1. Overview
Murattil (“we”, “us”, “our”) is a Quran learning app developed by DevsFort. This Privacy Policy explains what information we collect when you use the Murattil mobile app and the API at murattil.devsfort.com, how we use it, and the choices you have.
By using Murattil, you agree to the collection and use of information as described in this policy.
2. Data we collect
We collect the following categories of information:
Account information (when you sign in)
- Email address
- Display name
- Profile picture URL (if provided by Google or Apple)
- Authentication provider (Google or Apple, via Firebase Authentication)
- A unique user identifier assigned by our service
App & study data (synced when signed in)
- Hifz progress: memorisation sessions, minutes studied, streaks, last-read position
- Settings: reciter preference, playback speed, font sizes, translation language, display options
- Goals: memorisation targets, deadlines, and progress
- Reminders: scheduled study reminder preferences
- Weak areas: verses where you have made mistakes during practice
- Recognition history: recent verse searches and recognition results
Audio data (when you use recitation or verse recognition features)
- Microphone recordings you submit for speech-to-text, recitation checking, or verse matching
- Audio is transmitted to our servers for processing and is not stored permanently unless required for the feature you requested
Technical data
- Authentication tokens stored securely on your device
- Standard server logs (IP address, request timestamps, error logs) for security and reliability
We do not sell your personal data.
3. How we use your data
We use your information to:
- Authenticate you and maintain your account
- Sync your study progress, settings, and goals across your devices
- Provide Quran content, search, audio playback, and offline packs
- Transcribe your recitation and match spoken verses to the Quran text
- Deliver reminders and track weak areas to improve your practice
- Maintain, secure, and improve the Murattil service
- Respond to support requests
4. Third-party services
Murattil uses trusted third-party providers to operate the service:
- Firebase Authentication (Google) — sign-in with Google or Apple
- Google / Apple — identity provider when you choose to sign in
- Quran Foundation / Quran.com APIs — Quran text, translations, search, and audio content
- ElevenLabs (optional) — speech-to-text for recitation features
- Self-hosted STT (faster-whisper) (optional) — when enabled, recitation audio may be transcribed on our own worker instead of ElevenLabs
- EveryAyah (optional) — spoken translation audio packs while listening
- AWS — server hosting for the Murattil API and database
These providers process data according to their own privacy policies. We only share the minimum data necessary for each service to function.
5. Storage & security
Account and synced data are stored in a MySQL database on servers operated by DevsFort. Authentication tokens on your device are stored using the platform secure storage (Keychain on iOS). We use HTTPS for all API communication.
While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure.
6. Data retention
We retain your account and synced data for as long as your account is active. When you delete your account through the app (Settings → Delete Account), we remove your user record, refresh tokens, and all synced sections from our database.
Server logs may be retained for a limited period for security and debugging purposes.
7. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Withdraw consent by signing out and deleting your account
To exercise these rights, delete your account in the app or contact us at haseeb@devsfort.com.
8. Children
Murattil is intended for users of all ages learning the Quran. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child has provided us personal data without consent, please contact us and we will delete it.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Continued use of Murattil after changes constitutes acceptance of the updated policy.
10. Contact us
DevsFort
Email: haseeb@devsfort.com
Website: devsfort.com