Privacy Policy

This policy covers the mobile apps published by Al Marfa Technologies — currently Al Quran and Sharah Kitab at-Tawheed — and this website, kitabattawheed.com. Our apps are built to be private by design: there are no accounts, no advertising, no third-party analytics or crash-reporting SDKs, and no advertising trackers. Al Quran uses a narrowly scoped first-party, anonymous Search analytics service on Android; Sharah Kitab at-Tawheed does not use app analytics.

The short version

• We do not collect your identity, searches, reading positions, location, bookmarks, or advertising identifiers.
• Everything an app remembers (your place in the text or audio, bookmarks, downloads, and settings) is stored only on your device.
• Your location never leaves your device — it is used only by Al Quran to calculate prayer times locally.
• Al Quran for Android sends anonymous Search interaction and coarse performance counts by default. You can disable this in Settings.
• Other network activity is content you ask for: streaming or downloading audio, and fetching an app's catalogue. No identifiers or accounts are sent.

What the apps store on your device

To make reading and listening comfortable, the apps keep small files locally: your last position, bookmarks, downloaded audio, and your preferences (language, theme, font size, and similar). In Al Quran this also includes your reminder and reading-light settings; in Sharah Kitab at-Tawheed it includes your lecture progress, downloaded lectures, and study progress. This data stays in the app's private storage and is removed when you uninstall the app. Al Quran's anonymous analytics queue is described separately below.

Anonymous Search analytics (Al Quran for Android only)

Al Quran records a closed set of anonymous events so we can tell whether Search is fast and useful: opening Search, submitting and completing a search, opening a result, the Detailed reader becoming ready, and leaving that reader handoff. It sends only coarse buckets such as query length, result count, latency, rank, source kind, dwell time, and app/build version. It never sends search text or hashes, Qur'an positions, translation or reciter names, bookmarks, reading history, location, account data, advertising IDs, or a stable device, installation, or session identifier.

Events wait in a small bounded on-device queue and upload over HTTPS when the app is idle or backgrounded, normally no more than once per day. Cloudflare processes these requests for us. Like any internet service, Cloudflare receives transient network metadata such as an IP address to deliver the request; our analytics service does not copy it into the analytics dataset or log the request body.

To prevent a lost network response from counting the same upload twice, each upload carries a new random batch code. The same code is reused only when retrying that exact upload; it is never reused as a device, installation, account, or session identifier. Cloudflare D1 keeps this code only for retry deduplication. It expires after eight days, and daily cleanup removes it within the following day. Apart from this short-lived operational receipt, we retain only aggregate daily counters. Neither can be traced back to a person or device.

Disable this at any time under Settings → Help improve Search. Doing so stops future collection and deletes queued events. Sharah Kitab at-Tawheed and the iOS build of Al Quran do not currently send app analytics.

When the apps use the internet

Both apps work offline. Apart from Al Quran's anonymous Android analytics described above, when you actively request online content the app makes a standard web request to fetch it. Nothing is uploaded with these content requests:

• Al Quran — optional recitation and downloadable content are fetched from Al Quran's Cloudflare-hosted content network and supported source providers, then cached where appropriate for offline use.
• Sharah Kitab at-Tawheed — the lecture catalogue and lecture audio are fetched from our own content network on kitabattawheed.com (Cloudflare) when you browse, stream, or download a lecture.

As with any web request, the server providing that content sees the request's IP address and which file was asked for — this is inherent to how the internet works. The apps send no user identifiers, accounts, or advertising identifiers along with content requests. Cloudflare's practices are described in its privacy policy.

Location (Al Quran only)

If you use prayer times in Al Quran, the app asks for your device's location. Prayer times are calculated entirely on your device; your location is not sent to any server. If you decline the permission, the rest of the app works normally. Sharah Kitab at-Tawheed does not request location at all.

Notifications

All notifications are local — scheduled and shown by your device, never pushed from a server. Al Quran uses them for Sunnah and prayer-time reminders (and on Android may request the exact-alarm capability so reminders fire on time); Sharah Kitab at-Tawheed uses them for download progress and audio playback controls. No notification data leaves your device, and neither app uses push notifications.

What we don't do

• No third-party analytics or crash-reporting SDKs in the apps.
• No search text, Qur'an positions, reading history, or stable identifiers in Al Quran's first-party analytics.
• No advertising and no advertising identifiers.
• No accounts, sign-ins, or cloud sync.
• No selling or sharing analytics data and no advertising profiles.

This website

This site (kitabattawheed.com) uses Cloudflare Web Analytics, which is cookieless and measures only aggregate, anonymous traffic (such as page views and referrers) — it builds no cross-site profile of you and sets no tracking cookies. On-site search runs entirely in your browser. The site shows no ads.

Children

Both apps are suitable for all ages and are listed for a general 13+ audience. Al Quran's anonymous Android analytics does not collect names, contact details, identifiers, precise location, searches, or reading history from any reader, including children who may use the app.

Deleting your data

Uninstalling removes local preferences, downloads, and queued analytics events. Al Quran's analytics switch deletes its queue without requiring an uninstall. Server-side analytics consists of anonymous aggregate counters plus the short-lived random deduplication receipt described above, so there is no account, device record, or personal profile to locate or delete.

Changes to this policy

If a future version of an app changes any of the above (for example, a new online feature), we will update this policy and revise the date above before that version ships.