Privacy Policy

Last updated 4 November 2026

Who we are

Scroll the Quran (the website scrollquran.com and the Scroll the Quran apps for iPhone and Android) is a free, non-commercial project run by Dr. Souhayel Tayeb, Dubai, United Arab Emirates, who is the controller of the personal data described here. You can reach us by email at souhayel.tayeb@hni-technology.com or through the Feedback form on the About page.

Scroll the Quran shows no advertising, uses no analytics or tracking tools, and never sells or rents personal data.

We process personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and, for users in the European Union and the European Economic Area, the EU General Data Protection Regulation (GDPR).

Using the app without an account

You can read, listen, search, save verses and use prayer times without an account. Your settings, saved verses, reading streak, chosen city and prayer alerts are then stored only on your device (in the browser’s local storage or in the app’s storage). We cannot see them.

What we collect if you create an account

Email address: used to send you a one-time sign-in code and to identify your account.

If you sign in with Google or Apple: the email address and the basic profile details (such as your name) that the provider shares with us, together with an account identifier from that provider. We do not receive your password and do not post anything on your behalf. With Apple you can choose to hide your email address.

Your saved verses and reading days (how many verses you read each day), so that they sync across your devices.

Technical sign-in records kept by our account provider, such as the time of sign-in and the IP address, for security.

We use this data only to provide your account and its sync features. We process it because it is necessary to provide the service you asked for (under the PDPL, and Article 6(1)(b) GDPR) and, for security records, because of our legitimate interest in keeping accounts safe (Article 6(1)(f) GDPR).

Feedback

If you send feedback, we store your message, the email address you choose to give (optional), your account identifier if you are signed in, and the type of device (web, iOS or Android). We use it only to read and answer your feedback and to improve the app, based on your choice to write to us and our legitimate interest in improving the app.

Shared khatm

If you create or join a shared khatm, we store on Supabase the khatm’s name and optional dedication, the first name or nickname you type, the juz’ you take and whether you have read it, and a coded (hashed) form of a random key kept on your device, which lets only your device change your juz’. No account, email or location is involved. Anyone who has the khatm’s link or code can see the names and progress, so please use a first name or nickname. We use this data only to run the shared khatm, at your request.

Halal Spots

If you are signed in and suggest a Halal Spot, we store on Supabase the place’s name, type, address or position, your optional note, the date, and a link to your account so that spam can be stopped. We never store your own location: the position is the place’s, either searched by address (sent to the Photon search service by komoot) or taken from your device only when you tap “I am there now”. A spot is shown to everyone only after we approve it, and the public list shows the place, never who added it. If you confirm or report a spot, we store that vote with your account, once per spot. Deleting your account removes your votes; spots you added stay without any link to you.

Photos of mosques

If you are signed in and share a photo of a mosque, we store on Supabase the photo, the place you type (the mosque’s name if you give it, the town and the country), your optional description and the name you choose to show with it, the date, and a link to your account so that spam can be stopped and you can remove your photo. Before upload, the app makes a new copy of the photo at a smaller size; this drops the camera’s hidden details, including any GPS position. A photo is shown to everyone only after we approve it; the public page shows the photo, its place and the name you chose, never your account. Approved photos can be viewed by anyone who has their address. You can remove a photo still waiting for review yourself, and ask us to remove any of your photos at any time. Deleting your account removes the link to you; please ask us if you also want your photos removed.

Microphone, family and private features

Record and compare uses the microphone only while you record. The recording stays on your device and is never uploaded.

Pause ritual streaks, the motherhood milestones, the Garden of Deeds, the children’s sticker book, your goals, your milestones, the life companions you tick and your weekly reflection are kept only on your device. We never receive them.

Verse videos are made on your device from the card and the recitation; nothing is uploaded to make them.

Bedtime stories, Kitchen and nursing mode and other read-aloud features use your device’s own text-to-speech voice, which works on the device.

Greeting cards and Learn Arabic

Greeting cards are drawn on your device. The names you type and the image are not sent to us; they go only where you choose to share them. Your Learn Arabic progress (letters you traced, words you know, kids mode) is kept on your device. Letter and vowel sounds use your device’s own text-to-speech voice; Quran word recitations are played from the Quran Foundation’s audio service at audio.qurancdn.com, which receives only the request for the audio file.

Location

If you allow it, the app reads your device location to calculate prayer times and the Qibla direction. This calculation happens on your device. Your location is not sent to us or stored on our servers. You can instead pick a city from the list, and you can withdraw location permission at any time in your device settings.

To show the weather, the app sends your location rounded to about 1 km to Open-Meteo. When you open the mosque finder or the halal food page, it sends your location rounded to about 1 km to the OpenStreetMap Overpass service (and, for mosques when Overpass is busy, to the Photon search service by komoot), to look up places nearby. The last list found for each area is kept on your device for two weeks. These services receive only the coordinates, not your identity or account, and we do not store them.

Notifications

If you turn on Adhan alerts, alerts before the Adhan or at the iqama, or reminders (adhkar, verse of the day, Friday, fasting days, Ramadan, Sunnah prompts, motherhood), the app schedules them on your device. For a shared khatm, the app checks the khatm when it opens and, on phones, now and then in the background, to tell you when it is your turn. No notification service of ours receives your prayer times, reminders or location.

Your khatm plan and its dedication, your Ramadan tracker, your saved duas, your memorisation progress, the amounts you enter in the zakat calculator, your tawaf and sa‘i counts, your Sunnah prayer checklist, the names of Allah you mark as learned, your prayer log and the prayers you record to make up, your quiz scores, your interface language and any recitations you download for offline listening are stored only on your device. Home-screen widgets read the ayah of the day and your prayer times from the app on your device; nothing is sent to us.

Services that receive limited data

To show the app, some requests go to these providers, which receive your IP address and basic browser or device information as part of any internet request:

Supabase (account sign-in and database, for account holders, feedback and shared khatms); Resend (delivery of sign-in code emails); Netlify (website hosting); the Islamic Network audio library at cdn.islamic.network and mp3quran.net (recitation audio and verse timings); the Quran Foundation, through our server, and its audio service at audio.qurancdn.com (word-by-word meanings, tajweed text and word recitations, when you turn these on); jsDelivr and GitHub (tafsir texts and translations in languages other than English and French); Open-Meteo (weather); the OpenStreetMap Overpass service (mosque finder and halal food); the Photon service by komoot (mosque search when Overpass is busy); YouTube, in its privacy-enhanced mode (youtube-nocookie.com), only when you open a video on the Videos page of the website; and, if you use them, Google or Apple (sign-in).

Some of these providers may process data outside the United Arab Emirates and the European Economic Area. Where they do, we rely on the safeguards the PDPL and the GDPR recognise, such as the European Commission’s Standard Contractual Clauses.

How long we keep data

Account data is kept until you delete your account. Feedback is kept for as long as it is useful to improve the app, and at most three years. A shared khatm is kept while it is in use; khatms not opened for two years may be deleted, and you can ask us to delete one at any time. Data stored only on your device stays there until you clear it or uninstall the app.

Deleting your account and data

You can delete your account at any time: open the profile screen (the person icon), sign in, and choose “Delete my account”. This permanently deletes your account, saved verses and reading days. Feedback you sent is kept without your account identifier.

You can also ask us to delete your data by email at souhayel.tayeb@hni-technology.com or through the Feedback form on the About page. We will delete it within 30 days.

Your rights

You have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive it in a portable format. To use these rights, contact us by email at souhayel.tayeb@hni-technology.com or through the Feedback form on the About page. We will reply within 30 days. You also have the right to complain to a data protection authority: in the United Arab Emirates, the UAE Data Office; in the European Union, the supervisory authority of the country where you live or work.

Children

Anyone can read the Quran in the app without an account. Accounts are intended for people aged 16 and over; younger users should use the app without an account or with a parent’s or guardian’s consent.

Security

Connections to the website and our services are encrypted (HTTPS). Account data is protected so that each person can only read and change their own records.

Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change significantly affects how we use your data, we will say so in the app.