Privacy

The short version

Rafiq keeps a record of your hifz so that it can tell you what to memorize and revise each day. That record is yours. It is not sold, not shared, and not used to advertise anything to you.

There is no analytics, no advertising, and no tracking of any kind. Nothing you record is sent to anyone but the account it belongs to.

Recite uses your phone’s microphone to follow you on the page. It listens on the phone itself: nothing you recite is recorded, kept or sent anywhere.

What is stored

An account is needed so your record follows you from one device to another. These are the things kept against it:

Email address

How you sign in. Held by Firebase Authentication.

First name

Optional, and only used to address you.

Account identifier

A random id Firebase issues. Every record below is filed under it.

Your hifz record

Sessions you log, memorization runs you declare, your goal and revision pace, streaks and totals. A session recited with the page hidden keeps the mistakes and prompts you marked yourself, never the words Recite heard. A portion you listened to keeps which reciter played it and how much of it you heard. It also keeps which print of the mushaf you read, 1405H or 1421H, and the days you switched between them.

Your notes

Anything you write about a sitting, if you choose to write it.

Notes on ayahs

A note you write on an ayah, which ayah it is on, and when you last changed it. Only your account can read it, and it is deleted with your account.

Where it is kept

In Google Cloud Firestore, in a Firebase project controlled by the developer of this app. Security rules restrict every document to the account that owns it, so no other user of the app can read your record.

These stay on the device itself and never leave it: the app’s language; your appearance choice (page or binding); the page you last had open; how Listen plays (the reciter, the speed and the repeats); whether the round button is Listen or Recite; how a hidden page looks; whether a held ayah opens on its translation or its tafsir; your Sound & feel choices; the 1421H page fonts, once downloaded; and a hidden session while it is still in progress, including the words Recite has heard you recite, so they stay open on the page. A session in progress becomes part of your record only when you log it, and then only as described above.

The microphone and Recite

Recite follows you on the page as you recite from memory. For that it needs the microphone, and it asks for it the first time you press Recite. You can say no, or turn it off later in your phone’s settings, and everything else in Rafiq works without it.

The microphone is on only while a sitting of Recite runs. It is closed when you pause or stop.

What it hears is handled on your phone, by a speech model that is part of the app. The sound is never recorded and never saved, and it is not sent to the developer, to Firebase, to Sentry, or to anyone else. Each moment of it is let go once the model has heard it.

All Recite keeps is where you are: the words it heard you recite, as places on the page, held on the phone for the session in progress. They are not part of what is saved to your account.

What the app connects to

The mushaf itself is inside the app, and so is every typeface it is set in, the translation and tafsir a held ayah shows, and the speech model Recite uses. Opening the Qur’an and reciting to Recite need no connection at all. Listening does: the recitation is fetched when you press Listen. So does choosing the 1421H print: its page fonts are downloaded once, when you switch to it, and kept on the phone.

Six services are reached over the network, and nothing else:

Firebase

Google, for sign-in and for storing your record.

Sentry

Functional Software, Inc., for crash and failure reports. Reached only when something in the app goes wrong.

EveryAyah

everyayah.com, for the recitations Listen plays. Reached only when you press Listen. Like any website it sees which recording is asked for and the network address asking for it — nothing about your account, and nothing you have recorded.

QuranicAudio

download.quranicaudio.com, for the whole-surah recordings Listen plays straight through. Reached only when you press Listen, and like EveryAyah it sees only which recording is asked for and the network address asking for it.

MP3Quran

mp3quran.net, for the whole-surah recordings of Sheikh Saad Al-Ghamidi, played straight through, and of Sheikh Abdurrashid Sufi. Reached only when you press Listen, and like EveryAyah it sees only which recording is asked for and the network address asking for it.

Quran Foundation

verses.quran.foundation, for the page fonts of the 1421H mushaf. Reached only when you switch to that print, or to fetch a page the phone has lost. No sign-in or account details go with the request, and like EveryAyah it sees only which page is asked for and the network address asking for it.

Crash and failure reports

When a screen of the app breaks, a report of the fault is sent to Sentry so that it can be fixed. It is sent only when something actually goes wrong, and it says what broke, not who was using the app.

When something fails but the app carries on, such as a session that would not save, a plan or profile that would not load, a setting that was not kept, or Recite that would not start, a shorter report is sent. It says only which part of the app failed and a short code for the kind of failure, never the error's own text. A failure caused by having no connection is not reported, and the same failure is reported only once each time you use the app.

A report holds the error and the line of code it came from, the version of the app, and the device model and operating system version. It does not hold your account, your email, your name, your notes, which portion you were reciting, or anything Recite heard. The trail kept alongside it is limited to which screens of the app were opened.

Nothing in a report says where you are. Your network address is not stored with it, and the rough location Sentry works out from that address on arrival is removed before the report is kept.

Reports go to a project controlled by the developer of this app, and are kept for 30 days.

What is not collected

No location of any kind: no GPS, nothing that asks where you are, nothing that watches where you go, and no location worked out from the network. No contacts. No photos. No camera. No recordings of your voice: the microphone is used only by Recite, on the phone, as described above. No advertising identifier. No device fingerprinting. No analytics: nothing records which screens you open, how long you spend, or what you tap.

The app does not track you across other apps or websites, and there is no third-party SDK in it that could.

Notifications

The daily reminder, if you turn it on, is scheduled on your own device by the system — iOS or Android. Nothing about it is sent anywhere, and no server knows when or whether it fires.

Widgets

Rafiq’s widget on the home screen, and on an iPhone’s lock screen, shows today’s portions, your streak and where your revision round has reached. To draw it, the app keeps a copy of those on the phone, in storage only Rafiq and its widget can read, along with the app’s language and the wording of tonight’s reminder. The widget never connects to anything, and nothing it holds is sent anywhere. It is emptied when you sign out.

When you mark a portion done on the widget, the press waits on the phone until Rafiq next opens. Rafiq then logs that session to your record like any other.

Children

The app is built for students of any age, and families commonly set it up on a child’s device. It collects nothing beyond what is listed above, shows no advertising, and has no messaging, no social features and no way for one user to see another. A parent who sets up an account controls it and can delete it.

Deleting your data

To delete one session, open it in History and tap Delete. The session is removed from Firestore, and so are its note and the mistakes marked in it. The rest of your record stays as it is.

To delete your whole account, go to Settings, scroll to the foot of the page and tap Delete account. That removes your profile, your sessions, your memorization runs and your notes from Firestore, and removes the sign-in itself. It cannot be undone, and there is no backup kept for you afterwards.

You can also ask by email. Write to info@trueinspo.ca from the address you sign in with, and say whether you want your whole account deleted or only particular records. It is done within 30 days, and nothing is kept afterwards. Crash reports hold nothing that identifies you, so they cannot be picked out as yours; they expire on their own after 30 days.

Changes

If this policy changes, the date at the top changes with it, and the current version is always the one in the app and at this address.

Getting in touch

Questions about any of this, or a request to have data removed, can be sent to info@trueinspo.ca.