Privacy policy

Who we are

Kormot builds and looks after Ayahora. You can reach us at admin@kormot.com. The Android package is com.kormot.ayahora.

What we collect

If you stay a guest

We do not create an account for you. Bookmarks, reading progress, your saved place, prayer and reminder settings, theme and languages stay on that phone.

If you sign in

You can sign in with an email address and password, or with Google. Sign-in is handled by Google Firebase Authentication. We receive the email address, and with Google the name and Google account identifier that Google shares. We never see your password.

What can sync

When you are signed in and online, a copy of the following is stored in Cloud Firestore for that account only:

• Bookmarks (Quran, hadith and dua)
• The surah and ayah you were reading, and when that progress was saved
• Settings: theme, languages, reminder choices, and your saved place (a label, latitude and longitude)
• The email and display name on the account

The phone is written first. The cloud copy is sent when a connection is available. If you are offline, the app keeps working.

Place and prayer times

Prayer times and the Qibla direction are calculated on your phone from a place you pick or that the phone locates when you allow it. That place is stored on the device. If you are signed in, the same place is part of the settings that can sync. We do not use location for advertising, and we do not sell it.

What we do not collect

• No advertising identifier and no ads SDK
• No crash-reporting SDK in the current app
• No push-notification token (reminders are scheduled on the phone)
• No card or bank details
• No contacts, messages or photo library

We do not sell personal data.

Permissions

• Internet downloads the Quran, hadith and dua, signs you in, and syncs an account.
• Location is optional. It is used to suggest a place for prayer times and Qibla. You can type or search for a place instead.
• Notifications are optional. Prayer and reading reminders are scheduled on the phone. We do not use them for advertising.

Scripture and place services

The app downloads religious text and place names from third-party sources named in the app’s About screen, including Al Quran Cloud, hadith and dua collections, GeoNames and Nominatim. Those services see the network request (which can include an IP address). We do not attach your account id to those downloads. Downloaded text is stored on the phone so later reading does not need a connection.

This website

ayahora.kormot.com is a static site. It does not have accounts. If you switch theme, the choice is kept in localStorage under theme. If you pick a language, or dismiss the language suggestion, we may store ayahora.web.lang and a session flag so we do not ask again in that visit. We do not use those values to redirect you silently, and we do not look up your location from your IP.

Who processes data

• Google Firebase Authentication, for optional sign-in
• Google Cloud Firestore, for the optional account copy (region Asia Southeast, Singapore)
• Google Play, if you install the app from the store

We do not use the data for advertising profiles.

How long we keep it

Data on your phone stays until you remove it or uninstall the app. The cloud copy stays until you delete the account. Sign-out does not delete the cloud copy or the data on the phone.

Deleting an account

In the app, open Profile, then Delete account. You need a connection. That removes the Firestore copy for your user and then the Firebase Authentication user. What is already stored on that phone stays. There is a longer explanation on the delete account page.

Children

Ayahora is not directed at children under 13, and we do not knowingly collect account data from them.

Changes

If this policy changes, the date above changes and the same page stays at this address. The app’s Profile link points here.

Contact

Questions about this policy: admin@kormot.com.