QuranCast is a Quran learning platform operated by NEARFOLD (Dubai, United Arab Emirates). It is available on the web at qurancast.co, on Android through Google Play, and on iOS through the Apple App Store. This Privacy Policy explains what information we collect when you use QuranCast, why we collect it, how we use, store and share it, and the choices and rights you have.
By using QuranCast you confirm that you have read this Privacy Policy and understand how we handle your information. If you do not agree with it, please do not use the Services.
1. Information We Collect
- Account Information: the name, email address and profile picture you share when you sign in with Google (and, where that option is offered, Facebook). See section 3 for how we handle Google account data.
- Recitation Videos and Audio: the Quran recitations you record or upload, together with any response you give us about them.
- AI Interaction Data: your sessions with the AI teacher, the feedback you receive, and the progress metrics that come out of those sessions.
- Learning Data: Tajweed accuracy scores, memorisation progress, streaks, badges and learning milestones.
- Payment Information: when you buy a minute package, our payment provider processes your payment details. We receive the outcome of the payment and a limited payment identifier, not your full card number.
- Usage Data: watch time, session duration, pages visited and the features you use.
- Device and Technical Information: device type, operating system, browser type, IP address and similar technical data.
- Device and App Identifiers: our mobile apps use an app installation identifier generated by Firebase, called the Firebase installation ID. It identifies an installation of the app rather than you or your physical device, and the Firebase services we rely on (authentication, database, file storage and crash reporting) use it to route requests and keep your session working. Google processes it on our behalf as a service provider. We do not collect your advertising ID, we do not use device or app identifiers to track you across other apps or websites, and we do not sell them. Our own operational records keep only coarse categories such as browser family, operating system family, and whether the device is a phone, tablet or desktop, never a raw device identifier or user agent.
- Crash and Diagnostic Data: when the QuranCast Android app crashes or stops responding, we receive a crash report through Firebase Crashlytics. A report contains the stack trace, the screen you were on, the app version, relevant device and operating system details, and an installation identifier. These reports never include your name, email address, account identifier, authentication tokens, recitation audio, transcripts or Quran text. Google processes them on our behalf as a service provider; we do not share them with anyone else, and we do not use them for advertising or to track you across other apps. Collection is automatic and there is no in-app switch for it. You can ask us to delete diagnostic data through the account deletion route in section 10.
- Communications: the content of messages you send us, including support requests and feedback submitted through the platform.
2. How We Use Your Information
- Provide the Services: run your AI teacher sessions and generate personalised feedback on your recitation.
- Track Progress: keep your learning journey, scores, streaks and achievements up to date across your devices.
- Improve the AI teacher: use de-identified or aggregated data to improve the accuracy and quality of feedback.
- Improve the Platform: understand how features are used so that we can fix and improve them.
- Communication: send you service messages, security notices, receipts and, where you have agreed, educational or product updates.
- Payments and Records: process purchases, credit your minutes, and keep the accounting records we are required to keep.
- Safety and Security: detect, prevent and respond to fraud, abuse, misuse and security incidents, and enforce our Terms of Service.
- Legal Compliance: meet our legal, tax and regulatory obligations.
3. Google User Data and Limited Use
When you choose to sign in with Google, we receive your name, your email address, your profile picture, and a Google account identifier. We use that information only to create and secure your QuranCast account, to show you your own profile, to keep your learning progress and any purchased minutes attached to the correct account, and to send you essential service messages about your account.
We do not use Google user data for advertising, we do not sell it, and we do not use it to train or improve AI models. We do not allow humans to read your Google user data except where you have given us your affirmative agreement to look at specific content, where it is necessary for security purposes such as investigating abuse, where it is necessary to comply with applicable law, or where the data has been aggregated and is used for internal operations.
QuranCast's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke QuranCast's access to your Google Account at any time from the third-party connections page of your Google Account. Doing so stops future sign-in with that account. To remove the information we already hold, see section 10.
4. Cookies and Similar Technologies
We use cookies and similar technologies to keep you signed in, to remember your language and display preferences, and to understand in aggregate how the platform is used so that we can improve it. Sign-in cookies are essential: without them you cannot remain logged in. You can control or delete cookies through your browser settings, but blocking essential cookies will prevent you from signing in. We do not sell advertising space on QuranCast and we do not use advertising cookies to track you across other websites.
5. How We Share Information
- Service Providers: we share information with the providers that run the platform on our behalf, including Google Cloud and Firebase (hosting, database, file storage, authentication and crash reporting), Google Gemini (AI processing of your recitations and sessions), Stripe (payment processing), Vercel (web hosting), Amazon Web Services (media storage), and our transactional email provider. These providers may only use the information to deliver their service to us.
- Public Content: recitations you mark as public may be viewed by other users of QuranCast. You choose what to publish, and you can change that choice later.
- Legal Requirements: we may disclose information if we are required to do so by law, or where it is necessary to protect our rights, our users, or the security of the platform.
- Business Transfers: if QuranCast is ever involved in a merger, acquisition or sale of assets, we will only transfer Google user data with your explicit prior consent.
- No Selling: we do NOT sell your personal information to third parties.
6. Where Your Information Is Stored
QuranCast is operated from the United Arab Emirates, and the providers listed in section 5 store and process data in other countries, including the United States and the European Union. Where the law requires it, we rely on appropriate safeguards for those transfers.
7. Data Retention
We keep your information for as long as your account is active, or for as long as we need it to provide the Services and to meet our legal obligations. When you delete your account we remove or de-identify your personal information, except for the limited records we must keep for legal, tax, fraud prevention or security reasons. Copies may remain in our backups for a limited period before they are overwritten.
8. Data Security
We protect your information with encryption in transit, authenticated sign-in, access controls that limit who can reach our systems, and database security rules that restrict each account to its own data. No system is completely secure, and we cannot guarantee absolute security. If we become aware of a breach that affects your personal information, we will notify you and the relevant authorities as required by law.
9. Your Rights and Choices
- Access: Request a copy of your personal data.
- Correction: Update or correct your information.
- Deletion: Request deletion of your account and data.
- Data Portability: Request your data in a portable format.
- Withdraw Consent: Where we rely on your consent, withdraw it at any time. This does not affect processing that already took place.
- Opt-Out: Unsubscribe from marketing communications. We will still send essential service messages about your account.
- Object or Restrict: Where the law gives you the right, ask us to restrict or object to certain processing.
To exercise these rights, contact us at admin@qurancast.co. We will respond within the period required by applicable law, and we will not discriminate against you for exercising your rights.
10. Deleting Your Account and Data
You can request deletion of your QuranCast account and its associated data at qurancast.co/delete-account, or by emailing admin@qurancast.co. Once a request is confirmed, we delete your account data, your recitations, your learning progress and your crash and diagnostic data, except for the limited records described in section 7.
11. Children's Privacy
QuranCast is intended for users aged 13 and above. Signing in with a Google Account also requires meeting Google's minimum age for an account in your country. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe that a child has provided us with personal information without that consent, please contact us and we will delete it.
12. Facebook Data Deletion
If you signed up using Facebook and want to delete your Facebook data, email us at admin@qurancast.co with the subject "Facebook Data Deletion Request".
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, for example when we add a feature or when the law changes. We will update the date at the top of this page and, for material changes, notify you through the platform or by email before the change takes effect. Continued use after a change constitutes acceptance of the updated policy.