Privacy policy

Effective 27 September 2026 · applies to the Hifzly app on Android and iOS.

The short version

• There is no account: no email address, phone number or password is ever asked for.
• Your household's hifz record is shared only with the people who joined with your family code.
• If you connect a student to a teacher's class, the teacher sees that student's page counts and today's progress — never your notes.
• Hifzly never uses your location, microphone, camera or contacts.
• The app is free and shows ads from Google AdMob, which uses your device's advertising identifier.
• Anonymous usage statistics show which features help; they never include names, notes or anything else you type.
• You can delete your data at any time in More → Delete my data.

What the hifz record stores

Hifzly keeps your household's record in Google Firebase (Google LLC), on Google Cloud servers in the European Union, so that everyone in the household sees the same thing. It stores:

• a random, anonymous user identifier created by Firebase Authentication for each phone;
• the name each person chooses to show the household (for example "Mom" or "Yusuf");
• each student's first name, the mushaf and memorization order chosen, and the daily amounts;
• each recitation: the date and time, whether it was a new lesson, recent pages or revision, the pages, the number of mistakes, the pages that slipped, whether it was heard by the teacher, an optional note, and who recorded it;
• each student's page map (which of the 604 pages are memorized or weak), the recent pages, where revision continues and the streak;
• the household's six-letter code and time zone.

This data is visible only to the members of your household. The app reads the last month of recitations; the page map keeps the whole progress. When someone leaves, their name is removed and the recitations they recorded stay. When the last person leaves, or deletes their data, the household's record is deleted.

Teachers' classes

A teacher who sets up a class stores their name, the class's name and a class code. When a household connects a student with that code, the class receives the student's first name and, as recitations are recorded, a summary: the pages memorized and weak, the pages held in each juz, the next new pages, whether today's new lesson, recent pages and revision are done, the streak, the mushaf and the time of the last recitation. The teacher can write back a daily plan and a note. Recitation notes, the mistakes on each recitation and who recorded them are never shared with the class. Either side can end the connection at any time, which deletes the class's record of that student.

Reminders and the widget

The daily reminder is scheduled on your phone, and the home-screen widget reads today's lesson from the app on your phone; no push notification token is collected.

Advertising

Hifzly shows banner and occasional full-screen ads through Google AdMob, limited to ads rated for general audiences. To serve and measure ads, Google collects your device's advertising identifier (Android Advertising ID; on iOS the identifier for vendors — Hifzly does not ask for permission to track you across other companies' apps), your IP address for approximate location, and how you interact with ads. In the European Economic Area, the UK and Switzerland you are asked for consent before personalised ads are shown, and you can change your choice in More → Ad privacy choices. You can also reset or limit your advertising identifier in your phone's settings. Google's use of this data is described at policies.google.com/technologies/partner-sites.

Usage statistics

Hifzly uses Google Analytics for Firebase (Google LLC) to count how the app is used — for example how many households finish setting up, invite someone, connect a teacher or record a lesson. These events carry a random app-instance identifier, your device model, operating system and app version, and an approximate location (country or region) derived from your IP address. They never include names, notes or anything else you type. In the European Economic Area, the UK and Switzerland they are used only as far as you allow in the privacy message. Google keeps this event data for a limited time (at most 14 months).

Crash reports

If the app crashes, Firebase Crashlytics sends a technical report: the error, the device model, the operating system and app versions, and a random installation identifier. Reports are used only to fix bugs.

Children

Hifzly is made for parents, teachers and adult students: a parent sets up the record for a child, and a student may record recitations on a household device with their family. It is not directed to children under 13, and we do not knowingly collect personal data from them. A child's first name and hifz progress are entered by their family, only to keep the family's own record and, if the family chooses, to share page counts with their teacher.

Quran data

Surah names and page positions come from Tanzil.net (Creative Commons Attribution 3.0) and are part of the app; no Quran text is downloaded.

Your rights

You can see everything in your household's record in the app itself, and delete your data with Delete my data (see how deletion works). For any question or request — including access, correction or deletion under the GDPR, the Turkish KVKK, the CCPA or other privacy laws — write to clgmsedev@gmail.com. The legal bases we rely on are performing the service you ask for (the shared record and the class), our legitimate interest in fixing crashes, and your consent where the law requires it for advertising and usage statistics.

Changes

If this policy changes, the new version will be posted here with a new effective date.