Rafiq privacy policy

The short version

Rafiq keeps a record of your hifz so that it can tell you what to memorize and revise each day. That record is yours. It is not sold, not shared, and not used to advertise anything to you.

There is no analytics, no advertising, and no tracking of any kind. Nothing you record is sent to anyone but the account it belongs to.

What is stored

An account is needed so your record follows you from one device to another. These are the things kept against it:

Email address

How you sign in. Held by Firebase Authentication.

First name

Optional, and only used to address you.

Account identifier

A random id Firebase issues. Every record below is filed under it.

Your hifz record

Sessions you log, memorization runs you declare, your goal and revision pace, streaks and totals.

Your notes

Anything you write about a sitting, if you choose to write it.

Where it is kept

In Google Cloud Firestore, in a Firebase project controlled by the developer of this app. Security rules restrict every document to the account that owns it, so no other user of the app can read your record.

Your appearance choice — page or binding — is kept on the device itself and never leaves it.

What the app connects to

The mushaf itself is inside the app, and so is every typeface it is set in. Opening the Qur’an needs no connection at all.

Two services are reached over the network, and nothing else:

Firebase

Google, for sign-in and for storing your record.

Sentry

Functional Software, Inc., for crash reports. Reached only when the app itself breaks.

Crash reports

When a screen of the app breaks, a report of the fault is sent to Sentry so that it can be fixed. It is sent only when something actually goes wrong, and it says what broke, not who was using the app.

A report holds the error and the line of code it came from, the version of the app, and the device model and operating system version. It does not hold your account, your email, your name, your notes, or which portion you were reciting. The trail kept alongside it is limited to which screens of the app were opened.

Nothing in a report says where you are. Your network address is not stored with it, and the rough location Sentry works out from that address on arrival is removed before the report is kept.

Reports go to a project controlled by the developer of this app, and are kept for 30 days.

What is not collected

No location of any kind: no GPS, nothing that asks where you are, nothing that watches where you go, and no location worked out from the network. No contacts. No photos. No microphone or camera. No advertising identifier. No device fingerprinting. No analytics: nothing records which screens you open, how long you spend, or what you tap.

The app does not track you across other apps or websites, and there is no third-party SDK in it that could.

Notifications

The daily reminder, if you turn it on, is scheduled on your own device by the system — iOS or Android. Nothing about it is sent anywhere, and no server knows when or whether it fires.

Children

The app is built for students of any age, and families commonly set it up on a child’s device. It collects nothing beyond what is listed above, shows no advertising, and has no messaging, no social features and no way for one user to see another. A parent who sets up an account controls it and can delete it.

Deleting your account

You can delete your account from Settings › Account. Deleting it removes your profile, your sessions, your memorization runs and your notes from Firestore, and removes the sign-in itself. It cannot be undone, and there is no backup kept for you afterwards.

Changes

If this policy changes, the date at the top changes with it, and the current version is always the one in the app and at this address.

Getting in touch

Questions about any of this, or a request to have data removed, can be sent to the address on the App Store listing for Rafiq.