Privacy Policy

Ayah Institute is a Qur’an reading, tafseer and memorisation site, available on the web at www.ayahinstitute.pro and as an Android app. This policy explains what it collects, why, who else sees it, and how to get rid of it.

You can read the entire Qur’an, its translations and its tafseer here without an account. An account exists only so that memorisation progress and bookmarks follow you between devices.

What is collected

If you create an account

• Your email address, and a password which is stored only as a cryptographic hash — never as text, and not readable by us.
• If you sign in with Google: your name, email address and profile picture, as supplied by Google. We never see your Google password.
• Your memorisation progress — which ayahs you have marked as new, reviewing or memorized, your review schedule and confidence ratings, your memorisation plans, and recall attempts.
• Your bookmarks and the position you last read to.

If you send feedback

The name, email address and message you type into the contact form are stored and emailed to us so we can reply. Nothing else is taken from the page.

Automatically, whether or not you sign in

• Analytics. The site uses Google Analytics, which records the pages you visit, approximate location derived from your IP address, and general device and browser information. It sets cookies to do this.
• Server logs. Our host records IP addresses and request details, as any web server does.
• Abuse prevention. The feedback form counts recent submissions per IP address in memory to stop flooding. These counts are not written to disk and disappear when the server restarts.

What stays on your device and never reaches us

• Recitation recordings. When you record yourself in a memorisation session, the audio is held in your device’s memory for as long as you are on that ayah and is destroyed when you move on. We never receive it, never store it, and could not retrieve it if we wanted to. See the note below on following your recitation, which is a separate thing and does leave your device.
• Surahs saved for offline use, including their recitation audio, which are stored in your browser’s own cache on your device.
• Your reading preferences — script, font size, translation language, reciter — kept in your browser’s local storage.

Following your recitation

In the memorisation step, the words can fill themselves in as you recite. To do that the app uses your browser’s own speech recognition, and in Chrome and Safari that recognition happens on Google’s or Apple’s servers rather than on your phone. So while you are reciting with that turned on, your browser sends the audio to them, under their privacy policies.

We are not in that path. We never receive the audio, never store it, and never see a transcript — the matching between what you said and the words on screen happens entirely inside your browser. But the audio does leave your device, which is why it only happens after you tap to start, and why the screen says so before it does.

If you would rather it did not, tap the words yourself as you recite: the step works exactly the same way, and the microphone is never opened.

Who else receives data

We do not sell your data, and we do not share it for advertising. The services below are used to run the site and receive data as a consequence of that:

• Supabase — the database and sign-in system that stores your account and progress.
• Vercel — hosting. Receives requests and IP addresses in server logs.
• Google Analytics — usage measurement, as described above.
• Google — only if you choose to sign in with Google.
• Google or Apple speech recognition — only while you are reciting with “record and fill along” turned on, as described above.
• Google Fonts — the Arabic and Latin typefaces are loaded from Google’s servers, which receive your IP address when a page loads.
• EveryAyah.com — the recitation audio is served from this archive, which receives your IP address when audio plays or is downloaded.

How long it is kept

Account data is kept until you delete your account. Feedback messages are kept while we deal with them and for a reasonable period afterwards. Analytics data follows Google’s own retention settings.

Deleting your account and your data

You can delete your account and everything attached to it — progress, bookmarks, reading position, plans and any feedback you have sent — from your account page. It happens immediately and cannot be undone. If you would rather we did it, email doctab.001@gmail.com from the address on the account, and it will be removed within 30 days. Surahs saved on your own device are cleared from the saved offline screen, or by clearing the app’s storage.

Children

The site is for a general audience and is not directed at children under 13. We do not knowingly collect data from them. If you believe a child has created an account, contact us and it will be deleted.

Your rights

Depending on where you live, you may have the right to see a copy of your data, correct it, delete it, or object to its processing. Contact us at the address below and we will act on it.

Changes

If this policy changes materially, the date at the top will change and the new version will be published here before it takes effect.

Contact

doctab.001@gmail.com, or through the contact page.