Privacy Policy

Effective: 4 October 2026 · Last updated: 25 October 2026 · Applies to the Sudur (صدور) app on Android and iOS and to sudur.app.

Sudur is provided by an individual developer, Mohammad Otaqi (Amman, Jordan), who is responsible for your data. We collect as little as possible: only what is needed to keep your memorization progress and to grade your recitation. We do not sell your data, and we never use your memorization progress or recordings for advertising.

Sensitive data

Your Quran memorization progress can reveal your religious beliefs, so we treat it as sensitive data. We only store it on our servers with the explicit consent you give in the app, and you can withdraw it and delete your account at any time.

What we collect and why

• Guest account: a random identifier and sign-in token, so your progress is saved without signing up.
• Email, password and name (optional): to restore your progress on another device. Your password and recovery code are stored hashed; we cannot read them.
• Memorization progress: memorized ayat, recitation results, streak, current position and daily target.
• Recitation audio: sent to our server to be transcribed and compared with the ayah, then deleted as soon as grading finishes. We keep no recordings and never use them to train any model. Transcription runs on our server; if that is unavailable, the clip may be processed by Google Gemini for this purpose only.
• Smart memorization plan (if you use it): the parts and duration you type are sent to Google Gemini to build the plan, without your account data.
• Halaqa (if you join one): the teacher sees the name you enter, how much you have memorized, your last activity and your latest recitation results. Students see the teacher's first name.
• Subscription and support: payment happens through Google Play or the App Store; we never see your card details. RevenueCat tells the app whether you are subscribed, using an anonymous identifier that is not linked to your account.
• Approximate location (with your permission): to calculate prayer times and the qibla. Computed on your device, and may be sent to the AlAdhan service to fetch a timetable. We do not store your location.
• Contact messages: your message, the contact detail you choose to give, the app version and platform. They also reach us by email.

Advertising

The app shows Google AdMob ads in a few places only, and never in the Mushaf, during recitation or in the athkar. We request family-safe ads. AdMob may use your device's advertising ID. In the EU and UK we ask for your consent first, and on iOS ads are only personalized if you allow tracking. You can change your choice in More → Privacy options or in your device settings.

Quran content

The app uses the Quran Foundation APIs (Quran.com), AlQuran Cloud, EveryAyah and others to fetch the Quran text, translations, tafsir and recitations. These requests carry no account data. See Sources and credits.

Who processes data for us

• Server and database hosting: Hetzner (Nuremberg, Germany).
• Encrypted connection, website and email routing: Cloudflare.
• Ads, Gemini and email (Gmail): Google.
• Subscription status: RevenueCat.
• App stores and payments: Google Play and Apple.

Some of these services may process data outside your country (for example in the United States) under their approved contractual safeguards, such as the EU Standard Contractual Clauses.

Retention and security

Data travels over an encrypted connection (HTTPS) and is stored on our server with restricted access; the admin panel is not reachable from the internet. Your account is kept while you use the app. When you delete it, your data is erased from the database immediately and disappears from backups within 14 days. We delete contact messages from our mailbox on request. If a security incident affects your data, we will act on it immediately and inform you.

Your rights

You can ask for a copy of your data, its correction or deletion, withdraw your consent, or object to processing. Delete your account in More → Delete account or on the account deletion page; for anything else, email us. We reply within 30 days. You may also complain to the data protection authority in your country.

Children

The app is family-friendly but not directed at children under 13. Younger children should use it, and join a halaqa, under a parent's or guardian's supervision. We do not knowingly collect personal data from children without parental consent, and delete it if we learn of it.

Changes

If we make a material change to this policy, we will tell you in the app and update the "Last updated" date above.

Contact

In the app: More → Contact us, or [email protected]. Postal address: Amman, Jordan.