Privacy Policy

1. Who we are

Iqra Quran (“the app”) is made and published by Tech Avenue Labs (“we”, “us”). This policy explains what information the app and the website www.iqraquranapp.org handle, why, and what choices you have. If you have any question about it, email [email protected].

2. Information the app stores on your device

Iqra Quran has no accounts and no cloud sync. Everything you create in the app is saved in a database inside the app's private storage on your phone, and is not uploaded to us. This includes:

• bookmarks, notes and highlights;
• your reading position, reading time, verses read, khatam plans and daily goal progress;
• Hifz (memorisation) review progress;
• your tasbih counts and Ramadan fasting log;
• your settings, such as theme, language, font sizes, chosen translation and tafsir, prayer calculation method, madhab and reminder choices;
• content you download so it works offline: recitation audio, translations, tafsir, word-by-word data and Mushaf page fonts;
• a small record of how many days you have used the app, so the “rate the app” and “share the app” prompts appear at a sensible time and not repeatedly;
• data for the home-screen widget (today's prayer times and your daily goal progress), which is kept in the widget's storage on the device.

If your phone's own backup service is turned on (for example Android's backup to your Google account, or an iCloud device backup), the operating system may include the app's data in that backup. That backup belongs to your account with Google or Apple and is governed by their terms; we have no access to it.

3. Location

If you allow it, the app reads your device's location to:

• calculate prayer times for where you are (including prayer alerts, Ramadan suhoor and iftar times and the home-screen widget), and
• show the Qibla direction.

These calculations happen entirely on your device, using the open-source Adhan library and the World Magnetic Model. Your coordinates are not sent to us or to any other service, and the app does not save them in its database: it keeps the latest position in memory while it runs (your phone's operating system may also cache its last known location, as it does for all apps). The prayer times worked out from your location are saved on the device for the widget and alerts.

The app asks for location only while you are using it. You can refuse or withdraw permission at any time in your phone's settings; prayer times and the Qibla will then be unavailable, and everything else keeps working.

Note that, like any internet request, the services described in section 6 can see your IP address, from which an approximate location (such as country or city) can sometimes be inferred.

4. Notifications

Reminders scheduled on your device

Prayer alerts, Ramadan suhoor and iftar reminders, khatam reminders and daily goal reminders are scheduled locally by the app on your phone. They are off until you turn them on, at which point the app asks for notification permission. No server is involved.

Announcements (Firebase Cloud Messaging)

The app uses Google's Firebase Cloud Messaging so we can occasionally send an announcement to all users at once (for example, about a new feature or a special occasion). To make this work, Google issues your installation a random messaging token, and the app subscribes it to a single topic that every installation shares. We do not collect or store these tokens on our own servers, and we cannot target an individual person. Announcements only appear if you have allowed notifications, and you can turn them off at any time in your phone's settings.

Playback controls

While recitation is playing, the app shows a media notification with playback controls, as required for background audio. It contains only the recitation details.

5. Crash reports and usage statistics (Google Firebase)

The app uses two Firebase services, provided by Google, to help us keep it working well. They are active only in released versions of the app.

Firebase Crashlytics

If the app crashes or hits an error, it sends a crash report to Google. A report contains technical details: the error and where in the code it happened, the app version, the device model and operating system version, details such as free memory and disk space at the time of the crash, and a random identifier for the installation. We use these reports only to find and fix bugs. Crashlytics keeps crash reports for 90 days.

Google Analytics for Firebase

The app sends Google Analytics only the standard events its software development kit records automatically: when the app is first opened, opened again or updated, how long sessions last, and which screens are viewed. Screens are recorded by their type only (for example “surah reading” or “prayer times”) and never include which surah or verse you opened. We log no custom events and no user properties, so nothing about what you read, search for, bookmark, write or memorise leaves your device this way.

Along with these events, Google collects device information (such as model, operating system, language and app version), a random app-instance identifier, and an approximate location (country, region or city) that Google derives from your IP address. On Android, the Firebase SDK can also read the device's advertising ID unless you have deleted it in your Android settings. The app shows no ads and we do not use the advertising ID for advertising. On iOS, the app never asks for permission to track you, so Apple's advertising identifier is not available to it.

We use these statistics in aggregate to understand which features are used and to make the app better. The app does not currently include an in-app switch to turn Crashlytics or Analytics off; if you object to this processing, contact us (see section 12).

Google processes this data under its own terms and privacy policy. You can read more at firebase.google.com/support/privacy and policies.google.com/privacy.

Firebase Remote Config

For the live Makkah and Madinah streams, if the app cannot find the current broadcast by itself it asks Firebase Remote Config for a backup video ID. That request carries a random Firebase installation identifier and basic app and device information, nothing else.

6. Internet services the app contacts

The Quran text and the default English translation are built into the app and work offline. Other content is fetched over the internet when you use the feature that needs it. Every one of these requests is encrypted (HTTPS), and, as with visiting any website, the server receives your device's IP address and standard request information (such as the time, the file requested and the app or operating system's user agent). We do not send your name, your coordinates, your notes, bookmarks or any other personal content with these requests.

• api.alquran.cloud (AlQuran Cloud by Islamic Network): translations, tafsir and transliteration you choose to download.
• cdn.islamic.network (Islamic Network) and download.quranicaudio.com (QuranicAudio): recitation audio, streamed or downloaded for offline listening.
• api.quran.com and api.qurancdn.com (Quran.com, by Quran Foundation): tafsir, word-by-word meanings and transliteration, and the verse and word timings used to highlight the text during recitation. The app first asks for these through our relay (below), and contacts Quran.com directly only when the relay can't answer.
• audio.qurancdn.com (Quran.com): pronunciation audio when you tap a word in word-by-word mode.
• verses.quran.com (Quran.com): Mushaf page fonts, used as a backup source.
• www.iqraquranapp.org (our own website): Mushaf page fonts, and a relay at www.iqraquranapp.org/api/qf/ for Quran Foundation's content (tafsir, word-by-word data and recitation timings). The relay asks Quran Foundation for the content requested (for example, which surah's tafsir is needed) and keeps a copy to answer later requests. Quran Foundation sees only our server, not your device or IP address. The relay itself receives your IP address and standard request information like any web server, but no personal data. See section 8 for our server logs.
• www.youtube.com (YouTube, owned by Google): for the live Makkah and Madinah streams, the app reads the broadcaster's public live page to find the current stream and plays it in YouTube's embedded player. YouTube may set cookies and collect information while you watch, under Google's privacy policy.
• Google Firebase: crash reports, usage statistics, announcements and Remote Config, as described in sections 4 and 5.
• Google Play and the App Store: when the app invites you to rate it, it uses Google's or Apple's built-in review dialog. Any rating or review you leave goes to the store under its own terms; the app never sees it.

When you tap a link in the app (for example to a store page, our Instagram or YouTube channel, or a source in the Credits screen), it opens in your browser or the relevant app, and that site's own privacy policy applies. When you share a verse or the app, the text is handed to your phone's share sheet and to the app you pick; we don't see what you share or with whom.

7. What we don't do

• We don't show ads, and the app contains no advertising networks.
• We don't sell or rent your information, and we don't share it with data brokers.
• We don't ask for your name, email address or phone number, and the app does not access your contacts, photos, camera or microphone. (On iOS, the system settings page may mention the microphone because of the audio playback library; the app never records audio.)
• We don't upload your location, notes, bookmarks, highlights, reading history or Hifz progress.
• We don't combine the app's statistics with data from other companies to build a profile of you.

8. The website

www.iqraquranapp.org is a simple static website. It uses no analytics, no advertising and no cookies of our own. If you switch between light and dark mode, your choice is saved in your browser's local storage so the site remembers it; it never leaves your browser.

Pages on the site load fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), and the home page shows badge images loaded from launchzone.co, postyourstartup.co and programmerneeds.com. When your browser fetches these, those providers receive your IP address and standard request information under their own privacy policies.

Like almost every website, our hosting provider's web server keeps access logs (IP address, date and time, the page or file requested, referring page and browser user agent). These logs, which also cover the app's requests for page fonts and the content relay described in section 6, are used only to keep the site secure and running, and are deleted on the hosting provider's normal log-rotation schedule.

If you email us, we use your email address and message only to reply to you.

9. Children

Iqra Quran is a general-audience app, suitable for readers of all ages; it is not designed specifically for children. It has no accounts and we do not knowingly collect personal information from children. The limited technical data described in section 5 is collected in the same way for every user. If you are a parent or guardian and have a concern, please contact us and we will help.

10. Legal bases and international transfers

Where data-protection laws such as the GDPR or UK GDPR apply, we rely on these legal bases:

• Providing the features you ask for: downloading content, playing audio and live streams, and showing reminders you turn on.
• Our legitimate interests: crash reports and aggregate usage statistics, to keep the app reliable and improve it, and server logs, to keep the website secure. We have kept this data to a minimum so that it does not override your interests, and you can object at any time.
• Your permission: location and notifications are only used once you grant them in your phone's settings.

Google and the other providers listed above may process data in countries other than your own, including the United States. Where required, they do so under appropriate safeguards such as the European Commission's standard contractual clauses.

11. Data retention and deletion

• On your device: kept until you delete it in the app, clear the app's storage, or uninstall the app. Uninstalling the app deletes all of its local data (except any copy in your phone's own backup, which you control).
• Crash reports: kept by Crashlytics for 90 days.
• Usage statistics: event-level data is kept for a limited period under our Google Analytics data-retention setting and then deleted by Google; aggregated reports that do not identify anyone may be kept longer.
• Messaging token: stops being valid when you uninstall the app.
• Server logs: kept for a limited period under the hosting provider's log rotation.
• Emails: kept as long as needed to deal with your message.

Because the app's Firebase data is not linked to your name, email or any account, we usually cannot pick out which records belong to you. If you ask us to delete data, we will do everything we reasonably can.

12. Your rights and how to contact us

Depending on where you live, you may have the right to ask for access to, correction of, or deletion of personal data about you, to object to or restrict its processing, and to complain to your local data-protection authority. Most of your information never leaves your device, so you can view, change or delete it yourself at any time.

For any privacy question or request, contact:

Tech Avenue Labs
Email: [email protected]
Website: www.techavenuelabs.com

We aim to reply within 30 days.

13. Security

Data on your device is protected by your phone's app sandbox and its own security (such as your screen lock). All of the app's network requests use encrypted HTTPS connections. No method of storage or transmission is perfectly secure, but we have designed the app so that very little information leaves your device at all.

14. Changes to this policy

If the app or this policy changes, we will update this page and the effective date below. If a change significantly affects how your information is handled, we will also mention it on this website or in the app.

Effective date: 9 November 2026. See also our Terms of Service.