Draft describing how the platform actually processes data. Subject to legal review before the official launch.
Data we process
At registration: name, email, phone number, country of residence, date of birth, gender and a hashed password. Religion can be left undisclosed; if provided it is processed only with your explicit consent, stored encrypted and never shown to anyone.
For security: sign-in records, IP addresses and short device descriptions to detect suspicious sign-ins.
Children's accounts
We collect only the minimum: first name, date of birth, gender, and a username and PIN chosen by the guardian. We record the guardian's consent with its date and terms version.
Content you share
Private messages are stored encrypted. Posts and comments are shown only to the people their visibility allows (friends and family, group members, or the public for adults). Uploaded photos are re-processed on our servers, which removes metadata such as location and device type; they are stored outside the public web folder and shown only to people allowed to see them. Photos from minors are reviewed by our moderators before they appear.
Academy
We store your course enrolments, progress and quiz results so you can continue learning and receive a certificate. Guardians can see their child's course progress. Anyone with a certificate code can verify it; only adults' names are shown — for minors only the course and date are confirmed.
Some lessons include a video hosted on YouTube or Vimeo. The video is loaded only after you press “Load video”, in privacy-enhanced mode; your browser then connects to the provider's servers and the provider's privacy policy applies.
Quran recitations
We do not host audio files. When you press “Play”, your browser fetches the recitation directly from the publisher approved by a religious reviewer, whose name and domain are shown next to the player; that publisher receives your device's IP address and the usual request data, and its own privacy policy applies. No connection to it is made before you press “Play”. Repeat and speed settings are stored on your device only.
Games and screen time
We store game results and points so users can follow their progress; they are never shown outside the family or a challenge between two friends. For children's accounts we record only the daily minutes of use, to apply the limits set by the guardian.
Retention
When an account is deleted it is disabled immediately and permanently erased after 30 days. Verification codes are deleted after 30 days and security logs after 24 months. Uploaded photos that were never used in a post are deleted after 24 hours, and read notifications after 90 days.
Your rights
You can download a copy of your data and delete your account at any time under Settings → Security. You may also request correction, restriction or object to processing, and withdraw your consent to processing your religion.