Legal
Privacy Policy
Last updated: 24 August 2026
This Privacy Policy explains how Hifz Mastery handles information when you use our mobile app and related website services. It is written to reflect how the product currently works. It is not legal advice.
1. Who We Are
Hifz Mastery is operated by Waseelah Ltd.
- Website: https://hifzmastery.app
- Privacy contact: contact@hifzmastery.app
2. Information We Collect
We collect and process information needed to run Hifz Mastery. The categories below reflect what the app and website currently store or transmit.
Account and authentication
- When you use the app, we create an anonymous account with our backend provider (Supabase). This gives your device a unique user ID so features such as cloud sync, the leaderboard, and in-app feedback can work.
- You may optionally link an email address to that same account (for example to help back up or restore access). Linking email does not create a separate identity; it attaches the email to your existing user ID.
- You may use a magic-link / one-time email sign-in to restore an existing email-linked account on another device. We store short-lived local auth-intent information on the device while that process is in progress.
- We do not currently provide editable display names or public profile pages. On the leaderboard, other users see a generic label derived from your user ID (for example “User” plus a short code), not your email address.
Hifz learning and progress data
To operate the revision tracker, the app stores information such as:
- Memorisation setup and revision progress (including quarter and/or surah tracking)
- Revision logs and related history
- Mistake and mistake-review information you record
- Follow-along recitation session timing (duration and timestamps; not audio recordings)
- Bookmarks and mutashabihat practice/progress data
- Planner / schedule-related data generated by the app
Preferences and settings
- App settings (for example theme, tracking mode, schedule preferences, and mistake thresholds)
- Mushaf layout, last page, and font-size preferences
- Tour / onboarding completion flags
- Daily reminder on/off state and reminder time
Leaderboard data
If you use the app while signed in (including anonymously), we may sync aggregate statistics such as quarters logged, recitation time totals for selected periods, and current streak information so rankings can be shown to other users of the app.
Feedback and support messages
If you contact us through the in-app feedback feature, we store the conversation and the message text you send, linked to your user ID, so we can respond.
Website waitlist
If you join the waitlist on our website, we collect the email address you submit for launch or product updates.
What we do not collect through the app (based on current code)
- We do not use third-party advertising SDKs in the app
- We do not use third-party analytics or crash-reporting SDKs in the app
- We do not sell your personal information
3. How We Use Information
We use the information described above to:
- Operate and improve Hifz Mastery
- Save, display, and update your progress and preferences
- Sync and restore your data across devices where that feature is available
- Provide leaderboard functionality
- Respond to feedback and support requests
- Send local daily revision reminders when you enable them
- Email waitlist subscribers about the product when relevant
4. Microphone and Speech Recognition
Hifz Mastery may request microphone and speech-recognition permission so the app can follow along with your recitation and support related features (such as voice verse search).
- Hifz Mastery does not store or upload your audio recordings to our servers or to Supabase. Recitation “sessions” that we save are timing metadata only (for example start/end time and duration).
- Speech recognition is performed through the device’s platform speech services (via the Expo Speech Recognition integration). Depending on your device and language support, recognition may run on-device or may use the platform’s network-based speech service.
- When network-based recognition is used, audio may be processed by Apple, Google, or another platform speech provider according to that provider’s terms and privacy practices. Hifz Mastery does not control those third-party services.
- Transcripts produced for follow-along are used in the app session to track position in the text; they are not saved by Hifz Mastery as a lasting speech archive.
5. Notifications
If you enable daily reminders, the app schedules a local notification on your device (for example a gentle nudge if you have not logged revision that day). You can turn reminders off in the app. You can also change notification permission in your device settings at any time.
6. How Data Is Stored
- On your device: Much of your Hifz progress, settings, and related data is stored locally on the device so the app can work even when offline.
- In the cloud: When you have an account session (including an anonymous session), selected data is synced to our backend (Supabase) so features such as sync, restore, leaderboard, and feedback can work.
- We use industry-standard transport security (HTTPS) for network requests made by the app and website. We do not claim that any system is perfectly secure.
- We do not state a specific hosting country for cloud data in this policy because that can depend on our service provider’s configuration and may change.
7. Sharing and Service Providers
We do not sell your personal information. We do share or process data with service providers where needed to run the product, including:
- Supabase — authentication, database storage for synced app data, feedback messages, leaderboard statistics, and website waitlist submissions
- Apple and/or Google platform services — app distribution, device notifications, and (where applicable) speech recognition
- Expo / EAS — app build and update infrastructure that may be used to deliver the app or over-the-air updates
- Website hosting / CDN providers used to serve hifzmastery.app
- Cloudflare Web Analytics on the website — aggregate traffic measurement for the public site (separate from the mobile app)
These providers process information on our behalf or as independent controllers of their own platform services, according to their terms. Leaderboard statistics are visible to other app users; they do not include your email address.
8. Data Retention and Deletion
- While your account remains active, we generally keep the cloud data associated with that account so the app can continue to sync and restore your progress.
- The app includes a local “Erase All Data” option that clears app data stored on that device. That action does not by itself delete your cloud account or all cloud-held copies of your data.
- There is currently no in-app button that fully deletes your account and all related cloud data. To request deletion of your account and associated personal data, email contact@hifzmastery.app.
- We will aim to handle deletion requests within a reasonable time. Deletion is not instantaneous, and some residual copies may remain for a limited period in backups or logs until those systems rotate.
9. Your Privacy Rights
Depending on where you live, you may have rights under applicable privacy laws (including UK data protection law). These may include rights to ask for access to personal data we hold about you, to ask us to correct it, to ask us to delete it, or to object to or restrict certain processing.
To make a request, contact us at contact@hifzmastery.app. We may need to verify your request before acting on it.
10. Children
Hifz Mastery is a Qur’an revision companion and may be used by families, including young people who are memorising. The app does not currently include an age gate or parental-consent flow.
If you are a parent or guardian and believe a child has provided personal information that should be removed, contact us at contact@hifzmastery.app and we will review the request.
11. Security
We take reasonable technical and organisational steps to protect information, such as using authenticated access controls for cloud data and encrypted connections for network traffic. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will publish the revised version on this page and update the “Last updated” date above. Continued use of Hifz Mastery after an update means you should review the latest version of this page.
13. Contact Us
Questions about this Privacy Policy or your data:
- Email: contact@hifzmastery.app
- Website: https://hifzmastery.app
- Operator: Waseelah Ltd