Privacy Policy

Effective and last updated: September 1, 2026

QuranApp is a free, ad-free iPhone and iPad application published by Kimintang Sidibeh. It does not require an account. QuranApp is an independent product and is not an official application of Quran Foundation.

The app uses Quran Foundation APIs for Quran scripts and Mushaf page content. Quran Foundation operates Quran.com and QuranReflect. Quran does not connect to or access a user's Quran.com or QuranReflect account.

Summary

Information stored on the device

Reading position, Mushaf position, bookmarks, personal notes, reading goals, memorization progress, reciter favorites, settings, cached content, and downloaded audio are stored locally. The developer does not receive this information.

Reading activity and religious notes can reveal sensitive information about a person's beliefs. The app does not ask for a religious affiliation or upload this local information. A user creates a note, bookmark, goal, or memorization record only by deliberately selecting that feature.

Users can remove individual bookmarks, notes, and downloads from the app. Deleting the app removes its remaining local data, subject to the normal behavior of device backups managed by Apple.

Location

Location access is optional and requires an affirmative iOS permission choice. When enabled, latitude and longitude are sent directly to UmmahAPI to calculate local prayer times and Qibla direction. The latest result is stored locally for same-day offline use near that location. Location is not linked to an account and is not used for advertising, analytics, or tracking.

If a city or region is entered manually in Prayer Settings, Apple's geocoding service converts the search into coordinates before UmmahAPI is contacted. Users who do not grant location permission can use the manual-city option.

Search

When online Quran search is used, search terms are sent directly to UmmahAPI to return matching verses. The app does not associate searches with an account, profile, or advertising identifier.

Public Quran content

The app retrieves public Quran text and associated metadata without sending bookmarks, notes, reading history, or other personal library data to Quran Foundation. Requests for scripts and Mushaf pages necessarily reveal standard connection information, including an IP address, to the service.

Quran Foundation content page data is kept in memory for no more than seven days. Alternate-script caches also expire after no more than seven days. The app does not access Quran Foundation User APIs or use Quran Foundation OAuth tokens.

Service providers

Network requests reveal an IP address to the destination service. This app does not operate an intermediary server and the developer does not receive those request logs. Service providers may process limited operational and security logs under their own policies and applicable agreements. They are not authorized by the developer to build advertising profiles from app data, sell or mine app user data, or misuse Quranic text.

Prohibited uses

No user data is used to build advertising profiles. Quran Foundation user data is not accessed, sold, mined, or repurposed. Personal notes or other user-created content are not used to train artificial intelligence models.

Notifications and audio

Prayer alerts are local notifications scheduled on the device. The developer does not receive a record of scheduled or delivered alerts. Quran recitation may continue in the background when the user starts playback.

Security and incident response

Remote requests use HTTPS with modern TLS. Local app files are protected by the iOS app sandbox and iOS Data Protection. The app contains no production API client secret. If backend secrets are introduced, they must be kept off-device, limited to the minimum access needed, and rotated at least every 90 days.

In accordance with Quran Foundation Security Rule 6.9, suspected unauthorized access, security breaches, or data exposure related to its APIs will be investigated immediately and reported to Quran Foundation within 24 hours.

Retention and deletion

Personal reading data remains on the device until the user removes it or deletes the app. The developer cannot retrieve, correct, export, or delete a server copy because the developer does not hold one.

Quran Foundation page data is held in memory and alternate-script caches expire within seven days. Other cached reference content and downloaded audio remain until removed through app storage controls or app deletion. Provider operational logs are retained under the provider's privacy practices.

Quran does not use a Quran Foundation account or OAuth token, so QF account revocation and account-deletion synchronization are not applicable. If those features are added later, the app will provide token revocation and server-data deletion controls before release.

User choices and rights

Questions about access, correction, deletion, or privacy rights can be sent to the contact address below. The developer will respond within 30 days. Requests concerning a provider's operational logs may need to be directed to that provider.

Children

The app has no sign-up, account, social, messaging, or user-profile feature and does not knowingly collect personal information from children. Families may choose to let children use the app under parental guidance.

International processing

UmmahAPI, Quran Foundation, audio hosts, and Apple may process network requests outside the user's home country. Each provider is responsible for its own processing safeguards. Where applicable law requires a transfer mechanism, the responsible party must use Standard Contractual Clauses or an equivalent lawful safeguard. The developer is responsible for applicable data-protection and transfer laws in each storefront.

Policy changes

Material changes will be identified by a new effective date and communicated through app release notes or an in-app notice when appropriate.

Contact