Privacy Policy

1. No account

The Service has no account, no email address and no password. Your data is kept against an anonymous identifier for your device, which is created on the device the first time you open the app. Content you post in the community carries a separate public alias, so the identifier your app authenticates with is never published.

We do not sell your personal data and we do not build advertising profiles. On iOS we do ask, through Apple’s tracking prompt, for permission to use your device’s advertising identifier — solely to measure which marketing channel an install came from (Section 7). If you decline, the app behaves exactly the same.

2. What we collect

What you give us

• Profile — display name, username, short bio, and an emoji or an uploaded photo. These are shown to other people in the community. Uploaded photos are stored in our file storage and served from a public link.
• Setup answers — if you answer the optional questions when you first open the app: gender, age range, how much time you spend on your phone, how you heard about us, and the daily goal you set. You can skip every one of them, and none of them are shown in the community.
• Devotional activity — your streak and progress.
• Community content — posts, dua requests, comments and replies, 🙏 and ❤️ reactions, live-chat messages and their emoji reactions, testimonies you attach when you mark a request answered, and who you have blocked. Community content is public to other users. Each piece of writing is also stamped with the language it is written in, so it reaches the room that speaks it.
• Safety reports — when you report a post, comment, message or person, we store what you reported and the reason you chose.
• Cancellation reason — if you cancel a subscription and pick a reason, we store that choice and whether we showed you an offer. There is no free-text box, so nothing you write can end up here.
• Support requests — if you email us, we receive your message and the address you sent it from.

What we collect automatically

• Device identifier — the anonymous per-device identifier described above, plus the public alias attached to your content.
• Device and diagnostic data — platform, brand, model, device type, manufacturer, hardware generation, operating-system name and version, app version, and crash and performance reports.
• Language and notifications — your device language, and — if you turn notifications on — a push token so reminders and community notifications can be delivered. We also keep the notifications we sent you, so the in-app list survives a new phone.
• Usage data — which features are used and how the setup and subscription flows progress. Screen-by-screen telemetry is sampled: most devices report none of it at all.
• Subscription status — whether a subscription is active, which product, when it renews or expires. Payment is taken by Apple or Google; we never receive or store card details.
• Housekeeping — when you accepted the community rules, when the profile was created, and when the app was last opened.

What never leaves your phone

• The apps you choose to pause — the selection and its schedule are held by your operating system’s screen-time controls and stay on the device. We never receive the list of apps you blocked.
• Your location, if you use prayer times — the app asks for it only when you tap “use my location”, rounds it to about a kilometre, and works the prayer times out on the phone. A city you search for is looked up by your phone’s own maps service. We never receive either.
• Local state — drafts and settings.

3. How we use it

We use what is described above to:

• provide, personalise and maintain the Service;
• keep your streaks, progress and profile;
• run the community and its safety and moderation tools;
• deliver the notifications you asked for;
• process subscriptions, and prevent fraud, spam and abuse;
• diagnose faults and improve reliability;
• measure which marketing channel an install came from (Section 7); and
• comply with our legal obligations.

We do not sell your data or build advertising profiles. We do use automated screening: writing is checked before it appears, and content that breaks the community rules can be removed, and writing restricted for a period, without a person reviewing it first. You are always told what happened and why, restrictions lift themselves (Section 9), and you can reach a human at support@quranshield.app.

4. How we share it

We do not sell, rent or trade your personal information. We share it only:

• with service providers — that process data on our behalf to run the Service (Section 6);
• with the community — — what you post is public to other users, and a post or request you share carries a public link anyone with it can open;
• for legal reasons — where required by law, regulation or valid legal process;
• for safety — to protect the rights, property or safety of Quran Shield, our users or the public; and
• in a business transfer — if we are involved in a merger, acquisition or sale of assets, in which case we will notify you of any change to this Policy.

5. Automated screening

An AI provider (Google Gemini) screens longer community writing for content that breaks the rules, and a separate provider (fal.ai) checks uploaded profile photos for adult content — it receives the image itself. Please do not put details into a post or a photo that you would not want processed this way.

6. Who processes data for us

We rely on the processors below, and on no others. Each receives only what it needs for the purpose listed.

7. Measurement and advertising

We advertise the app, and we measure which advert brought an install. On iOS this begins with Apple’s tracking prompt. If you allow tracking, your device’s advertising identifier is shared with our attribution provider (AppsFlyer), and the install id it issues is passed to RevenueCat so a subscription can be credited to the right campaign. If you decline, measurement falls back to Apple’s own SKAdNetwork reporting, which is aggregated and does not identify you.

AppsFlyer is also told when an install reaches a marketing milestone — finishing setup, opening the subscription page, starting a trial, or subscribing, with the price — and passes those on to the advertising network that brought you. Your setup answers are never included in what is sent.

Separately, we use PostHog for product analytics (which features are used, how the setup and subscription flows progress) and Sentry for crash and performance diagnostics. Neither is used for advertising.

8. Religious belief and other sensitive information

Quran Shield is a religious app, so some of what it holds is sensitive by nature. One thing deserves to be said plainly.

What you write — a dua request, a post, a comment, a message — may itself reveal beliefs, health or other sensitive matters. You choose what to write and, for posts and requests, whether to write anonymously; anything you post in the community is public.

9. How long we keep it, and deleting your data

Some of this is enforced by a nightly job rather than by a promise:

• Live-chat messages — kept for 90 days, then deleted.
• Notification history — kept for 90 days, then deleted.
• Devices that never finished setup — deleted after 7 days.
• Profile, community content and progress — kept while your profile exists, and removed when you delete it or delete the item.
• Product analytics and crash diagnostics — kept by those providers for up to 12 months.
• Safety records — if content of yours was removed for breaking the community rules, that removal counts against you for 90 days, and a restriction lasts 7 days and at most 30 days. The record of the decision is kept even if you delete your profile — otherwise deleting and reinstalling would clear every restriction. It holds a date, the anonymous identifier and the removed text.
• Billing records — your subscription state and the purchase events behind it are kept after deletion as the record of a paid relationship; the reason you gave for cancelling is kept as aggregate feedback. Reports you filed about someone else’s content also remain, because they are about that content and not about you.

You can delete your profile at any time from inside the app (Profile → Delete account) or from quranshield.app/delete. Deletion is immediate and cannot be undone. It erases your profile and setup answers, your streaks and progress, your posts, dua requests, comments and reactions, your chat messages and reactions, your blocks, your notification history, and your uploaded photo — everything except the safety and billing records listed above.

10. Security

We use reasonable technical and organisational measures: encryption in transit (HTTPS/TLS), app-attestation checks so requests must come from a genuine copy of the app, access controls limiting who can reach user data, and a design that keeps the identifier you authenticate with separate from the alias your content is published under. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your rights

Depending on where you live, you have the right to access, correct, delete or export your personal data, and to withdraw consent. The in-app delete flow exercises deletion directly; for anything else, email support@quranshield.app and we will respond within 30 days.

United Kingdom and European Economic Area

• Controller — AKES Solutions Limited, Unit 501 Leroy House, 434-436 Essex Road, London, United Kingdom, N1 3FY, contactable at support@quranshield.app.
• Lawful bases — performance of a contract (providing the Service you asked for), our legitimate interests (keeping the Service working, safe and measurable), your consent (notifications, tracking, and the optional setup answers), and legal obligations (billing records).
• Your rights — access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. You may withdraw consent at any time, without affecting what was done before.
• International transfers — our providers operate globally; where data leaves the UK or EEA we rely on appropriate safeguards such as Standard Contractual Clauses.
• Complaints — you may complain to your local data-protection authority.

California

• Right to know — the categories and specific pieces of personal information we hold about you.
• Right to delete — your personal information.
• Right to correct — inaccurate personal information.
• Right to opt out — — we do not sell your personal information or share it for cross-context behavioural advertising.
• Non-discrimination — we will not treat you differently for exercising these rights.

12. Children

The Service is not directed to children under 13 (or the minimum age of digital consent where you live), and we do not knowingly collect their personal information. If you believe a child has given us information, contact support@quranshield.app and we will delete it.

13. International users

We operate the Service from, and rely on providers located in, several countries. By using the Service you understand that your information may be processed outside the country you live in, under different data-protection rules.

14. Changes to this Policy

We may update this Policy. When we do we revise the “last updated” date above and, for significant changes, give notice in the app.

15. Contact

Questions or requests about your privacy: AKES Solutions Limited, Unit 501 Leroy House, 434-436 Essex Road, London, United Kingdom, N1 3FY, or email support@quranshield.app.