Privacy Policy

Account information. When you create an account, we may collect information such as your email address, display name, age, and gender, depending on what you choose to provide. If you sign in using Google, we may receive information provided by Google, such as your name and email address, as permitted by your Google account settings and the Google authentication process. We do not store your Google account password. If you create an account using an email and password instead, that authentication information is handled through our authentication infrastructure and protected using appropriate security measures.

Guest accounts. You may be able to begin using UstadApp without creating a full account. When you use UstadApp as a guest, we may create a temporary account or identifier on our servers so the app can maintain your current session and learning experience. Guest progress may not be permanently recoverable unless you create or connect a full account.

Learning activity. We collect information about your learning activity so we can provide the core functionality of UstadApp. This may include:

• Lessons completed
• Ayahs or Surahs being learned
• Scores and accuracy
• XP
• Streaks
• Hearts or lives
• Revision activity
• Recitation results
• Other progress within the application

Voice and recitation data. Some UstadApp exercises let you recite Quranic verses aloud so we can provide recitation feedback. When you use these features, your device records the audio you choose to submit. That audio is transmitted to our systems and may be processed by our speech-recognition provider, Deepgram, to analyze the recitation and generate feedback. We use recitation audio only to provide the relevant recitation and learning features, and we do not use it for advertising or sell it to third parties. We retain recitation audio only for as long as necessary to provide and improve recitation feedback; when you delete your account, any recitation audio associated with it is deleted or anonymized along with your other account data, subject to the retention exceptions described in Data Retention below.

Device and usage information. We may collect technical and usage information such as:

• Device type and model
• Operating system and version
• App version
• IP address
• Approximate technical location information, where available
• Application usage events
• Screens or features accessed
• Lesson start and completion events
• Technical identifiers

We use this information to operate, secure, maintain, and improve UstadApp, and to understand how our features are being used.

Crash and error information. When UstadApp crashes or encounters a technical error, we may collect diagnostic information such as the screen or feature involved, device information, application version, and technical error details. This helps us identify and fix bugs and improve application stability.

We use the information we collect to:

• Create and manage your account.
• Save and display your Quran memorization progress.
• Provide lessons, revision, XP, streaks, and other learning features.
• Analyze recitation and provide AI-powered feedback.
• Send account-related emails and notifications where applicable.
• Maintain application security.
• Detect and fix crashes and technical problems.
• Understand how users interact with UstadApp.
• Improve our lessons, features, and overall learning experience.
• Comply with applicable legal obligations.

We do not sell your personal information.

We share information with service providers that help us operate UstadApp. These providers process information on our behalf for specific purposes. Depending on the features you use and our current technical infrastructure, they may include:

• Google Firebase, which provides authentication, analytics, application infrastructure, and related services.
• Deepgram, which performs speech recognition and processes recitation audio to generate recitation feedback.
• Google Gemini, which provides AI-assisted generation or processing of certain educational content and exercises.
• Supabase, which provides our database and backend infrastructure.
• Vercel, which hosts and deploys our application infrastructure.
• Resend, which delivers account-related and verification emails.
• Sentry and GlitchTip, which provide application monitoring, crash reporting, and error diagnostics.

We may update or replace service providers as UstadApp develops. Where required, this Privacy Policy will be updated to reflect material changes.

We may also disclose information where required by law, legal process, or governmental request, or where reasonably necessary to protect the rights, safety, security, or property of UstadApp, our users, or others.

UstadApp is intended for learners aged 10 and above. If you are under the age of legal majority in your country, you should use UstadApp with the knowledge and, where required by applicable law, consent of a parent or legal guardian.

We aim to collect only the information reasonably necessary to provide the application’s learning features. UstadApp does not sell personal information and does not display third-party advertising, and we do not provide an open social network or allow strangers to directly contact children through the application.

Parents or legal guardians who have questions about information associated with their child may contact us at sana@ustadapp.com.

Depending on where you live and applicable law, you may have rights relating to your personal information. Within UstadApp, you may be able to:

• Update your profile information.
• Change your account credentials.
• Review your learning progress.
• Delete your account.

When you delete your account, we delete or anonymize personal information associated with it from our active systems, subject to the retention exceptions described below.

You may also contact us to request access to, correction of, or deletion of your personal information. Residents of certain jurisdictions, including the European Economic Area, the United Kingdom, and California, may have additional rights under applicable privacy laws. To exercise your rights, contact us at sana@ustadapp.com.

If you have created a UstadApp account, you can delete your account and its associated personal information at any time from within the app. You may also request account deletion by emailing us at sana@ustadapp.com.

Account deletion removes information associated with your account from our active systems, subject to information we are legally required or legitimately permitted to retain, as described in Data Retention below.

We retain account information and learning activity for as long as reasonably necessary to provide the service and maintain your learning history. When you delete your account, we delete or anonymize personal information associated with it from our active systems, subject to:

• Legal or regulatory retention requirements.
• Security and fraud-prevention requirements.
• Backup systems that may retain information temporarily until overwritten or securely deleted.
• Information that has been aggregated or anonymized so that it can no longer reasonably identify you.

Recitation audio is handled according to the practices described in Voice and recitation data above.

We use reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. These measures may include encryption of information in transit, access controls, authentication protections, and secure infrastructure provided by our service providers. No method of transmitting or storing information can be guaranteed to be completely secure.

UstadApp is operated from Pakistan, while some of our technology and service providers may operate or process information in other countries, including the United States. As a result, your information may be processed outside the country in which you live and may be subject to the laws of those jurisdictions. Where required by applicable law, we take appropriate measures for international transfers of personal information.

UstadApp integrates with third-party services to provide authentication, hosting, analytics, AI processing, email delivery, monitoring, and other functionality. These third parties may have their own privacy policies governing their processing of information, and we encourage you to review them where appropriate. See our Terms of Servicefor more on how UstadApp’s features work together.

We may update this Privacy Policy as UstadApp develops or as our legal and technical requirements change. If we make a material change, we’ll update the effective date above and, where appropriate, notify you through the app, website, or another reasonable method.

Questions about this Privacy Policy, your personal information, or your privacy rights? Email sana@ustadapp.com or visit ustadapp.com.