Privacy Policy — Nur Quran
Effective: 13 November 2026
App: Nur Quran (com.sigarda.nur_quran)
Nur Quran is built to be used in peace. It asks for no account and carries no tracking or analytics of any kind.
One feature — Family — does send part of your worship record to our server, because that is the only way the people in a family can see each other's day. That feature stays off until you turn it on yourself, and exactly what it sends is set out under The Family feature. As long as you do not use it, nothing at all leaves your phone.
One screen shows ads — "Share a verse". Every worship screen (reading, mushaf, memorisation, prayer times, the adhan) never shows an ad and loads nothing from an ad network. Details in Ads.
The entire Quran — Arabic text, transliteration, translation and tafsir — along with the typefaces, prayer times, du‘a, dhikr, hadith, the 99 names and the "Follow my voice" speech model all ship inside the app, so almost everything works with no internet at all and nothing needs downloading.
In short
| Data collected and sent to us | None — unless you use the Family feature |
| Accounts / sign-in | None |
| Ads | Only on the "Share a verse" screen (Google AdMob) |
| Our own analytics & tracking | None |
| Data we share with third parties | None |
What stays on your device
All of the following is stored only on your phone and is never sent anywhere — not by the Family feature either:
- bookmarks, verse notes and your last reading position;
- memorisation progress and the murajaah schedule;
- tasbih counts, recitation targets and statistics;
- your daily worship journal — kept on the phone; only the daily ticks travel if you use the Family feature;
- settings: theme, typeface, adhan voice, adhan appearance, reminders;
- the city or coordinates used to compute prayer times;
- files you have downloaded (update APKs outside Play).
This data disappears if you uninstall the app or clear its data. The Backup feature writes a single file that you keep yourself (on your phone or in a cloud service of your choosing) — we never receive a copy.
The Family feature
The Family feature shows today's worship to the others in your family so you can remind each other. For that to work, part of the record has to travel between phones through our server.
The feature stays off until you create or join a family. Until you do, the app never contacts this server at all.
What is sent and stored
| Stored | Notes |
|---|---|
| Your name | Whatever you type, e.g. "Dad". Not a legal name, and never checked |
| Emoji & colour | The face you picked for the dashboard |
| Daily worship ticks | e.g. "subuh", "puasa" — by date |
| Last surah & verse | The numbers only, never the text you read |
| Reading goal | If you set one, e.g. "Finish all 30 juz" |
| Nudges | Who reminded whom, and when |
| Family code | Six letters, generated by the server |
What is never sent
Photos, legal names, phone numbers, location or coordinates, the contents of your verse notes, bookmarks, memorisation progress, voice recordings and your contacts. (An email address is stored only if you link a Google account yourself — see below.) Faces are emoji, not photographs — precisely so that a child's face never sits on our server.
Signing in with Google (optional, never required)
Your family membership lives on this phone as a random token. If the phone is lost or replaced, that token goes with it — and your place in the family cannot be taken back.
That is what linking a Google account is for, and it is entirely optional. If you link one:
| Stored | Notes |
|---|---|
Google account ID (sub) |
A stable number from Google; unchanged even if you change your email |
| Email address | Only so you can tell which account is linked; never used to send you anything |
Your Google display name and profile photo are not stored — the nickname in the family is enough. We never email you, and the address is never shared with anyone.
Linking changes nothing else: members without an account use every feature exactly the same. Unlink, under Family → My profile, erases both from the server there and then.
When you restore your membership on a new phone, the old phone's token is revoked — a lost phone can no longer read that family.
No account
Joining a family needs no email, no password and no sign-up. A family is a six-letter code; a phone is recognised by a random token the server issues, stored as a SHA-256 digest, so even a leaked copy of the database cannot be used to get into anyone's family. A member PIN, if set, is stored as a digest too, and exists only to pick a profile on a shared phone — it is not a security control.
Who can see it
Only the people holding the code, which you share yourself. Anyone holding the code can join, so share it only with the people you mean; a family is capped at 20 members. We do not share this with anyone, do not use it for advertising, and do not analyse it.
How long it is kept, and how to erase it
- Leaving the family (Family → My profile → Leave) erases all your records from the server immediately.
- A family whose members have all stayed away for 180 days is deleted on its own.
- When the last member leaves, the family is deleted with them.
- Uninstalling the app does not erase the server copy — leave the family first, or wait out the 180 days.
Children in this feature
Children usually take part through a parent's phone. All that is stored about them is the nickname their parent chose and their worship ticks — no photo, age, school or location. A parent can erase it at any time by removing that member from the family.
Permissions, and why
- Location (coarse/fine) — used only to compute prayer times and the qibla direction on your phone. The coordinates are not sent anywhere. You may decline this permission and pick a city by hand; every prayer-time feature still works.
- Background location ("Allow all the time") — never requested unless you turn it on yourself in Prayer Settings → "Update location in the background". Its only purpose: when a prayer time arrives, the app checks whether you have moved far from the location the schedule uses, and shows a note offering to recompute. It reads only the last position the phone already knows — GPS is never switched on by the app in the background — and the coordinates still go nowhere. You can switch it off at any time.
- Notifications — to show the adhan, pre-prayer reminders, fasting reminders and your own notes.
- Exact alarms & start at boot — so the adhan sounds right on time even when the app is closed.
- Foreground service (media playback) — to play the adhan to the end and offer a "Stop adhan" button.
- Display over other apps — to show the adhan banner while you are in another app. You may decline it; the adhan still sounds through the notification.
- Microphone — only while you turn on "Follow my voice". Audio is matched against the verse on the device when an offline model is used. If you choose the system (Google) speech engine instead, the audio is processed by that service under its own privacy policy. We never store or transmit recordings.
- Photos, video & audio — only when you yourself pick a file for a card/story background or restore a backup. Those files are never uploaded.
- Internet — see the next section.
- Ignore battery optimisation — optional, so the system does not delay adhan alarms.
- Install packages (outside Play Store) — only in the directly-distributed build, to install an APK update. In the Play Store build, updates are handled by Google Play.
External services contacted
The app contacts the following services only when needed. These requests carry your IP address the way any internet request does; we neither receive nor store that data.
| Service | Purpose | When |
|---|---|---|
| Gold price provider | gold price estimate for the zakat calculator | when the Zakat screen is opened; can be entered manually |
| Google Play (In-App Update) | check for and install app updates | in the Play Store build |
| Google AdMob | show ads | only while the "Share a verse" screen is open |
| dl.sigarda.dev | check for and download APK updates | only in builds distributed outside the Play Store |
| Recitation audio provider | play a qari's recitation | when you play audio |
| quran.sigarda.com (our server) | the Family feature | only if you use the Family feature |
| Google Sign-In | linking your membership to a Google account | only if you tap "Link a Google account" yourself |
Ads
Ads are served by Google AdMob. What you should know:
- One screen only. Ads load on the "Share a verse" screen, and occasionally one full-screen ad appears after an image has been shared — never on the first share, and at most once every few minutes. Anywhere else in the app, the ad SDK requests nothing.
- What Google receives. As with any ad network, AdMob receives your device's advertising ID, your IP address (which gives a coarse region), and your interactions with the ad. Its use is governed by the Google Privacy Policy.
- What is never sent. Your verse notes, bookmarks, reading position, memorisation progress, which passages you open, voice recordings and GPS coordinates are never sent to AdMob or to anyone else.
- We still receive nothing about you. All we get from Google is a summary revenue figure.
- Controlling it. Android Settings → Privacy → Ads lets you reset your advertising ID or delete it entirely, which stops ads from being personalised. Where consent is required (for example in Europe), the app shows Google's consent form before the first ad is loaded.
Ad revenue is what keeps the app free, with no subscription.
Children
The app is suitable for all ages. Outside the Family feature we collect no data from anyone, children included; what the Family feature stores is set out in its own section. The app is not directed at children, and the ads shown follow Google AdMob's family policies.
Changes
If this policy changes, the new version is published at the same address and the "Effective" date is updated.
Contact
Privacy questions: [email protected]