Quran Sunnah Mobile App Privacy Policy

Quran Sunnah Mobile App Team, email: [email protected]

The Quran Sunnah Mobile App is committed to protecting your personal data. We have crafted this Privacy Policy to be as clear and straightforward as possible, aiming to provide transparent and easily accessible information regarding our privacy commitments. We hope this document offers all the necessary details to assure you that your personal data is secure with us. Before providing your consent for the processing of your personal data or submitting any personal data via forms on our app or website, please read this Privacy Policy carefully to ensure you fully understand the conditions under which we operate. This Privacy Policy applies to your use of the Services of Quran Sunnah Mobile App, including the Website, related software, and the mobile device application. It details when, where, and why we process personal data of our users, how we use it, under what conditions we may disclose it to others, your rights regarding your personal data, and how we keep it secure.

Access to the Quran Sunnah Mobile App Platform (including Website, related software, and the mobile device application) may be available with or without account registration. You can browse certain parts of our Website without registration. To use the mobile application, registration may be required. While limited use might be possible without providing personal details (e.g., browsing content), we do collect log information and place cookies on your device to track activity on the Website whenever you access it. You have the option to opt out of non-essential cookies.

• Personal data is any information relating to you that, alone or in combination with other pieces of information, allows someone collecting and processing it to identify you as an individual.
• Processing of personal data means any operation performed on your personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
• Data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing; this means you as a user of Quran Sunnah Mobile App.
• Consent of the data subject/user is any freely given, specific, informed, and unambiguous indication of your wishes by which you, by statement or by clear affirmative action, signify agreement to the processing of personal data relating to you.

• Processing is based on the consent you have given (e.g., newsletters, feedback/reviews, lesson interaction analysis, event/webinar participation, certain cookies).
• Processing is necessary to provide our Services under the Terms of Service—enhancing learning/user experience via personalized recommendations, improved content planning, and interactive tools.
• Processing is based on the explicit consent you have given to us and our online verification provider to process sensitive information (e.g., biometric data) for identity verification and fraud identification.
• Processing is necessary for our legitimate interests, including but not limited to: compliance with financial and accounting legislation; assessing business efficiency through traffic/performance analytics; promoting the app via social media and affiliates; fulfilling contracts with business customers and reporting their users’ progress; session control and fraud prevention; user/content-provider verification and high-quality content development; and AI data training.

• Account for Users: login credentials, name, email, plus optional calendar sync for scheduling.
• Subscription to the Quran Sunnah Blog: email required for newsletters and updates.
• Posting of Information: surveys, forms, questions, comments, feedback you submit—may become visible to other users.
• Service Use, Cookies and Other Similar Technologies: web traffic monitoring, behavior tracking; see our Cookie Policy for details.
• Billing Information: transaction details (ID, date, time).
• Quran Sunnah Business (if applicable): name, email, company, phone for business service info.
• Sensitive Data: we do not process sensitive data unless you expressly agree.
• Pages on Social Networks: interactions on our official social pages for efficiency and marketing analytics.
• Community Forums/Groups: interaction and usage data within community groups for best-practice sharing and updates.
• Academy/Training (if applicable): activity data, comments, reviews, survey results for course improvement.
• Information Required for Marketing and Promotion: postal addresses for local event/app promotion.
• Analysis of Recitation/Speech Activity: microphone usage data to measure recitation engagement (opt-out for EEA/Switzerland).
• Language Assessment: name, email, assessment results for proficiency testing.
• Video Content, Group Sessions, Events, and Webinars: recordings and likeness only with prior notice and consent if required.
• Information Processed by AI-Powered Tools: text prompts, audio/video for personalized recommendations, study plans, chatbot, AI training.
• User Identity Verification (for specific roles): facial biometrics and ID via third-party provider for fraud prevention.

• Provision of Services: authorizing access, profile discovery, scheduling, progress tracking, payment processing, language assessments, business-user reporting.
• Payment Services: secure payment processing via Braintree, Stripe, PayPal (encrypted on third-party servers).
• Referral Programs: personalized referral links; collect referred individuals’ data upon link follow.
• Communications: service-related emails, push notifications, in-app messaging; opt-out except legal notices.
• User Research: feedback for UX, product, marketing, support improvements (no recording without consent).
• Marketing and Promotion: name/email for newsletters and promotions (consent-based, opt-out anytime).
• Behavioral and Social Media Marketing: email sharing with Google/Meta for personalized ads under legitimate interest.
• Identifying Influencers: third-party services analyze identifiers for collaboration proposals with notice.
• Analytics and Development: registration, traffic, cookie, usage analytics (Google Analytics, Hotjar, Amplitude, etc.).
• Content Contributor Verification: credentials for eligibility and fraud prevention via biometric/ID checks.
• Improvement of Ranking Algorithms: metric-based data for better content and expert matching.
• Managing Community Forums/Groups: email, interaction data for moderation and statistics.
• Support and Platform Supervision: data use for dispute resolution, behavior monitoring, complaint handling.
• Events and Webinars: registration data for access, confirmations, reminders, materials distribution.
• Competitions and Sweepstakes: registration info for administration, winner contact, legal compliance.
• Compliance with Legal Requirements: payment and account data for financial, tax, legal obligations.
• Fraud Prevention: log, payment, behavior data to detect and prevent fraud and manage sessions.

• Analytics services: traffic, usage, assessment data.
• Social network platforms and search engines: marketing and social interaction data.
• Customer communication solutions: feedback and inquiry data.
• User research tools: UX improvement data.
• Email and push-notification providers: contact and identifier data.
• SMS providers: contact and identifier data.
• Payment service providers: billing and transaction details.
• AI-powered service providers: text, audio, transcript, biometric data for AI tools.
• Video conferencing and speech-to-text providers: audio/video interaction data.
• Influencer marketing solution providers: identifiers for influencer outreach.
• Language assessment tools: proficiency data.
• SEO and marketing tools: promotion data including postal address.
• Academy/Training management services: activity, comment, review data.
• Community Forums/Groups management services: email, interaction, usage data.
• Online verification providers: facial biometrics and ID.
• Tax and accounting compliance software: financial compliance data.

• Personal data retained while your account is active.
• Accounts inactive for over 2 years may be expired; data removed from active systems within 90 days.
• AI-trained data stored 2 years in EU, longer outside EU.
• Conflict-related data may be retained for legal claims then deleted after resolution.
• Some data retained longer for legal, regulatory, tax, accounting requirements.
• Mailing list data stored until you unsubscribe.
• Event/webinar data merged with account or deleted 30 days after event.
• Sweepstakes participant lists deleted 30 days after close; winners’ names remain until consent withdrawal.
• After retention period, processing ceases unless legally required.

• Right of Confirmation: obtain confirmation whether your data is processed.
• Right of Access: access personal data we hold about you.
• Right to Rectification: request correction or completion of inaccurate/incomplete data.
• Right to Erasure: request deletion of your data; we comply unless legally required; use Settings or contact [email protected].
• Right of Restriction: request processing restriction instead of erasure for specific reasons.
• Right to Data Portability: have your data transmitted to another controller where feasible.
• Right to Object: object to processing based on public interest or legitimate interests (e.g., AI training); we’ll cease unless compelling grounds exist.
• Right to Withdraw Consent: withdraw consent any time; we’ll stop processing promptly unless legally obliged.
• Right to Lodge a Complaint: if you believe our processing violates your rights, contact us or file with your local data protection authority.

• Cross-border Transfers: we use DPAs, SCCs, and technical measures to protect data internationally.
• Time for Reply: we respond to requests within one month (extendable by two months with notice).
• Security: technical and organizational measures to prevent unauthorized access, loss or damage.
• Support Access: with your permission, support may access your account to troubleshoot.
• Children’s Privacy: not intended for under-18 without guardian; under-13 data not knowingly collected.
• Breach Notifications: we’ll notify you and authorities of high-risk data breaches promptly.
• Do Not Track: we don’t honor browser Do Not Track for third-party marketing.
• California Privacy Rights: CCPA rights to know, correct, delete, opt-out; verify identity via [email protected].
• Automated Decision-Making: profiling by algorithms for rankings; you can request human review via [email protected].
• Sale of Personal Data: we do not sell your personal data or that of minors under 16.