Privacy Policy

1. Who we are

Talqeen is a Quranic Arabic reading app operated by Talqeen Ltd ("Talqeen", "we", "us", or "our"). Our registered address is in England and Wales. You can reach us at privacy@talqeen.ai.

2. What data we collect

Account information

When you create an account we collect:

• Your name (or a display name you choose)
• Email address
• Age mode (adult / child — used to determine which privacy protections apply)
• Password (stored as a salted hash — we never see your password in plain text)

Learning progress

We store your progress through the curriculum — which lessons you have completed, your scores on identification exercises, and the dates of your sessions. This data is necessary to provide the service and is stored securely in our database.

Subscription status

We store whether you are on a free trial, monthly, annual, or family plan, and the renewal date of your subscription. Payment processing is handled entirely by the App Store (Apple) or Google Play (Google) — we never see your payment card details.

Device and session information

For analytics and crash reporting we collect basic device information (operating system version, app version) and anonymous session events (e.g. "lesson started", "lesson completed"). This data is aggregated and does not identify you individually. See the third-party services section for details.

3. What we do NOT collect

We also do not collect:

• Location data
• Contacts or photos
• Browsing history
• Biometric data (other than voice processed locally)
• Any data for advertising or profiling purposes

4. Children's data (COPPA compliance)

Talqeen is designed to be used by children under the supervision of a parent or guardian. We take children's privacy very seriously.

• Child profiles can only be created by an adult account holder (a parent or guardian). Children do not create accounts directly.
• We do not knowingly collect personal information directly from children under 13 without verifiable parental consent.
• We do not show advertisements of any kind to children, or to adults.
• Voice recordings made by children are processed on-device only and are never transmitted to any server.
• Child profile data (name, progress) is stored under the parent's account and is subject to the parent's data rights (see section 8).
• If you believe a child has created an account without parental consent, please contact us immediately at privacy@talqeen.ai and we will delete the account promptly.

Talqeen complies with the Children's Online Privacy Protection Act (COPPA) and the UK Children's Code.

5. How we use your data

We use the data we collect to:

• Provide and personalise the Talqeen learning experience
• Track and display your learning progress
• Manage your subscription and billing
• Send transactional emails (e.g. password reset, subscription confirmation) — never marketing without explicit opt-in
• Detect and fix bugs and crashes
• Understand aggregate usage patterns to improve the app

We never sell your data to third parties. We never use your data to show you targeted advertisements.

6. Third-party services

We use a small number of carefully chosen third-party services. Each is listed here with a description of what data it receives:

Supabase

Our database and authentication provider. Stores account information, learning progress, and subscription status. Data is stored in EU data centres. Privacy policy: supabase.com/privacy.

RevenueCat

Manages subscription entitlements across iOS and Android. Receives your subscription status and a non-identifiable device ID. RevenueCat does not receive your email address, name, or any learning data. Privacy policy: revenuecat.com/privacy.

PostHog

Privacy-first product analytics. We use PostHog to understand how the app is used in aggregate (e.g. which lessons are most commonly completed, session lengths). PostHog is configured to anonymise all events — we do not send user IDs or email addresses to PostHog. We do not use Google Analytics. We do not use the Meta Pixel or any advertising trackers. Privacy policy: posthog.com/privacy.

Apple App Store / Google Play

Handle all payment processing for subscriptions. We receive only a subscription token — never your payment card details. Their respective privacy policies apply to any data shared with them during payment.

7. Data retention

• Account and learning data is kept for as long as your account is active.
• If you delete your account, all personal data is deleted within 30 days.
• Anonymised, aggregated analytics data (e.g. total number of lessons completed per day, with no user identifiers) may be retained indefinitely as it cannot be linked back to any individual.
• Backups are retained for up to 30 days after account deletion, after which your data is purged from backups too.

8. Your rights

You have the right to:

• Access: Request a copy of all personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request deletion of all your data. See our Account Deletion page for how to do this.
• Portability: Export all your learning data in a machine-readable format from within the app (Profile → Export my data).
• Objection: Object to any processing you believe is not in your legitimate interest.
• Withdrawal of consent: Where we rely on consent, withdraw it at any time.

To exercise any of these rights, email us at privacy@talqeen.ai. We will respond within 30 days. If you are in the UK or EU, you also have the right to lodge a complaint with your supervisory authority (in the UK, the ICO: ico.org.uk).

9. Security

We use industry-standard security practices including TLS encryption for data in transit, AES-256 encryption for data at rest, and row-level security in our database so that users can only access their own data. Passwords are stored using bcrypt. We conduct regular security reviews.

10. International data transfers

Talqeen is operated from England and Wales. Our database provider (Supabase) stores data in EU data centres. If data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).

11. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you in-app and by email at least 14 days before the change takes effect. The "Last updated" date at the top of this page shows when it was last revised.

12. Contact

Questions about this policy? Email us at privacy@talqeen.ai. We aim to respond within 5 business days.