Privacy policy

In short

The app helps a learner memorise the Qur'an, card by card, under the eyes of a mentor and a guardian. It is free, with no ads, no in-app purchases and no trackers. It asks for neither the microphone, nor the camera, nor your location. A child exists in it under a travel name (a pseudonym) — no real name, no email address, no date of birth. Data is hosted in the European Union. Everything can be deleted from within the app, by yourself.

1. Who is responsible

The data controller is Association Bitaqat, a non-profit association under the French law of 1 July 1901, [registered address], [postcode] [town], RNA no. [W…], publisher of the app on the app stores.

For any question or request about your data:stores@bitaqat-hifd-quran.com.

2. Three roles, and what each one shares

The adult account — mentor or guardian

Only adults have an account with contact details. We keep:

• your email address and your password (hashed, never readable by us);
• a display name you choose — the only thing shown to other users (never your email);
• your language and your notification preferences (eight categories);
• the push token of each device on which you accepted notifications.

If you choose "Sign in with Google" or "Sign in with Apple", we receive from that service a technical identifier and the email address linked to your account (Apple may offer you a relay address that hides yours). We receive nothing else and write nothing to your Google or Apple account.

The learner profile

A learner has no account: their device connects through an anonymous session, with no email address. Their profile holds:

• a travel name (pseudonym) and an avatar chosen in the app;
• a minor or adult declaration (yes/no, no date of birth);
• the placement profile from the starting questionnaire (what they can already recite);
• their progress: cards, boxes, validation requests, assessments received, due dates, badges, rewards, revision programme;
• their sessions: one date per day of actual use, never a duration;
• their in-app inbox.

A learner never types free text: their requests use predefined messages. Free text written by adults (recommendations, rewards) is visible only to the learner concerned, their mentor and their guardians.

What the app does not collect

No child's real name, no date of birth, no phone number, no postal address, no location, no contacts, no photo, no audio or video recording, no advertising identifier, no usage duration. No microphone or camera permission is requested from the system — this can be checked in the app manifests.

3. Why, and on what legal basis

We make no automated decision about you, build no profile for commercial purposes and show no advertising. Usage measurement is limited to aggregate, anonymous counters with no individual profile.

4. Children

The app is meant for learners who are often minors, and it is built for that:

• a guardian (a parent or a trusted adult chosen by the family, never by the mentor) must approve the pairing of a minor with a mentor; without that approval, nothing flows between them;
• the guardian sees every interaction and can revoke the pairing at any time;
• only the guardian can delete a minor's profile; a mentor never can;
• notification content never shows the travel name on the lock screen;
• on a shared device, only the adult account registers a push token.

If you believe a profile was created for a minor without a responsible adult's agreement, write to us: we will treat it as a priority.

5. Who sees what

• The learner sees their own journey.
• The paired mentor sees their learners' progress, requests and assessments, and the guardian's display name.
• The paired guardian sees everything about their learner.
• We (the association and the app's author) access data only to run the service, answer a request or fix an incident.

We do not sell, rent or pass on any data to anyone.

6. Where the data lives, and who helps us

Transfers outside the European Union are covered by the safeguards provided for by the GDPR (standard contractual clauses or an adequacy decision) and limited to what is strictly necessary — for notifications, a technical token and a catalogue label.

We keep a dated copy of each provider's data processing agreement; where a provider does not publish one, we ask for it.

7. For how long

A deleted adult account does not take its learners with it: an adult is a teacher or a guardian, never an owner. Their profiles go back to "waiting for a teacher", and the assessments already given stay in their history, without an author's name.

8. Your rights

You have the rights of access, rectification, erasure, portability, objection and restriction. For a minor, they are exercised by the guardian.

• From the app: Settings → Delete my account (adult); Settings → Delete my profile (adult learner); child's page → Delete this child's profile (guardian), with a signed export of the journey handed over on the device for portability — never sent by email.
• Without the app (uninstalled, lost phone): the Delete an account or a profile page on the website. Every request is verified and processed by hand, and we reply to you before any deletion.
• By email: stores@bitaqat-hifd-quran.com.

You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority of your own country.

9. Security

Encryption in transit (TLS) and at rest with our host; hashed passwords; access rules enforced by the database itself, row by row, according to role; invitation codes that cannot be guessed, single-use, with limited attempts; logging of sensitive actions; no secrets inside the installed app. Irreversible actions (deletion, revocation) require the adult's password, never the simple adult gate.

10. Notifications

The app tells you what needs your attention (validation request, verdict, due date, reward, pairing). Each category can be switched off in the account settings; switching off means "stop ringing" — the information stays readable in the app's inbox. No promotional notification, ever.

11. Changes

We will update this page if the app or our providers change. The date at the top is the reference; a significant change is announced in the app.

12. Contact

Association Bitaqat — [registered address], [postcode] [town] —stores@bitaqat-hifd-quran.com.