Noor Quran Privacy Policy

Accounts and authentication

You can use core reading and device-local tools without an account. If you create an account, Noor Quran processes your email address, an app-generated user ID, a protected password verifier, email-verification and password-reset records, renewable sessions, app-generated installation or device identifiers, and sign-in security events. Noor Quran does not store your password as readable text.

Library and sync data

Bookmarks, notes, collections, reading and listening progress, memorisation and Khatm activity, and preferences begin on your device. If you sign in and use backup or sync, supported records are sent to Noor Quran's cloud service so they can be restored or used across signed-in devices.

Optional synced notes, bookmarks, memorisation plans and progress, Khatm progress, reading activity, listening activity, and other Quran usage can reveal religious practice or beliefs. Noor Quran collects this information only when you choose the relevant account or sync feature. Noor Quran does not intentionally share this synced religious-practice data with third parties for their independent purposes.

Location and notifications

Location is optional and requested in the foreground only when you choose a location-based Qibla or prayer-time action. Noor Quran processes those coordinates on your device and does not directly upload them to its backend for those features. A reduced-precision location may be stored on your device; precise coordinates are not included in account sync. Noor Quran does not use background location tracking.

Separate provider network requests can expose a source IP address. An IP address may indicate an approximate geographic location even though the Prayer Times and Qibla coordinates remain on your device.

If you allow notifications, Noor Quran schedules reminders you choose on the device. The current app does not register an Expo or device push token with Noor Quran.

MP3Quran recitation and timing requests

When you request a recitation, Surah audio, or supported ayah timing, Noor Quran connects directly to MP3Quran. MP3Quran may receive your source IP address, ordinary network and request metadata, the requested reciter, the requested Surah or audio resource, and the requested ayah-timing resource where applicable. An IP address may reveal approximate location, and the requested resource may reveal an app interaction.

MP3Quran processes this information under its own privacy practices and may maintain independent logs. See the MP3Quran Privacy Policy.

Quran Foundation font requests

When Noor Quran requests an approved Quran font or related resource from Quran Foundation or Quran.com infrastructure, that provider may receive your source IP address, ordinary network and request metadata, and the requested font or resource. An IP address may indicate approximate location, and the resource request may constitute an app interaction.

Quran Foundation and Quran.com process this information under their own privacy notice and may maintain independent logs. See the Quran.com Privacy Policy.

Backend, email, and diagnostic providers

Render and Render Postgres process Noor Quran backend and account data on Noor Quran's behalf. This may include account and sync records, security records, redacted request diagnostics, and operational logs. They act as service providers or processors for these activities rather than as independent Noor Quran product features. See the Render Privacy Policy.

Resend processes transactional-email data on Noor Quran's behalf, including a recipient email address, message metadata, and verification or password-reset content. Resend acts as a service provider or processor for these messages. See the Resend Privacy Policy.

Backend diagnostics may include redacted request records, response status, error information, request or response timing, and security, rate-limit, or audit events where applicable. Noor Quran does not include a mobile crash-reporting SDK and does not collect separate mobile app-performance telemetry.

Noor Quran contains no advertising SDK, does not sell personal data, and does not build an advertising profile from Quran activity.

Retention and deletion

Account and synced library data are retained while an account is active or as needed to provide the service. Completing account deletion removes or de-identifies the email and password verifier and deletes the profile, authentication and recovery credentials, sessions, device registrations, synced preferences, and supported synced library records.

Delete synced data removes the supported server-side Library and sync records without closing the account. Data stored only on a device is separate and remains until you clear it or remove the application.

A de-identified account tombstone, deletion-completion record, and limited security or audit records may remain. Provider logs and backups may remain for the provider's applicable retention period. A fixed purge period is not claimed where none has been established.

See Delete your Noor Quran account for the separate full-account deletion flow.

Security, updates, and contact

Noor Quran uses HTTPS in transit, protected password storage, scoped authenticated access, renewable sessions, server-side revocation, operating-system protected credential storage where available, and access controls intended to keep account data separate.

This policy may be updated when features, providers, or obligations change. The effective date above will change, and material updates will be communicated through the website or application where appropriate.

Privacy questions and deletion assistance: support@noorquran.com.ng. Never send a password or session credential.