Privacy Policy — Al-Mushaf Al-Raqmi

In short

• No ads, no tracking, no selling of data. We use no advertising ID, no third-party analytics tools in the app and no cookies. On the mus7af.com website there is only a cookieless, aggregate visit count (section 3e).
• Most of your data stays on your device and never reaches us: your reading, settings, profiles, the kids' stars and the student list.
• Only four things reach us:
  • The install report: it is pseudonymous (no name), and you can turn it off and delete it.
  • Licence data: only if you activate a paid feature with a code.
  • Family sync: only if you set it up yourself. You can delete it at once.
  • Your request from the website's form: only if you send it yourself, and only to answer you.
• «Contact us» (support) messages: only if you write them yourself from your web account; they are kept on our own servers only (with the screenshot if you attach one, and your device's «support code» only if you agree to attach it) until the conversation is closed plus 90 days, and you can delete them at any time on the same page.
• You can delete your data in the app, on mus7af.com/delete-data, or by writing to us.

Who we are (the controller)

• App: «المصحف الرقمي» (mus7af) on Android, Android TV, Samsung and LG TVs and the web, and the website mus7af.com.
• Contact for anything about privacy: [email protected]

1) The install report

When it is sent: when the app starts, and once a day. On first run, a notice offers "OK" and "Turn off". Nothing is sent before you answer it.

What it contains:

• A random install id that the app makes on first run, e.g. tv-k3j9x0q2ma. It does not contain your name or number.
• The device: its type and model (e.g. Samsung QE65S90D), the platform, the app version and the interface language.
• The screen: its orientation, resolution and pixel density, and its size and panel type when known.
• The city and country only:
  • this is the prayer-times city you chose from the list;
  • if you chose none, Cloudflare's network estimates it roughly;
  • coordinates and GPS location are never sent, even if you use "my location" for the prayer times.
• The screen name, if you typed one (e.g. "Neighbourhood mosque — screen 1").
• General counts:
  • the number of profiles in each mode (kids, night…), counts only, with no names;
  • the TV-mode minutes, rounded to ten.
• The hashed device id used for licences (see section 2). It links the report to a licence, if there is one.

Why: to know how many installs there are, which devices and versions are used, in which cities the app is used, and which screens have stopped. We use this to fix bugs, support devices and serve mosques.

Legal basis: our legitimate interest in running and improving the app, with your right to turn the report off at any time.

Retention: an install's record is deleted automatically when no report has come from it for 12 months.

Turning it off and deleting it:

• Turn the report off with "Send the install report". It is in:
  • TV settings › ☁ Install & licence;
  • or "Appearance" in the mushaf;
  • or the phone remote.
• When it is off, no report is sent.
• The "Stop install reports and delete the record" button, in the first two places, turns the report off and deletes this install's record from the server at once.
• You can also delete it on mus7af.com/delete-data with the install id. The id is shown in the same settings.

2) Licences (paid features)

When: only if you activate a paid feature with an activation code.

What is stored:

• A hash of the activation code (SHA-256), not the code itself.
• The hashed device id:
  • this is a SHA-256 hash of the device's identifier: the ANDROID_ID on Android, the DUID on Samsung, and the install id elsewhere;
  • the raw identifier is never sent, and neither is the MAC address.
• The install id, the platform, the model, the city and country, and the activation time.
• The times and number of licence checks (every 3 days), and the licence status.
• Purchase data: if you bought the code from us directly, we keep what invoicing and support need, such as a name and a way to contact you.

Why: to tie paid features to licensed devices, to stop them being redistributed, and for support and accounting.

Legal basis: performing our contract with you (the licence), and our legal accounting and tax obligations.

Retention:

• Kept while the licence runs, then for 24 months after it ends or is revoked, then deleted automatically.
• Sales records and invoices are kept for the period that accounting and tax law requires.

Licence checks continue after the install report is turned off, because the paid feature needs them to work. To have the data of an ended licence deleted, write to us.

3) Family sync (optional)

When: only if you create or join a "family" in "Manage profiles › Sync". Without it, profiles stay on the device alone.

The identifier: the family code, a random 12-digit number. Anyone who knows the code can read and change the family's data, so keep it like a password. We do not link it to your name, your e-mail or an IP address.

What is synced and stored on the server:

• The profiles:
  • the name you type, which may be a child's name. We suggest a short name or a nickname;
  • the avatar: a letter, one of the app's pictures, or an emoji;
  • the age range (e.g. 7–12), the mode, the layout, the interface language, the preferred reciter, and whether the profile is locked.
• Each profile's reading:
  • the reading position, the khatma, the bookmarks and the memorisation progress;
  • the notes you write;
  • recitation statistics (the number of ayat heard per surah and per reciter), tajweed-lesson progress, the reading streak and the daily goal.
• The settings lock (parent PIN): only its salted hash (SHA-256), not the PIN. This lock keeps children out of the settings. It is not a security protection for the data.
• When the family was created and last synced.

Why: so that the profiles and reading match on the family's devices.

Legal basis:

• performing the service you asked for;
• and the guardian's consent where the data is about a child (see section 5).

"Most read for your age":

• From the recitation statistics, we compute combined shares for each age range, across all families.
• No names or codes leave the server. Only the shares do, and only when at least 3 profiles are combined.
• The result is shown to all users.

Retention: until you delete it. Otherwise it is deleted automatically when the family has not synced for 24 months.

Deletion:

• The "Delete sync data from the server" button in "Manage profiles › Sync" deletes the family's copy on the server at once. It needs two presses, and the parent PIN if the profile is locked.
• Or delete it on mus7af.com/delete-data with the family code.
• The profiles and reading stay on your devices. The other linked devices stop syncing.

Local server: if you run the sync server on your own computer at home, the data stays on that computer and never reaches us.

3c) The website's “Request the app” form

When: only if you send the form on mus7af.com yourself.

What is kept:

• What you write in the form: your name, your e-mail, who you are (a mosque, a shop, a school, a family…), and your city and message if you write them.
• The page's language, the time it was sent, and the request's status on our side (new, replied, closed).
• The browser and system only, such as “Chrome 129 / Android”, so that we can help you set it up.
• We do not store your IP address. A salted hash of it (SHA-256) is used briefly to limit the number of requests, and is erased within a day.
• If we turn on the Cloudflare Turnstile check against automated messages, Cloudflare checks the browser under its own policy, and only the result of the check reaches us.

Why: only to answer your request: to send you how to sign in to the web app, or to arrange a mosque or shop screen. We do not add your e-mail to a mailing list or send it advertising.

Legal basis: your own request, that is, taking the steps you asked for before a service is provided.

Retention: a request is deleted automatically 12 months after it was sent.

Deletion: write to [email protected] from the same address and we delete your request at once.

3c-1) The mobile number in the web version's «Request access» form (optional)

When: only if you type your mobile number yourself on the «Request access» page (mus7af.com/en/request). The field is «Mobile number (optional)», and a request is accepted without it.

What is kept: the number in international form (such as +9665XXXXXXXX) with the access request (the name and e-mail). We do not verify it by SMS or link it to any other service.

Why: only to contact you about your access request or your account. No marketing, no SMS campaigns, never shared with anyone and never sold.

Who sees it: only the admins who review access requests; it also reaches them in the e-mail that announces a new request. It never reaches the app or your devices.

Legal basis: your consent, by typing the number yourself; you can withdraw it at any time by having it deleted.

Retention: kept while your request or your account exists, and deleted when the request is declined or the account is cancelled.

Deletion: write to [email protected] from the same address and we delete the number; your account stays as it is (see also «Delete your data», mus7af.com/delete-data).

3e) Website visit statistics

The mus7af.com website uses Cloudflare Web Analytics to count visits in aggregate only (the number of visits, the most visited pages, the device type, the country and how fast the pages load). It uses no cookies and does not track individuals, builds no profile of any visitor, and only aggregate numbers reach us. It does not run inside the app.

4) What stays on your device only

This data is kept in the app's storage on your device and is not sent to us:

• the settings, and the reading position and profiles (unless you turn on sync);
• the kids' stars and rewards;
• the student list and results in "AI Teacher";
• the halaqa settings, the prayer-times location if you chose "my location", and downloads and caches.

The phone remote:

• It pairs a phone with the TV over your local network only.
• It goes through a relay in the local server's memory, not through our servers.
• The TV approves every new phone.

Deleting it: this data is deleted when you clear the app's data or uninstall the app.

5) Children

• Kids' profiles are created by the parent or guardian, who enters their data on the child's behalf, as the child's guardian.
• A child needs no account and no e-mail. We do not ask for an exact age, only an age range, to suggest suitable surahs and reciters.
• No ads, no tracking, no advertising ID and no exact location, in kids' profiles or any other.
• Sync is optional. The guardian can delete it at any time, and can keep the child out of the settings with the settings lock.
• We suggest a nickname rather than the child's full name, and no personal details in notes.

6) Third-party services the app contacts

When you use some features, your device connects directly to other services. They see your IP address and the file requested, and they work under their own policies. We send them nothing personal, except the rounded prayer-times city location to Open-Meteo when the weather screen saver is on.

• Cloudflare:
  • It hosts mus7af.com, the database, the videos and the mushaf fonts.
  • It acts for us as a data processor, under its data processing agreement.
• Quran recitations (audio streaming):
  • Quran Foundation: verses.quran.foundation, audio.qurancdn.com and api.qurancdn.com.
  • Tarteel: audio-cdn.tarteel.ai.
  • EveryAyah: everyayah.com.
  • QuranicAudio: download.quranicaudio.com and mirrors.quranicaudio.com.
  • mp3quran: cdn.mp3quran.net.
• Tafsirs, translations and word meanings: api.quran.com, when you open those panels.
• Adhan and athkar audio: archive.org, Wikimedia and hisnmuslim.com, when played.
• Weather (the TV screen saver, "Digital clock", "Analog clock" and "Animated weather"): the rounded location of the prayer-times city (not the exact location) is sent to Open-Meteo to fetch the weather. Your name and no identifier are sent.
• Halaqa (live video and audio):
  • It runs on a Jitsi server: meet.jit.si, 8x8 JaaS, or a private server.
  • The server sees your voice, your video and the name you type, during the halaqa only.
• "AI Teacher" (checking recitation by voice):
  • It uses the speech-recognition service of the browser or system.
  • In Chrome and on Android, the audio is sent to Google's servers to be turned into text.
  • This happens only when you start a voice check yourself.
• The mus7af.com website: it loads fonts from Google Fonts, so Google sees the visitor's IP address.
• App stores (Google Play, Samsung, LG): downloads and purchases through them follow the store's own policy.

7) Transfers outside the Kingdom

• Cloudflare's servers are outside Saudi Arabia, so the data in sections 1, 2, 3 and 3c is transferred and stored outside the Kingdom.
• We transfer the data under the Personal Data Protection Law and its regulation on transfers outside the Kingdom, with these safeguards:
  • The least data possible: no names in the reports, hashes instead of identifiers, and no stored IP addresses.
  • Encryption: in transit (HTTPS/TLS), and at rest at Cloudflare.
  • A data processing agreement with Cloudflare, including standard contractual clauses.
  • A written transfer risk assessment.
• If the law comes to require the data to be kept inside the Kingdom, we will move it to hosting there or stop collecting it.

8) What we do not do

• We do not sell your data, rent it, or share it for advertising.
• We show no ads, and use no advertising ID and no third-party analytics or tracking tools in the app. On the website we track no one, and count visits only in aggregate (section 3e).
• We do not collect your name, e-mail, phone number, contacts, photos or exact location. The only exception is what you write yourself in the website's forms or in a message to us: the name and e-mail (section 3c), and the optional mobile number of «Request access» (section 3c-1).
• We do not use your data for automated decisions that affect you.
• We may disclose data if a law or a competent judicial authority requires it, and then only what is asked for.

9) Your rights

Under the Personal Data Protection Law, you have the right:

• to be informed of what we collect and why, as this policy explains;
• of access, to get a copy of your data in a readable form;
• to correction, to correct or complete your data. You can change most of it yourself in the app;
• to destruction (deletion) of your data once it is no longer needed, or when you ask;
• to withdraw consent or object at any time, by turning off the report or sync;
• to complain to the Saudi Data & AI Authority (SDAIA), through its data governance platform (dgp.sdaia.gov.sa).

How to use your rights:

• In the app: turn off the report and delete its record, and delete the sync data. Sync also shows all of its data on your device.
• On the web: mus7af.com/delete-data.
• By e-mail: [email protected].
  • Send the install id, the family code or the last 4 digits of the activation code. These are what link us to your data. For a request from the website's form, write from the e-mail you gave in it.
  • We ask for further identification only if in doubt.
• We answer within 30 days at most.
• Backups: a copy of deleted data may remain in Cloudflare's backups for up to 30 days, and then disappears.

10) Security

• All connections to our servers are encrypted (HTTPS).
• We keep hashes (SHA-256) instead of activation codes, device identifiers and the parent PIN.
• IP addresses: we do not store them. They are used briefly, in hashed form, to limit abuse (attempt limits), and are erased within an hour to a day.
• Family codes: they are random and 12 digits long, and attempts to guess or delete them are limited in number.
• The admin dashboard: only the app's owner can enter it, through Cloudflare Access and a list of allowed e-mails.
• Only the app's owner sees the data, and only as far as support and operation need.

11) Data breaches

• If a breach or unauthorised access could harm you, we notify SDAIA within 72 hours of becoming aware of it.
• We also tell you without undue delay, by a notice in the app and on the website, since we do not have your e-mail (unless you sent a request through the website's form: then we write to it). We explain what happened and what you can do, such as making a new family code.

12) Changes to this policy

• We publish every change on this page, with its date.
• A significant change, such as new data or a new purpose, is announced in the app before it takes effect.
• If a change needs your consent, we ask for it.