Privacy Policy

1. Who We Are

NoorHifz ("we", "our", "us") is a Quran memorization tracking application operated as a digital product. Our contact email is hello@noorhifz.com. We are committed to protecting your personal data in compliance with applicable privacy laws including India's Digital Personal Data Protection Act (DPDPA) 2023 and international standards.

2. Information We Collect

We collect only the minimum information needed to provide you with NoorHifz services:

• Account information: Your name, email address, and password (encrypted) when you register
• Hifz data: Your memorization log entries, surah progress, revision dates, and session notes — all entered by you
• Preferences: Language selection, theme preference, daily page target, and target completion date
• Usage data: Basic analytics such as which features you use (no personal tracking)
• Device information: Browser type and device type for compatibility purposes only

We do NOT collect location data, contacts, microphone/camera access, or any sensitive personal information beyond what is listed above.

3. How We Use Your Information

Your information is used solely to:

• Create and manage your NoorHifz account
• Store and display your Hifz progress across devices
• Send account-related emails (registration confirmation, password reset)
• Improve the application based on aggregate usage patterns
• Respond to your support requests
• Process payments for Pro/Madrasa subscriptions (via Lemon Squeezy — see Section 6)

4. Data Storage & Security

Your data is stored securely using Supabase, an enterprise-grade database platform. We implement the following security measures:

• Row Level Security (RLS): Your data is cryptographically isolated — only you can access your own records
• Encrypted passwords: Passwords are never stored in plain text — we use bcrypt hashing
• HTTPS encryption: All data transmitted between your device and our servers is encrypted in transit
• No cross-user access: No user can ever see another user's Hifz data

5. Data Sharing

We will never sell, rent, or share your personal data with third parties for commercial purposes. We only share data with:

• Supabase: Our database provider (data processor) — bound by strict data processing agreements
• Lemon Squeezy: Our payment processor — only receives payment-related data, never your Hifz content
• Legal authorities: Only if required by law and only to the minimum extent required

6. Payment Data

NoorHifz uses Lemon Squeezy as our payment processor. Lemon Squeezy acts as the Merchant of Record, meaning they handle all payment processing, tax collection (GST, VAT), and billing. NoorHifz never stores your credit card numbers or banking details. For payment-related privacy, please also review Lemon Squeezy's Privacy Policy.

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of all data we hold about you
• Correction: Update or correct inaccurate data in your Settings page
• Deletion: Request complete deletion of your account and all associated data
• Export: Download your Hifz log as CSV at any time from Settings → Export CSV
• Portability: Your data belongs to you — export it anytime, no restrictions

To exercise any of these rights, email us at hello@noorhifz.com with the subject "Data Request".

8. Cookies & Local Storage

NoorHifz uses browser localStorage to store your preferences (language, theme, Hijri offset) and session tokens for login convenience. These are essential for the app to function. We do not use third-party tracking cookies or advertising cookies.

9. Children's Privacy

NoorHifz is designed for users of all ages including children learning Hifz under parental supervision. We do not knowingly collect data from children under 13 without parental consent. Madrasa plans where children use NoorHifz should be administered by adult teachers/parents.

10. International Users

NoorHifz serves users globally — particularly across India, Pakistan, Indonesia, Bangladesh, the Middle East, and beyond. By using NoorHifz, you consent to your data being processed in accordance with this policy regardless of your location. We comply with applicable local data protection laws in the countries we operate in.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice at least 14 days before the changes take effect. Your continued use of NoorHifz after changes constitutes acceptance.