Privacy policy

What we collect

• From Google when you sign in: your name, email address, profile picture link and Google account ID. We never see your Google password.
• If you sign in with email instead: your email address, the name you give if any, and your password, which we keep only as a one-way scrambled form (a hash) that cannot be turned back into the password. The 6-digit codes we email you are kept the same way and deleted once used or after a day.
• About you, asked once after you sign up: your month and year of birth (we keep only these, not the day), to make sure you are 18 or older and to suit replies to your age group. Optionally, your school of thought, which you can change or remove at any time in Settings.
• What you write: your messages, the titles of your chats, and any note you add when you report a reply. We also keep the short search phrases made from your message to find sources.
• What the app showed you: each reply, the ayahs and hadith it cited, its language, and the kind of message the app took yours to be (such as a question, a request for a ruling, or a crisis, when the reply shows helpline information).
• A temporary chat is the exception: its messages, replies and search phrases are not stored at all. It counts toward your daily limit, and its usage record holds only the cost of the AI requests, never what you wrote.
• Your settings: the app language, and when you accepted the disclaimer.
• How many messages you sent each day, for the daily limit. Usage records: for each AI request, the model used, how much text it processed, its cost, how long it took and whether it worked. An activity log: sign-ins, changes to your settings and consents, reports, and the cost of each message. These records do not contain what you wrote or what your messages were about.
• Technical data: your IP address and browser details reach our server and hosting providers with every request. We use the IP address only to limit repeated sign-in attempts, and do not store it in our database. Our hosting providers keep short-lived request logs for security and troubleshooting.
• On your device: your sign-in session and preferences, kept in your browser storage or your phone’s secure storage. We use no advertising or tracking cookies and no third-party analytics.

How we protect what you write

• Messages, chat titles, search phrases and report notes are encrypted in our database with AES-256-GCM, so a copy or backup of the database shows only scrambled text.
• Our server has to read your message to answer it, so it is decrypted only while your request is handled.
• Every connection uses HTTPS.
• Please do not share details that identify you or others, such as full names, addresses or phone numbers.

Why we use it

We do not sell your data, show ads, or give your chats to anyone to train AI models.

If you turn on "Share my chats to improve replies" (off unless you choose it, in Settings or when you sign up), our team may read the chats you send while it is on to find mistakes, improve the instructions the AI follows and build test questions. What we read carries no name, email or account ID, only your age group and your school of thought if you gave one, and email addresses and phone numbers in the text are hidden. Turning it off stops this for everything you wrote; chats sent while it was off are never included. Test questions we already made from shared chats, written without anything that identifies you, are kept even if you turn sharing off or delete your account.

• To answer you. Your message is sent to an AI model with context from that chat: the last few messages in full, and the start (up to 200 characters) of your earlier questions in it with the sources each reply cited. The model uses this to understand your message, find matching ayahs and hadith, and write the reply. Your age group (such as 25 to 39, never your birth date) and your school of thought, if you gave one, are sent with it so the reply suits you.
• To keep your chat history so you can come back to it.
• Your Google account details, from basic sign-in only (name, email address, profile picture link and account ID), are used only to create your account, sign you in, show which account is signed in, and find your account if you write to us. They are never sent to the AI, sold or used for ads. We cannot see your Gmail, Drive, contacts or any other Google data, and our use of information from Google follows the Google API Services User Data Policy, including its Limited Use requirements.
• To apply the daily free limit and prevent abuse.
• To review replies people report and make the app safer.
• To track costs and fix problems.

Who processes your data

These services process data only to provide their service to us. Some are outside your country.

• OpenRouter routes our AI requests to model providers. Replies are written by Anthropic’s Claude, or another model if it is unavailable. We ask OpenRouter to send your messages only to providers that neither store them nor train on them. The same rule applies when your message is turned into numbers to search the sources.
• Google handles sign-in.
• Resend delivers the sign-in codes we email you. It receives your email address and the code, nothing you write in the app.
• Railway runs our server, in Singapore.
• Neon hosts our databases, in Singapore.
• Cloudflare serves our websites and runs our domain.

Sensitive information

What you share may reveal your religious beliefs, your feelings or your health. We treat everything you write as sensitive: it is encrypted, used only to answer you and run the app as described here, and never shared for any other purpose. You decide what to share, and you can delete it at any time.

Your school of thought is religious information. Giving it is entirely optional; by choosing one you agree to us using it only as described here, and you can withdraw that by removing it in Settings.

How long we keep it

• Your account and chats stay until you delete them.
• Deleting a chat removes its messages, cited sources and search phrases.
• Deleting your account (Settings, then Delete account) removes your profile, consents, chats, messages, search phrases, reports and daily counts. Usage records and the activity log, which contain nothing you wrote, stay without any link to you.
• Daily counts, usage records and the activity log are deleted after about 2 years.
• Our database provider keeps a restore history of about 6 hours, after which deleted data is gone from it too.

Your choices and rights

• See your chats in History, and delete any of them.
• Delete your account in Settings, from the app or any browser, or ask us to: see myqurancompanion.com/delete-account.
• Ask us for a copy of your data, or anything about this policy, at support@myqurancompanion.com.
• Depending on where you live, you may have the right to access, correct, delete or move your data, and to complain to a data protection authority.

Age

My Quran Companion is for people aged 18 and over. If someone gives a birth date under 18 after signing up, their new account and everything in it is deleted straight away. If you believe someone under 18 is using the app, tell us and we will delete the account.

Not an emergency service

If you are in danger or thinking about harming yourself, contact your local emergency number or a helpline now. The app shows helpline information but cannot help in an emergency.

Changes

When our practices change we will update this page and its date. For a significant change we will also tell you in the app.