Bayaan Privacy Policy

1. Information We Collect

1.1 Information Stored Locally on Your Device

The App stores certain data locally on your device to provide core functionality. Unless you sign in with a Quran.com account (see section 1.4), this data never leaves your device:

• Favorite reciters and loved surahs
• Playback history and queue position
• App settings and preferences (theme, reading mode, playback speed)
• Downloaded audio files for offline listening
• Mushaf reading position and session history
• Adhkar and tasbeeh counters

You can clear this data at any time through your device settings or by uninstalling the App.

1.2 Anonymous Usage Analytics

To understand how features are used and improve the App, we collect anonymous usage events through PostHog (posthog.com). This includes:

• Feature interactions (playback, reading, downloads, search queries, share actions)
• Session duration and app lifecycle events (open, background)
• Listening patterns (which surahs and reciters are played)
• Mushaf reading patterns (pages opened, estimated reading time)

All analytics data is tied to a randomly generated device identifier stored on your device. This identifier is not linked to your name, email, or any personally identifiable information.

1.3 Crash Reports and Performance Data

We use Sentry (sentry.io) to collect crash reports and performance metrics. This includes:

• Error stack traces and diagnostic information
• App performance data (startup time, transaction traces)
• Device model and operating system version

Crash data helps us identify and fix stability issues. It is tied to the same anonymous device identifier and contains no personal information.

1.4 Quran.com Account and Sync (Optional)

You can use the App without an account. If you choose to, you can sign in with your Quran.com account, which is provided by Quran Foundation (quran.foundation). Sign-in takes place on Quran Foundation's own sign-in page, so Bayaan never sees or stores your password.

When you sign in, we receive and keep:

• A Quran Foundation account identifier, which we store on our servers only in hashed form
• Basic profile details shared by Quran Foundation (your name, email address and profile picture link), which we store on our servers and the App uses to show which account you are signed in with
• Access and refresh tokens issued by Quran Foundation, which let us sync on your behalf. These are encrypted and stored only on our servers, never on your device
• A Bayaan session token, which is stored in your device's secure storage (iOS Keychain or Android Keystore) and identifies your signed-in session to our servers

While you are signed in, the following data is synced between the App and your Quran.com account through our servers, so it stays the same across your devices and other apps in the Quran.com family:

• Bookmarks
• Notes you write on verses. Notes are synced as private notes and are never published by the App
• Your reading position (Continue Reading)
• App preferences, such as theme, Mushaf display and reading options, text sizes, selected translation and tafsir, playback speed, repeat and ambient sound settings, and Adhkar display settings

The synced data is stored in your Quran.com account by Quran Foundation and is subject to Quran Foundation's privacy policy as well as this one. Bayaan does not keep its own copy of your bookmarks, notes, reading position or preferences on our servers.

Some data is never synced: downloaded audio and content files, playback queue and history, sleep timers, your analytics choice and analytics identifier, and other device-specific settings.

If you used the App before signing in, the App asks whether to copy the bookmarks and notes saved on your device into your account or to keep them separate. Your anonymous analytics identifier is not linked to your Quran.com account.

1.5 Qur'an Content

Translations and tafsir are provided by Quran Foundation and delivered to the App through our servers. Downloading or updating them does not send any personal information to Quran Foundation. To keep this content accurate, the App periodically checks our servers for corrections and updates, using only an anonymous request.

2. How We Use Information

2.1 Local Data

Local data is used solely to power app functionality:

• Restoring your preferences and settings
• Enabling offline access to Qur'anic recitations
• Resuming playback where you left off
• Providing a personalized experience based on your usage patterns

2.2 Analytics Data

Anonymous analytics data is used to:

• Understand which features are used and how
• Identify the most popular reciters, surahs, and reading patterns
• Improve app design and prioritize new features
• Measure the impact of changes we ship

2.3 Crash and Performance Data

Crash and performance data is used to identify and fix bugs, monitor stability across devices and OS versions, and improve responsiveness.

2.4 Account and Sync Data

If you sign in, your account information and tokens are used only to keep your bookmarks, notes, reading position and preferences in sync with your Quran.com account. They are not used for analytics, advertising or any other purpose.

3. Information Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties for advertising purposes. We do not use any advertising networks, social media trackers, or cross-app tracking technologies.

3.1 Third-Party Service Providers

We use the following services to operate the App. These services act as data processors on our behalf and are subject to their own privacy policies:

4. Data Security

We take reasonable measures to protect your information:

• All network communication uses HTTPS/TLS encryption
• Analytics and crash data are transmitted to secure, SOC 2-compliant services
• No passwords or authentication tokens are included in analytics or crash reports
• Bayaan never handles your Quran.com password; sign-in happens on Quran Foundation's own page
• Quran Foundation access and refresh tokens are encrypted at rest (AES-256-GCM) on our servers and are never sent to your device
• Your device holds only a Bayaan session token, kept in the operating system's secure storage
• Local data is stored using your device's standard storage mechanisms

5. Children's Privacy

The App is suitable for all ages and does not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will promptly delete it.

6. Your Rights and Choices

You can:

• Clear local data by uninstalling the App or clearing its storage in your device settings
• Sign out at any time in the App. Signing out ends your Bayaan session and revokes the Quran Foundation tokens we hold for you
• Delete the data we hold about your account (hashed identifier, name, email address, profile picture link, encrypted tokens and session records) by contacting us. Your bookmarks, notes, reading position and preferences live in your Quran.com account and can be managed or deleted there
• Control permissions through your device's system settings

For EU Residents (GDPR)

If you are located in the European Economic Area, you have the right to access, correct, or delete your data, and to object to or restrict processing. Contact us at the address below to exercise these rights.

For California Residents (CCPA)

California residents have the right to know what data is collected, request its deletion, and opt out of its sale. We do not sell personal information.

7. International Data Transfers

Analytics and crash data is processed in the United States by PostHog and Sentry. If you sign in, account and session records are stored on Bayaan's servers hosted by Railway in the United States, and your synced data is stored by Quran Foundation. By using the App, you consent to these transfers. These services maintain appropriate safeguards for international data transfers.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or by updating the “Last Updated” date above. Continued use of the App after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at: [email protected]