Laraib privacy policy

What we collect when you create an account#

When you tap Get Started and create an account, the app sends the following to the Laraib accounts service, and we keep it for as long as your account exists:

• your email address and password, which is what you sign in with; the password is stored only as a one-way hash that cannot be read back;
• your name and the kind of account you chose (reader, Tajweed learner, Hifz student, teacher, parent or institution);
• for teachers, the name of your madrasa or school if you enter it; for institutions, its name and city;
• the codes the app gives you to connect with others: a teacher's or student's link code, an institution code and an invite code.

Hifz records#

A Hifz student's record is the plan and progress the app keeps: daily Sabaq, Sabqi and Manzil, the pages and ayat covered, mistakes marked, revision cycles, Daura and notes. For readers and learners without a teacher or parent, this stays on the phone. It is stored on our servers when the student is connected to a teacher, a parent or an institution, or when a teacher creates the student, so that everyone approved can see the same record on their own phone.

A student's record can be seen only by the student, their approved teacher, approved parents or guardians (while the student allows guardian access), the administrators of their teacher's institution, and Laraib's own administrators when they need to help. Nobody becomes someone's teacher or guardian just by knowing a code: the other side has to approve the request.

Students and children#

Many Hifz students are children. A child's record is normally created and managed by their teacher, their madrasa or their parent, who decides what is entered; the app asks only for a name, not a date of birth, address, phone number or photo. We use the record only to show it to the people listed above, never for advertising or profiling. A parent who wants a child's record corrected or deleted can ask the teacher or institution, or write to us at the address below.

Premium and payments#

Teachers, parents and institutions can pay for Premium. Payments through Google Play are handled by Google; we receive confirmation of the subscription, not your card or bank details. If you pay by UPI, your UPI app handles the payment, and you send us the transaction reference and a screenshot from your own email app; we keep the reference, the amount, the plan and your email address with the payment record so that we can approve it. To show the price for your country, the app reads the country of your Google Play account, or otherwise of your phone's SIM, network or settings; it does not read your location.

Invites and points#

When you share Laraib, the link carries your invite code. When someone installs the app from that link, the app reads the code through Google Play's install referrer, so that both of you receive points. We record who invited whom and the points earned and spent.

Quran text, recitation and lessons#

The Quran text and the recordings of the letters are built into the app. Recitation audio, word-by-word recitation, online search and colour Tajweed are downloaded from the Quran Foundation content service (api.quran.com) and kept on the phone; those requests contain only what is being looked up, never your account details.

What stays on your phone#

The app keeps a copy of your data on the phone so that it works without a connection. Backup files are saved wherever you choose. If Android's own backup is switched on for your phone, Android may include the app's data in the encrypted device backup held in your Google account; that is governed by Google's privacy policy and can be switched off in your phone's settings.

Who else handles the data#

The accounts service and database run on Supabase, a hosting provider, which stores the data described above on our behalf. Every request travels over an encrypted connection (HTTPS). Like any internet service, the servers see the IP address a request comes from; it is not kept with your account. Google handles Play purchases and the install referrer. We share your data with nobody else, unless the law requires us to.

Deleting your account and your data#

You can delete your account at any time from inside the app: open More, tap Delete account, type DELETE and confirm. That immediately and permanently removes your account and your data from our servers. For a teacher, it also removes the students they created who never signed in. If you can no longer use the app, see how to ask us to delete your account.

Uninstalling the app, or clearing its data in your phone's settings, removes what is stored on the phone but does not close your account.

Your choices#

You can change your name and details in the app, stop sharing with a teacher or parent, and turn off guardian access. You can ask us for a copy of the data we hold about you, or to correct or delete it, by writing to the address below.

Changes#

If this policy changes, the revised version will appear here and the date at the top will be updated.

Contact#

Questions about this policy can be sent to razakatihari@gmail.com.