Privacy Policy

Last Updated: February 19, 2026
Effective Date: February 19, 2026

Introduction

Dugsiya ("we," "our," or "us") operates the Dugsiya mobile application (the "App"), a Quran learning platform that helps users practice and improve their Quran recitation through audio recording, AI-powered analysis, and personalized feedback.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

1. Information We Collect

1.1 Personal Information You Provide

When you create an account and use our App, we collect the following information:

Account Information:

• First name and last name
• Email address
• Username (chosen by you)
• Profile picture (optional)

Preferences:

• Difficulty level (beginner, intermediate, advanced)
• Reading frequency preferences
• Learning goals
• Preferred language for translations
• Notification preferences (including quiet hours settings)

Audio Recordings (Biometric Data):

• Voice recordings of your Quran recitation practice sessions
• IMPORTANT: Your voice recordings constitute biometric data. By using the App, you consent to the collection and processing of your voice recordings as described in this Privacy Policy. See Section 1.4 for more details.

1.2 Information Collected Automatically

When you use our App, we automatically collect certain information:

Device Information:

• Device name and type (e.g., "iPhone," "iPad")
• Operating system version
• Unique device identifiers
• Push notification tokens (for sending notifications)

Usage Data:

• Practice history and progress
• Ayahs (verses) practiced and mastered
• Surahs (chapters) completed
• Practice streaks and statistics
• Accuracy scores
• Mistake patterns (categorized by type: tajweed, pronunciation, omission, addition)
• Time spent practicing
• Features used within the App

Location Data (Optional):

• With your permission, we collect approximate location data (accuracy of approximately 1 kilometer) solely to calculate local prayer times (Fajr and Maghrib) for optional automatic theme switching
• Location data is processed locally on your device and is NOT transmitted to our servers
• You can disable this feature at any time in the App settings

Crash and Performance Data:

• Crash reports and error logs
• Performance metrics and diagnostics
• App session data
• In the event of a crash, screenshots of the App interface may be captured to help diagnose technical issues. These screenshots are transmitted to our error monitoring service (Sentry).

1.3 Information from Third-Party Services

If you choose to register or log in using a third-party authentication service (Auth0), we may receive information from that service, including:

• Email address
• Name
• Profile picture URL

1.4 Biometric Data Notice

What We Collect: Audio recordings of your voice when you practice Quran recitation.

Purpose: We collect voice recordings solely to:

• Transcribe your recitation using AI speech recognition
• Analyze your pronunciation and tajweed accuracy
• Provide personalized feedback to improve your recitation
• Allow you to review your practice history
• Enable "featured recording" sharing (with your consent)

Processing: Your voice recordings are:

• Transmitted securely (encrypted via HTTPS) to our cloud-based AI services
• Processed by our custom speech recognition model (KheemP LoRA, a fine-tuned Whisper model)
• Analyzed by AI language models to generate feedback
• Stored on our secure servers

Retention: Voice recordings are retained for as long as your account is active. You may request deletion at any time.

Consent: Before using any voice recording features, you will be presented with a separate in-app consent screen that:

• Clearly explains what voice data we collect
• Describes how your voice data is processed
• Identifies which third parties receive your voice data
• Explains our retention policy
• Provides the option to decline

You must affirmatively consent through this in-app consent screen before any voice recording can occur. This consent is separate from accepting the Terms of Service and can be revoked at any time in your Privacy Settings.

Your Rights: You have the right to:

• Request access to your voice recordings
• Request deletion of your voice recordings
• Revoke consent at any time (via Settings > Privacy Settings > Voice Recording Consent)
• Continue using non-recording features of the App even if you decline or revoke consent

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide Our Core Services

• Create and manage your user account
• Process and analyze your Quran recitation recordings using AI
• Transcribe your recitation using speech recognition technology
• Provide personalized feedback on your recitation accuracy and tajweed
• Track your learning progress and achievements
• Generate audio feedback using text-to-speech technology

2.2 To Enable Social and Educational Features

• Display leaderboards and rankings (your username, score, and progress statistics are visible to other users)
• Enable friend connections and social features
• Facilitate teacher-student relationships (see Section 2.3)
• Allow sharing of "featured recordings" (optional, with your consent)
• Show activity feeds to friends

2.3 Teacher-Student Features

If you participate in teacher-student features:

As a Student:

• Your teacher can view your learning progress, including ayahs mastered, practice statistics, and completion of assigned goals
• Your teacher can assign specific ayahs for you to practice with due dates
• Your teacher can see when you complete assigned goals
• Your teacher may be able to listen to recordings you share

As a Teacher:

• You can view your students' progress data as described above
• You are responsible for maintaining the confidentiality of student data
• You agree not to share student information with third parties

Consent: By accepting a teacher-student relationship, both parties consent to the data sharing described above. Either party may terminate the relationship at any time, which will revoke data access.

2.4 To Communicate With You

• Send push notifications about your practice, achievements, streaks, and reminders
• Send notifications about friend activity and leaderboard updates
• Respond to your inquiries and support requests
• Send important updates about the App or these policies

You can customize notification preferences, including enabling quiet hours, in the App settings.

2.5 To Improve Our Services and AI Systems

• Analyze aggregated, de-identified usage patterns to improve App features
• Use insights from voice processing to enhance our AI models' accuracy
• Develop new features based on user behavior trends
• Note: While insights and aggregated patterns may inform AI improvements, your individual voice recordings are not retained for model training after account deletion

2.6 To Ensure Safety and Security

• Detect, prevent, and address technical issues
• Monitor for fraudulent or unauthorized activity
• Enforce our Terms of Service
• Collect crash reports and diagnostics to improve App stability

2.7 To Process Payments

• Manage your subscription status through RevenueCat
• Process purchases and renewals through the Apple App Store
• Verify premium access entitlements

3. How We Share Your Information

We do not sell your personal information, including biometric data.

We may share your information in the following circumstances:

3.1 Service Providers and AI Processing

We use third-party service providers to help us operate our App. Your data, including voice recordings, is processed by the following services:

AI Processing Disclosure: Your voice recordings are processed by artificial intelligence systems to provide transcription and feedback. These AI systems:

• Are operated by third-party providers (as listed above)
• Process your data in the cloud, not on your device
• May use your data to improve their services (subject to their privacy policies)
• Do not make automated decisions that significantly affect you without human oversight

3.2 With Other Users

Certain information is visible to other users of the App:

Always Visible (on leaderboards and friend lists):

• Your username
• Your profile picture
• Your Dugsiya score and ranking
• Number of ayahs mastered
• Number of surahs completed
• Practice day count
• Best streak
• Success rate percentage
• Current surah being practiced

Visible to Friends:

• All of the above, plus:
• Your activity updates (e.g., completing a surah)
• Your featured recording (if you choose to set one)

Visible to Teachers (if you have a teacher):

• All of the above, plus:
• Detailed progress on assigned goals
• Goal completion status and timestamps

Featured Recordings: If you choose to set a "featured recording," it will be visible to other users who view your profile or the community feed. Setting a featured recording is optional and constitutes your consent to share that recording publicly within the App.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), including to:

• Comply with a legal obligation
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the personal safety of users or the public

3.4 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services.

Retention Periods:

After Account Deletion:

• We will delete your personal information within 30 days
• Some information may be retained in encrypted backups for up to 90 days
• We may retain information as required by law

Aggregated and De-identified Data:

• We may retain anonymized, aggregated, or de-identified data that cannot reasonably be used to identify you
• This includes statistical patterns, usage trends, and aggregated performance metrics
• Such data is not considered personal information and is not subject to deletion requests
• Any improvements to our AI models derived from aggregated insights remain our property and are retained indefinitely

5. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

5.1 Access and Portability

You have the right to request a copy of the personal information we hold about you, including your voice recordings. Contact us at support@dugsiya.com to request your data.

5.2 Correction

You can update your account information directly in the App settings. For other corrections, contact us at support@dugsiya.com.

5.3 Deletion

You have the right to request deletion of your account and all associated data, including voice recordings. To delete your account:

• Go to Settings > Account > Delete Account in the App, OR
• Contact us at support@dugsiya.com

Upon deletion request:

• We will remove your personal information from our active systems within 30 days
• Your voice recordings will be permanently deleted
• Your data will be removed from leaderboards and friend lists
• Teacher-student relationships will be terminated

5.4 Withdraw Consent for Biometric Data

You may withdraw your consent for biometric data collection at any time by:

• Deleting your account, OR
• Contacting us at support@dugsiya.com to request deletion of voice recordings while keeping your account

Note: Withdrawing consent for voice recordings will prevent you from using the practice recording features.

5.5 Opt-Out of Notifications

You can disable push notifications:

• In your device settings (Settings > Notifications > Dugsiya)
• Within the App's notification settings
• By setting quiet hours in the App

5.6 Opt-Out of Leaderboards

Currently, if you have an account, your basic progress statistics appear on leaderboards. Contact us at support@dugsiya.com if you wish to be excluded from public leaderboards.

5.7 Location Data

You can enable or disable location access for prayer time features in the App settings at any time. Location data is never transmitted to our servers.

5.8 Do Not Track

Our App does not respond to "Do Not Track" signals.

6. Children's Privacy

The App is not intended for children under the age of 13.

We do not knowingly collect personal information from children under 13 years of age. If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us immediately at support@dugsiya.com, and we will take steps to delete such information.

If we learn that we have collected personal information from a child under 13 without verification of parental consent, we will delete that information as quickly as possible.

For Users Ages 13-17: If you are between 13 and 18, please have your parent or guardian review this Privacy Policy with you before using the App.

7. Data Security

7.1 Security Measures

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Security Measures Include:

• Encryption of data in transit using HTTPS/TLS
• Encryption of sensitive data at rest
• Secure storage of authentication tokens in iOS Keychain
• Access controls and authentication for our backend systems
• Regular security assessments and monitoring
• Secure handling of biometric (voice) data

Voice Recording Security:

• Recordings are transmitted over encrypted connections (HTTPS)
• Recordings are stored on secure, access-controlled servers
• Access to recordings is limited to you and authorized services
• Recordings are deleted upon account deletion or request

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7.2 Data Breach Notification

In the event of a data breach that affects your personal information:

Notification Timeline:

• We will notify affected users within 72 hours of becoming aware of a breach that poses a risk to your rights and freedoms
• For breaches affecting biometric data, we will notify you as soon as reasonably practicable and no later than required by applicable law (e.g., BIPA, state breach notification laws)

What We Will Provide:

• Description of the nature of the breach
• Categories of data affected
• Approximate number of users affected
• Contact information for our privacy team
• Steps we are taking to address and mitigate the breach
• Recommendations for steps you can take to protect yourself

Notification Methods:

• Email to the address associated with your account
• In-app notification
• For widespread breaches, notice on our website

Regulatory Reporting:

We will report breaches to relevant supervisory authorities as required by law, including:

• State Attorneys General (as required by state breach notification laws)
• Data Protection Authorities (for GDPR-covered users)
• Other authorities as required by applicable law

Reporting Security Issues: If you discover a security vulnerability, please report it to support@dugsiya.com.

8. International Data Transfers

Your information, including voice recordings, may be transferred to and processed in countries other than your country of residence, primarily the United States.

Transfer Mechanisms:

• We rely on Standard Contractual Clauses (SCCs) for transfers from the EEA/UK
• Our service providers maintain appropriate data protection certifications

By using the App, you consent to the transfer of your information to the United States and other countries where our service providers operate.

We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

9. Third-Party Content and Services

9.1 Quran Content Attribution

The App uses Quran content from the following sources:

Arabic Text: Uthmani script with tajweed markers, sourced from Quran.com API (https://quran.com)

Audio Recitations: Reference audio from renowned Qaris, including:

• Sheikh Abdul Basit Abdul Samad (Murattal)
• Sheikh Mishary Rashid Alafasy
• Sheikh Saad Al-Ghamdi
• Sheikh Muhammad Siddiq Al-Minshawi

Audio sourced from Quran.com and used in accordance with their terms of service.

Translations: Various translations as indicated in the App, sourced from Quran.com.

9.2 Third-Party Links

The App may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date at the top of this policy
• Sending you a push notification if the changes are material (especially changes to biometric data handling)

Your continued use of the App after any changes indicates your acceptance of the updated Privacy Policy.

Material Changes: For material changes affecting biometric data collection or sharing practices, we will seek your renewed consent where required by law.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Your Rights:

• Right to Know: You can request information about categories and specific pieces of personal information collected, sources, purposes, and third parties with whom we share
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions
• Right to Correct: You can request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information: You can limit our use of sensitive personal information (including biometric data) to purposes necessary to provide the services
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights

We do not sell personal information.

To exercise your rights, contact us at support@dugsiya.com.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

Your Rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (especially for biometric data)
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Legal Bases for Processing:

Special Category Data: Voice recordings may constitute biometric data, which is a special category under GDPR. We process this data based on your explicit consent, which you provide when using the recording features.

To exercise your rights, contact us at support@dugsiya.com.

Data Protection Officer: For GDPR inquiries, contact our Data Protection representative at support@dugsiya.com.

13. Other State Privacy Rights

Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA)

Residents of these states have similar rights to access, delete, correct, and opt-out. Contact support@dugsiya.com to exercise your rights.

Illinois Biometric Information Privacy Act (BIPA)

If you are an Illinois resident:

• We collect biometric data (voice recordings) with your informed consent
• We do not sell, lease, trade, or profit from your biometric data
• We will permanently destroy biometric data when the purpose for collection has been satisfied or within 3 years of your last interaction with us, whichever comes first
• We store and transmit biometric data using reasonable security measures

14. Analytics and Tracking

14.1 Analytics We Collect

We collect analytics data to improve the App:

• Feature usage patterns
• Practice session statistics
• Error rates and performance metrics
• User flow and navigation patterns

14.2 Crash Reporting (Sentry)

We use Sentry for crash reporting and error monitoring. When the App crashes or encounters an error, Sentry may collect:

• Device information (model, OS version)
• App state at time of crash
• Error messages and stack traces
• Screenshots of the App interface at the time of crash

This data helps us identify and fix bugs. Crash data is retained for 90 days.

14.3 No Third-Party Advertising

We do not display third-party advertisements in the App. We do not share your data with advertising networks.

15. Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your rights, please contact us:

Response Time: We will respond to your inquiry within 30 days, or sooner as required by applicable law.

16. Definitions

• Personal Information: Any information that identifies, relates to, describes, or could reasonably be linked to you or your household.
• Biometric Data: Data generated from the measurement or analysis of human body characteristics, including voice recordings, that can be used to identify an individual.
• Processing: Any operation performed on personal information, such as collection, storage, use, analysis, or disclosure.
• Service Providers: Third-party companies that process personal information on our behalf.
• Sensitive Personal Information: Personal information that reveals certain characteristics, including biometric data.

This Privacy Policy is provided in English. If translated into other languages, the English version shall prevail in case of any discrepancy.

Last reviewed: February 19, 2026