Privacy Policy

We only collect what we need to run the Service:

• Account details. Your name, email address, and password. Passwords are handled and securely hashed by our authentication provider (Supabase) — we never see or store your password in plain text.
• Onboarding answers.Optional information you share when setting up your account, such as your goals and your relationship with the Qur’an, used to tailor your experience.
• Your content. Reflections, notes, bookmarks, reading sessions, reading goals, and any reviews you submit.
• Payment information. Membership payments are processed by Stripe. We do not receive or store your full card number — we only keep Stripe identifiers (such as a customer and subscription ID) needed to manage your membership.
• Usage & device data. Basic analytics about how the Service is used (e.g. pages visited, features used, approximate region, device/browser type) to help us understand and improve the product.
• Marketing preferences.Whether you’ve opted in to receive product or marketing emails.

• To provide, maintain, and personalise the Service and your account.
• To save and sync your reflections, notes, bookmarks, and progress across devices.
• To process payments and manage your membership.
• To communicate with you about your account, including important service notices.
• To send product updates or marketing emails, only where you’ve opted in.
• To understand usage, fix problems, and improve the Service.
• To protect against fraud, abuse, and security threats, and to comply with the law.

We don’t sell your personal data. We share it only with trusted providers who help us run the Service, and only to the extent needed:

• Supabase — database, authentication, and secure storage of your account and content.
• Stripe — payment processing and billing.
• PostHog — privacy-conscious product analytics.
• Netlify — website and application hosting.

Each provider processes data under its own privacy and security terms. Some are based outside your country (for example, in the United States), which means your information may be transferred and stored internationally with appropriate safeguards in place.

We keep your personal data for as long as your account is active. When you delete your account, we permanently remove your personal data and the content tied to it, except where we’re required to retain certain records (for example, transaction records kept by our payment processor for legal and accounting purposes). Reviews you’ve posted publicly may be retained in anonymised form, no longer linked to your identity.

You have the right to:

• Access & export. View your data and export your reflections journal at any time from Settings.
• Correct. Update your name, email, and preferences from Settings.
• Delete. Permanently delete your account and associated data from Settings → Delete account, or by emailing us.
• Withdraw consent. Opt out of marketing emails at any time.

To exercise any of these rights, or if you have questions, contact us at myrootedquran@gmail.com.

We use reputable infrastructure providers and industry-standard measures to protect your data, including encryption in transit and hashed passwords. No method of transmission or storage is ever completely secure, but we work to keep your information safe and to address any issues promptly.

The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we’ll update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.

If you have any questions about this Privacy Policy or how we handle your data, reach us at myrootedquran@gmail.com.