Privacy policy

Last updated 2 October 2026

This policy covers the Quran Keeper app for Android and this website. We collect only what the app needs to work. We do not show ads and we never sell data.

On your phone

Your reading, bookmarks, notes, dhikr counts and settings are stored on your phone. The Quran text, translations and recitations the app downloads are stored there too.

What reaches our server

An account. When the app first connects it makes an anonymous account with no name or email. If you choose to sign up, we keep your email address and your password, stored hashed.
Emails we send you. If you ask to reset your password, we email a one-time code to your address. We send no other email from the app.
Your backup. Your reading log, reading time, dhikr counts and the items you save are copied to your account so they can come back on a new phone.
Time zone and country. Your phone's time zone, used to count your days correctly. The country it belongs to is used only to show regional standings.
A display name, only if you pick one. It appears on the standings and to readers who follow you. Clear it and you leave the standings.
What you choose to send. Dua requests (with any pictures you attach) and dhikr sets you share.
Premium. Payment happens in Google Play; we never see your card. We keep the Play purchase token to confirm your access, and the codes you redeem or give.
Notifications. A notification token for your phone, so we can send reminders and news. Turn notifications off in Android's settings at any time.

Paying with bKash on our website

If you pay with bKash on our bKash page, we keep the bKash number you sent from and the TrxID, to match your payment and give you your code. We keep them as a record of the payment.

Crash reports and usage

The app uses Google Firebase Crashlytics and Analytics to tell us when it crashes and which screens are used. These reports are anonymous: they do not include your email or what you read. You can turn them off in Settings → Share anonymous usage.

Who processes data for us

Laravel Cloud and Neon host our server and database.
Resend delivers the password reset emails.
Google provides Play billing, Firebase crash reports, analytics and notifications.
Quran Foundation provides the translations, tafsir and recitations the app downloads. Those requests come from your phone.

How long we keep it

Until you delete your account. Deleting it removes the account and everything stored with it. See Delete your account.

Children

The app is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes we will update this page and its date.