Overview
Hey Hudhud ("we", "us") is a mobile app for reading, listening to, practicing, and memorizing the Quran. We believe worship is personal, and so is your data. This policy explains exactly what we collect, why, where it is stored, and the choices you have.
We collect the minimum needed to save your progress and improve the app. We do not sell your data, and we do not show ads.
What we store
When you create an account or use the app, we store:
- Account basics — your name (or nickname) and email address, used to sign you in and sync across devices.
- Learning progress — which ayahs and surahs you've read, memorization status, and lesson completion.
- Practice stats — streaks, XP, daily goals, and achievement badges.
- Bookmarks & notes — verses you save and personal reflections you add.
- Preferences — chosen reciter, translation, playback speed, and whether Kids Mode is enabled.
What we never store
The Quran text itself is public content and is bundled with or streamed to the app — we never treat it as your personal data. We do not store your contacts, photos, precise location, or any content unrelated to your use of Hey Hudhud.
Where your data lives
Your account and progress data are stored using Supabase, our database and authentication provider. This data is hosted in the European Union (Ireland) and protected in transit and at rest with industry-standard encryption.
Because hosting is in the EU, your data is handled in line with the General Data Protection Regulation (GDPR).
Analytics & crash reporting
To understand which features help people and to fix problems quickly, we use Google Firebase for anonymous usage analytics and crash reporting. This may include:
- App events (e.g. "lesson started"), device model, OS version, and app version.
- Crash logs and diagnostic data when the app misbehaves.
This information is aggregated and is not used to identify you personally. You can opt out of analytics at any time in Profile → Settings → Privacy.
Children & family accounts
Hey Hudhud is a general-audience app for ages 13 and up. Children under 13 can use it only through a child profile that a parent or guardian creates and controls from their own account. A child cannot register on their own — a parent sets up the child profile using an enrollment code. Creating a child profile means the parent consents to the practices below; this is the parental consent required by the U.S. Children's Online Privacy Protection Act (COPPA) and by GDPR Article 8.
What we store for a child profile
- Setup details from the parent — the child's year of birth (used only to choose an age-appropriate learning path), an optional nickname, and a coarse region and time zone.
- Learning activity — progress, memorization cards, streaks, XP, achievements, bookmarks, and screen-time usage so the parent can set daily limits.
- Voice — only if the parent enables “Recite & Check” — short recitation audio is transcribed and scored, then immediately discarded. We never store the audio recording. This feature is off by default, and the parent records an explicit consent to turn it on.
- Questions — only if the parent enables “Ask the Quran” — a typed question is processed to return references to verses. This feature is off by default and parent-controlled.
What we never collect from children
- No advertising identifier — the app requests none and shows no ads.
- No precise location, biometric data, phone number, or contacts.
- We never use children's data for advertising or profiling, never sell or rent it, and never use it to train AI models.
Who we share it with
Only the service providers needed to run the app, under contract, and never for advertising:
- Supabase — database & sign-in hosting, in the European Union (Ireland).
- Google Firebase (Crashlytics) — crash diagnostics, with no user identifiers attached. Usage analytics are turned off for child profiles.
- Google Cloud Speech-to-Text — transcribes “Recite & Check” audio when the parent enables it; the audio is not retained.
- Cloudflare — delivers Quran text and audio content; it does not receive the child's personal data.
How long we keep it
Only while the child profile is active. When a parent deletes the profile or the account, the data is removed from our active systems and from backups within 30 days. Recitation audio is never retained.
Parental rights
A parent or guardian can review, correct, or delete the child's profile and data, withdraw consent, and turn features on or off from the family controls at any time. To make a request, email [email protected]; we respond within 30 days.
Because the digital age of consent varies across the EU (13–16), Hey Hudhud relies on parental consent for every child profile regardless of country. If you believe a child's data was collected without appropriate parental consent, contact us and we will delete it promptly.
Your rights
Under GDPR and similar laws, you may:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Export your data in a portable format.
- Delete your account and associated data — see our Account Deletion page.
Retention & deletion
We keep your data for as long as your account is active. When you delete your account, your personal data is removed from our active systems, and from backups within 30 days. See the Account Deletion page for step-by-step instructions.
Contact
Questions about privacy or a data request? We're glad to help.