Privacy Policy
Last updated: June 11, 2026
This Privacy Policy explains how HafizAI ("HafizAI", "we", "us") collects, uses, and protects your information when you use our website and mobile applications (the "Service"). By using the Service you agree to the practices described here.
1. Information we collect
- Account information — your name, email address, role (individual, student, parent, teacher), and a securely hashed password. If you sign in with Google, we receive your name, email, and Google account identifier.
- Memorization & usage data — your Quran progress (juz/surah/page ratings), streaks, XP, daily goals, review schedules, classroom membership, and assignments.
- Payment information — handled entirely by our payment processor, Stripe. We never receive or store your full card number; we store only your subscription status and a Stripe customer identifier.
- AI interactions — messages you send to our in-app AI features are processed to generate responses.
- Recitation audio — our recitation features use on-device speech recognition. Audio is processed on your device to follow your place in the Quran; we do not upload or store your voice recordings.
- Analytics & device data — basic usage events, app/version, and approximate device information used to understand and improve the Service.
2. How we use your information
- To provide, personalise, and improve the Service (tracking, scheduling, leaderboards, coaching).
- To create and secure your account and authenticate you.
- To process subscriptions and send transactional emails (verification, password reset, welcome, streak and weekly summaries).
- To power AI coaching and (for teachers) classroom insights.
- To monitor reliability, prevent abuse, and comply with legal obligations.
3. Service providers we share data with
We share the minimum necessary data with trusted processors who act on our behalf:
| Provider | Purpose |
|---|---|
| Supabase | Database & account storage |
| Render | Application hosting |
| Stripe | Subscription payments |
| Resend | Transactional email delivery |
| PostHog | Product analytics |
| Groq | AI response generation |
| Optional sign-in (OAuth) |
We do not sell your personal information.
4. Children's privacy
HafizAI supports family and classroom use, including accounts for minors created and managed by a parent, guardian, or teacher. Child accounts are set up and overseen by a responsible adult. We do not knowingly collect personal information directly from children under 13 (or the equivalent age in your jurisdiction) without verifiable parental or guardian consent. A parent, guardian, or teacher may review, manage, or request deletion of a child's data at any time by contacting us or using in-app controls.
5. Data retention & deletion
We keep your data for as long as your account is active. You can permanently delete your account and associated data at any time from Settings → Delete account in the app, or by contacting us. Deletion removes your progress, stats, classroom membership, assignments, and sessions.
6. Security
Passwords are stored only as hashes, traffic is encrypted in transit (HTTPS), and access to production data is restricted. No method of transmission or storage is 100% secure, but we work to protect your information.
7. Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, contact us using the details below.
8. International users
Your information may be processed in countries other than your own, including the United States. By using the Service, you consent to this transfer.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by in-app notice.
10. Contact us
Questions or requests? Email support@hafizai.app.