.
Third-party services we use
- Google Sign-In (OAuth 2.0) — authenticates you if you choose Google. Google's privacy policy applies: policies.google.com/privacy
- Sign in with Apple — authenticates you if you choose Apple. Apple's privacy policy applies: apple.com/legal/privacy
- Google Play Billing and the Apple App Store — process Pro subscription payments under their own terms and privacy policies.
- Soniox — real-time speech recognition that lets Recite mode and Live Follow follow your recitation.
- Google Gemini API — analyzes Tajweed Coach audio to provide feedback. Audio is processed transiently; we do not retain it.
- Quran.com public Quran text — used for verse lookup and display. No user data is sent to Quran.com.
- PostHog (website only) — privacy-friendly analytics on hifzly.net, used without cookies to count visits and download clicks.
Where your data lives
Your memorization progress, account record, allowance usage and subscription status are stored in our MongoDB database hosted on secure cloud infrastructure. Session cookies use HttpOnly, Secure, and SameSite=None flags.
Your rights
- Access: ask us for a copy of the data we hold about you.
- Delete: delete your account in the App (Settings → Account → Delete account) or by emailing us. All progress records and your user profile will be erased within 7 days. Deleting your account does not cancel a Pro subscription — cancel it in Google Play or the App Store.
- Sign out anytime: via Settings → Sign Out. This clears your session immediately.
- Revoke Google access: visit myaccount.google.com/permissions and remove Hifzly.
- Revoke Apple access: in your Apple Account settings, under Sign in with Apple, stop using it with Hifzly (on iPhone in Settings, or at account.apple.com).
Children
Hifzly is suitable for all ages. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child has provided us personal info, please contact us and we'll delete it.
Changes to this policy
We may update this policy to reflect new features or legal requirements. The "Last updated" date at the top always reflects the current version. Material changes will be notified via the App.
Contact
Questions, deletion requests, or concerns? Email us at support@hifzly.net.