Privacy Policy

SABR (“we,” “our,” or “us”) is a mobile application designed to help users memorize the Quran through structured listening, repetition, active recall, and progress tracking. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the SABR app and related services.

By using SABR, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the app.

We collect the following types of information:

• Account Information: Email address, display name, and profile photo (if provided) when you create an account.
• Learning Progress: Your memorization progress, completed lessons, streak data, quiz results, and learning preferences.
• Device Information: Device type, operating system version, app version, and unique device identifiers for crash reporting and performance monitoring.
• Usage Data: How you interact with the app, including features used, session duration, and navigation patterns.

We use the information we collect to:

• Provide, maintain, and improve the SABR app and its features.
• Personalize your learning experience, including adaptive lesson recommendations and progress tracking.
• Send important notifications about your learning progress, streak reminders, and app updates.
• Analyze usage patterns to improve app performance and user experience.
• Respond to support requests and communicate with you about your account.

SABR offers multiple authentication methods for your convenience, including Sign in with Google, Sign in with Apple, email/password, and phone number (SMS) authentication. All authentication is handled securely through Supabase Auth, a trusted authentication infrastructure provider. We do not store your passwords directly; all credential management is handled by Supabase's secure authentication system.

Your data is stored securely using Supabase cloud infrastructure, which provides enterprise-grade security including encrypted data at rest and in transit. Our database infrastructure is hosted on reliable cloud providers with data centers that comply with industry security standards. We implement Row Level Security (RLS) policies to ensure that users can only access their own data.

SABR integrates with the following third-party services to provide its functionality:

• Supabase: Authentication, database storage, and backend infrastructure.
• Apple In-App Purchases: Subscription payment processing for premium features. Payment information is handled entirely by Apple and is not stored by SABR.
• Twilio: SMS verification for phone number authentication. Phone numbers are transmitted securely to Twilio solely for the purpose of sending verification codes.

Each third-party service operates under its own privacy policy. We encourage you to review their policies for more information about how they handle your data.

We retain your personal information for as long as your account is active or as needed to provide you with our services. Your learning progress and account data are maintained to ensure a continuous experience across devices and sessions.

If you request account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of any inaccurate or incomplete personal data.
• Deletion: Request deletion of your account and associated personal data.
• Data Portability: Request an export of your data in a commonly used, machine-readable format.

To exercise any of these rights, please contact us at support.sabr@gmail.com.

SABR complies with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under the age of 13. If we discover that we have inadvertently collected personal information from a child under 13, we will promptly delete that information. If you believe a child under 13 has provided us with personal data, please contact us at support.sabr@gmail.com.

We take the security of your data seriously. We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure authentication through established identity providers.
• Row Level Security (RLS) policies ensuring data isolation between users.
• Regular security reviews and monitoring of our infrastructure.

While we strive to protect your personal information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by other appropriate means. The “Last updated” date at the top of this policy indicates when it was last revised. Your continued use of SABR after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

support.sabr@gmail.com