Privacy Policy

Last updated: October 16, 2026

Hafiz is a non-profit Quran memorization app. This policy explains what the app stores locally, what is sent to optional services, and how you can delete it.

Local religious and app data

By default, Quran reading history, bookmarks, memorization progress, khatmah goals and logs, recitation session history, settings, cached content, downloaded audio, auto-bookmarks, and successful local voice recordings remain on your device. They are stored using the app's local databases, preferences, files, or secure storage and are not sent to Hafiz merely because you use the app.

On-device Whisper voice verification processes the recording on the device. A successful recording may be retained locally so you can replay it. You can remove local data from the app's settings where available, clear the app's data, or uninstall the app.

Quran Foundation sign-in and cloud sync

Cloud features are optional. If you sign in with a Quran Foundation (Quran.com) account, Hafiz uses OAuth 2.0/OpenID Connect with PKCE and requests access for account identity and the enabled Quran Foundation features, such as bookmarks, collections, reading sessions, goals, streaks, activity, preferences, notes, posts, search, and content.

The authorization code is exchanged through Hafiz's configured HTTPS backend; the Quran Foundation client secret is not shipped in the app. Access, refresh, and ID tokens are stored in the device Keychain or Android secure storage. Depending on the features you use, Quran Foundation receives the account and cloud data needed to provide those features under its own privacy policy.

Signing out revokes the session when supported and removes local tokens. The app's cloud-sync settings also provide a delete-data action for supported Quran Foundation data. Quran Foundation controls data held in its service.

Device sync with Google or Apple

Device sync is optional. If you sign in with Google or Apple, Firebase Authentication receives your account's user ID, name and email address, and Cloud Firestore stores a copy of your bookmarks, memorization progress, recitation errors, reading history and position, and goals so they appear on your other devices. You can also sync without signing in by using a link code. This data is sent over encrypted connections, is used only to provide sync, and is not shared or used for advertising.

You can delete your sync account and its cloud data at any time in Settings → Sync across devices → Delete account, or by following the steps at hafiz-app-delete-account.web.app.

Voice verification services

Hafiz can use either on-device Whisper or the optional Qurani.ai QRC provider for recitation feedback. QRC receives live microphone audio and returns recitation feedback through its service; use the on-device provider if you do not want audio sent to that provider. Local recordings are not uploaded by the on-device Whisper path.

Firebase services

• Firebase Analytics receives app and feature interaction events and limited app-state properties used to understand and improve the product.
• Firebase Crashlytics receives crash reports, diagnostic logs, and device/app context to diagnose stability problems.
• Firebase Performance Monitoring receives timings such as how long screens and downloads take, with device/app context, to find slow parts of the app.
• Firebase Remote Config receives the app's request for configuration, such as minimum-version and feature-display values.

You can turn Analytics, Crashlytics and Performance Monitoring off at any time: Settings → "Share anonymous usage and crash reports" (from version 4.0.6). When it is off, Hafiz stops sending these and deletes crash reports that have not been sent yet. Hafiz does not link this data to your name or account, and it never includes your voice or recordings.

Hafiz disables Firebase ad storage, ad user data, and ad personalization signals. Firebase services are not used by Hafiz for advertising or cross-app tracking. Firebase may process technical identifiers and diagnostics as described in Google's privacy documentation.

Age Signals (Android only)

On Android, Google Play Age Signals is checked during app initialization when supported. The result is cached in memory for the current app session and used only to decide whether cloud sync or voice verification needs parental consent. Hafiz does not send the result to its servers, use it for analytics or advertising, or persist it as an account profile. An unavailable or unsupported result is not treated as a confirmed minor status.

Content delivery and third parties

Anonymous requests may be made to Quran Foundation content services and the EveryAyah CDN to load Quran text, translations, tafsir, recitations, or page images. These requests contain the resource being requested, not your local religious history. The app may link to third-party sites whose policies apply independently.

Retention, deletion, and contact

Local data remains until you delete it, clear app data, or uninstall. Tokens remain until sign-out, revocation, expiry, or deletion. Data held by Quran Foundation, Firebase, or QRC is retained under those providers' policies.

For privacy or deletion questions, contact motazhamada@gmail.com. You may also review the source at github.com/moatazhamada/HafizApp.