What we collect

Three things, and only when we genuinely need them:

Data	When	Why
Device identifier (IDFV)	Always (per install)	Lets the audio-server know your install is licensed when you fetch an ayah. Reset by reinstalling.
Email address	If you sign in with Apple	Identifies your account so we can restore your subscription across devices. We never email you marketing.
Apple subscription receipt	If you subscribe	Verifies your entitlement with Apple's servers. We don't store the receipt ourselves — Apple's StoreKit handles it.

What we don't collect

• We never record audio of your voice or your recitation.
• We never read your contacts, photos, calendar, location, microphone, or any other system data.
• We don't track which ayahs you're memorising, how often you practice, or which reciters you prefer — that all stays on your device.
• We don't sell, rent, or share any of your data with advertisers.

How we use what we have

The device identifier is sent with every audio request so our server can confirm your install is allowed to download the file. The email (if you signed in with Apple) is stored in our subscription database so a fresh install can restore your access. That's it.

We don't profile you, segment you, or build analytics dashboards from your behaviour. Your practice habits belong to you.

Third parties

• Apple — handles Sign in with Apple, StoreKit subscription billing, and CloudKit if you've enabled iCloud backup. Their privacy policy applies.
• Supabase (our backend) — runs the signed-URL service that hands out audio links. Stores only the device identifier and (if signed in) email. Hosted in the United States.
• Audio CDN — hosts encrypted MP3 files for each reciter. Sees only the signed-URL request, not who you are.

Data retention & deletion

If you uninstall the app, your device identifier becomes orphaned in our database (no longer tied to an active install). If you'd like us to delete it explicitly along with any associated subscription record, email us at the address below and we'll do it within 30 days.

For Sign in with Apple users, you can revoke our access entirely from Settings → Apple ID → Sign-in with Apple → Hifz Musaa'id → Stop using Apple ID. This unlinks your email immediately.

Children

Hifz Musaa'id doesn't knowingly collect personal data from children under 13. The app is rated 4+ on the App Store and contains no advertising or social features. Parents who want to manage their child's subscription can use Apple Family Sharing.

Changes

If we make a material change to this policy, the next app update's release notes will mention it. The version date below tells you when this page was last revised.

Contact

For privacy questions or data deletion requests, email privacy@hifzmusaaid.com.

Last updated: November 2026.