This policy explains what data the Murattal app and website collect, why, and who it is shared with. It applies to the Android app and to murattal.app.
You can use Murattal as a guest. In guest mode your settings, reading progress, notes and bookmarks are stored only on your device and are not sent to our servers. If you later create an account, that local data is migrated into your account so it can sync.
| Data | When | Why |
|---|---|---|
| Email address, and the name and profile picture from your Google account if you sign in with Google | Only if you create an account | To authenticate you and sync your data across devices |
| Study data: surah progress, memorization goals, review streaks, personal surah notes, ayah bookmarks, and app settings (theme, language, reciter, font size, playback speed, reading and display mode) | Only if you create an account | To sync your study data between your devices |
| The Arabic word and its verse context that you submit for AI analysis | When you use AI word analysis | To generate the analysis. Results are cached so repeated lookups do not need to be re-processed |
| A randomly generated device identifier (a UUID, not an advertising or hardware ID) | Guest use of AI word analysis | Solely to count free AI analyses so the free-tier limit can be enforced for guests |
| Subscription status and the Stripe customer and subscription identifiers | If you subscribe | To unlock premium features and let you manage your subscription |
| Technical data such as IP address and request metadata | Whenever the app contacts a server | An unavoidable part of making network requests; used for delivery, security and abuse prevention |
We do not sell your data and we do not share it for advertising. We use the following processors:
api.quran.com, verses.quran.com, api.alquran.cloud and cdn.jsdelivr.net supply Quran text, translations, tafsir, word data and recitation audio. Requesting this content reveals your IP address to them. These requests contain no account information.We may also disclose data where required by law.
Account and study data are kept while your account exists. Guest data lives on your device until you clear the app's storage or uninstall the app.
To delete your account and its data, email xhafaj.dennis@gmail.com from your account's email address. Your account and associated study data will be deleted within 30 days. Records we must retain for legal or accounting reasons, such as payment records held by Stripe, are kept for as long as the law requires.
All traffic between the app and our servers is encrypted in transit using HTTPS/TLS. Data is stored on Supabase's managed infrastructure. No system can be guaranteed perfectly secure, but we take reasonable measures to protect your information.
Our processors may store or process data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Murattal is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to lodge a complaint with your data protection authority. To exercise any of these rights, contact us at the address below.
If this policy changes materially we will update the date at the top of this page and, where appropriate, notify you in the app.
Questions about this policy or your data: xhafaj.dennis@gmail.com