Privacy Policy

Qiraat ("we," "our," or "us") operates the Qiraat mobile application (the "App") and the website qiraat.ca (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App and Website. Please read this Privacy Policy carefully. By using the App or Website, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information You Provide

When you create an account or use our services, we may collect the following personal information:

• Account Information: Your name, email address, and profile picture when you register for an account.
• Authentication Data: Information received from third-party authentication providers (Google Sign-In, Apple Sign-In) including your name, email address, and unique identifier.
• Communications: Any information you provide when contacting us for support, feedback, or inquiries.

1.2 Information Collected Automatically

When you use the App, we may automatically collect certain information:

• Usage Data: Information about how you interact with the App, including Surahs played, reciters selected, recitation styles chosen, and listening duration.
• Device Information: Device type, operating system version, unique device identifiers, and mobile network information.
• Log Data: IP address, access times, pages viewed, app crashes, and other system activity.

1.3 Information Stored Locally

• Favorites and Playlists: Your favorite Surahs, reciters, and custom playlists are stored both locally on your device and in our cloud database to enable synchronization across devices.
• Downloaded Content: Audio files you download for offline listening are stored locally on your device.
• Preferences: App settings including language preference, theme settings, and playback preferences.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain the Service: To operate, maintain, and improve the App and its features.
• Account Management: To create and manage your user account, authenticate your identity, and enable account-related features.
• Personalization: To personalize your experience, including syncing your favorites, playlists, and preferences across devices.
• Audio Streaming: To stream Quran recitations to your device and manage offline downloads.
• Communication: To respond to your inquiries, provide customer support, and send service-related notifications.
• Analytics: To understand how users interact with the App, identify trends, and improve our services.
• Security: To detect, prevent, and address technical issues, fraud, and security concerns.

3. Data Storage and Backend

We use Supabase as our backend service provider for data storage, authentication, and real-time functionality. Supabase is built on top of PostgreSQL and provides enterprise-grade security. Your data is stored on servers maintained by Supabase and its infrastructure providers. For more information about Supabase's security practices, please visit supabase.com/security.

4. Third-Party Authentication

We offer sign-in through the following third-party providers:

• Google Sign-In: When you sign in with Google, we receive your name, email address, and profile picture from Google. Google's Privacy Policy applies to data processed by Google: policies.google.com/privacy.
• Apple Sign-In: When you sign in with Apple, we receive your name and email address (which you may choose to hide). Apple's Privacy Policy applies: apple.com/privacy.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We share data with trusted service providers who assist in operating the App (e.g., Supabase for backend services, cloud hosting providers). These providers are contractually obligated to protect your data.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Safety and Rights: We may disclose information to protect the safety, rights, or property of Qiraat, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, tax, or regulatory purposes. Downloaded audio files stored locally on your device are not affected by account deletion and remain under your control.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls and authentication for internal systems
• Secure authentication through OAuth 2.0 protocols

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure: You can request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to our processing of your personal data.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us at contact@qiraat.ca. We will respond to your request within 30 days.

9. Your Rights Under CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to Know: You can request information about the categories and specific pieces of personal data we have collected about you.
• Right to Delete: You can request deletion of personal data we have collected from you.
• Right to Opt-Out: You can opt out of the sale of your personal information. Note: We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, please contact us at contact@qiraat.ca. We will verify your identity before processing your request.

10. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at contact@qiraat.ca, and we will take steps to delete such information from our systems.

11. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from your country. We ensure that appropriate safeguards are in place to protect your personal information in accordance with this Privacy Policy and applicable laws, including standard contractual clauses approved by relevant authorities.

12. Cookies and Tracking Technologies

Our Website may use cookies and similar tracking technologies to enhance your browsing experience. You can control cookies through your browser settings. The App does not use cookies but may use similar local storage technologies to maintain your preferences and session information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on our Website and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: contact@qiraat.ca
• Website: qiraat.ca