Privacy Policy

Introduction

This Privacy Policy describes how TahfeezHub ('we', 'our', or 'us') collects, uses, and shares your personal information when you use our mobile application (iOS and Android) and web services available at https://tahfeezhub.com.

TahfeezHub is a comprehensive Quran memorization and teaching platform that connects students with teachers, tracks learning progress, and provides educational resources.

Information We Collect

We collect information you provide directly to us, such as when you create an account, including your name, email address, phone number, and profile information. We also collect information about your usage of our services and device information.

1. Contact Information:

• Email Address: Used for authentication, account recovery, and important communications
• Phone Number (Optional): Used for optional contact and account verification
• Name: First and last name for your profile and teacher-student interactions

2. Identifiers:

• User ID: Unique identifier assigned to your account
• Device ID/Token: For sending push notifications about sessions and updates
• Firebase User ID: When using Google or Apple Sign-In

3. Usage Data:

• Product Interaction: App launches, feature usage, navigation patterns, time spent in app
• Learning Progress: Quran memorization progress, session attendance, achievements
• Reservation Data: Teacher-student session bookings and history
• App Events: Collected via Facebook SDK for analytics and advertising measurement

4. User Content:

• Progress Notes: Your personal notes on memorization progress
• Profile Information: Bio, preferences, learning goals
• Communications: Messages between students and teachers (if applicable)

5. Technical Information:

• Device model, operating system version
• App version and build number
• Language preference (Arabic/English)
• IP address and general location (country-level)
• Crash logs and error reports (via Firebase)

How We Use Information

We use the information we collect to provide, maintain, and improve our services, to communicate with you, and to ensure the security of our platform.

Specifically, we use your information to:

• App Functionality: Provide Quran learning services, authentication, account management
• Teacher-Student Matching: Connect students with appropriate teachers
• Reservations: Process and manage session bookings between students and teachers
• Progress Tracking: Track your memorization progress and achievements
• Notifications: Send push notifications about scheduled sessions, approvals, and updates
• Analytics: Understand usage patterns to improve user experience (via Firebase and Facebook SDK)
• Advertising Measurement: Measure effectiveness of our advertising campaigns (via Facebook SDK)
• Product Personalization: Customize your learning experience based on preferences
• Communications: Send password reset emails, account notifications, and support responses
• Security: Detect fraud, prevent abuse, and ensure platform integrity
• Legal Compliance: Comply with applicable laws and regulations

Third-Party Services and Data Sharing

We do not sell your personal information to anyone.

We use the following third-party services that may collect and process your data:

1. Firebase (Google LLC)

• Services Used: Authentication, Cloud Messaging (push notifications), Cloud Firestore, Crashlytics
• Data Collected: User IDs, device tokens, crash reports, analytics data
• Purpose: App functionality, authentication, notifications, error tracking
• Privacy Policy: https://firebase.google.com/support/privacy

2. Facebook SDK (Meta Platforms, Inc.)

• Services Used: Facebook App Events, advertising tracking
• Data Collected: App events, device information, advertising identifiers (with user consent)
• Purpose: Measure advertising effectiveness, analytics
• User Control: You can opt-out via iOS App Tracking Transparency prompt
• Privacy Policy: https://www.facebook.com/privacy/policy

3. Google Sign-In

• Data Collected: Email, name, profile picture (with your permission)
• Purpose: Optional authentication method
• Privacy Policy: https://policies.google.com/privacy

4. Sign In with Apple

• Data Collected: Apple ID, email (or relay email), name
• Purpose: Optional authentication method
• User Control: You can hide your email using Apple's private relay
• Privacy Policy: https://www.apple.com/legal/privacy/

We may also share information with:

• Teachers and Moderators: Only necessary information (name, progress) for learning purposes
• Service Providers: Hosting providers, database services (under strict confidentiality agreements)
• Legal Authorities: When required by law or to protect rights and safety
• Business Transfers: In case of merger, acquisition, or sale of assets (you will be notified)

Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Our security measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure hosting and infrastructure
• Regular backups and disaster recovery procedures

App Tracking Transparency and Your Choices

iOS Users: Our app uses Facebook SDK which may track you across apps and websites owned by other companies. When you first launch the app on iOS 14.5 or later, you will see a prompt asking for permission to track you.

What is tracked (if you allow):

• App events and interactions (e.g., registration, session bookings)
• Advertising effectiveness data
• Cross-app usage patterns

What happens if you deny tracking:

• ✅ All app features will continue to work normally
• ✅ Your learning experience will NOT be affected
• ✅ You will still receive push notifications about sessions
• ❌ We cannot measure advertising campaign effectiveness
• ❌ Personalized advertising experiences will be limited

How to change your tracking preference:

iOS: Settings → Privacy & Security → Tracking → TahfeezHub (toggle on/off)

Your Rights and Data Control

You have the right to access, correct, or delete your personal information. You can also opt out of certain communications and data processing activities.

Your rights include:

• Access: Request a copy of all personal information we hold about you
• Correction: Update or correct inaccurate information in your profile settings
• Deletion: Request deletion of your account and all associated data
• Opt-Out of Marketing: Unsubscribe from promotional emails
• Opt-Out of Tracking: Disable tracking via iOS Settings (see above)
• Data Portability: Request your data in a portable format
• Withdraw Consent: Withdraw consent for data processing at any time
• Lodge Complaints: File complaints with relevant data protection authorities

How to exercise your rights:

• Email us at: [email protected]
• Use in-app settings to update profile or delete account
• We will respond to requests within 30 days

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy.

Retention periods:

• Active Accounts: Data retained while your account is active and for a reasonable period after (to allow reactivation)
• Deleted Accounts: Most data deleted within 30 days of account deletion
• Learning Progress: May be retained in anonymized form for research and improvement
• Legal Requirements: Some data retained longer to comply with legal obligations (e.g., financial records)
• Security Logs: Retained for 90 days for fraud prevention and security purposes
• Backup Systems: Data may persist in backup systems for up to 90 days after deletion

After the retention period, we will securely delete or anonymize your data so it can no longer identify you.

Children's Privacy

TahfeezHub is designed for users of all ages, including children learning Quran memorization. We are committed to protecting children's privacy.

Our commitment:

• No Directed Advertising: We do not use tracking data to target advertising to children
• Parental Consent: We encourage parents to supervise their children's use of the app
• Teacher Oversight: Student accounts are connected to verified teachers who monitor progress
• Minimal Data Collection: We only collect data necessary for educational purposes
• No Public Profiles: Children's profiles are not publicly visible

Parents' Rights: If you are a parent or guardian and believe your child is using our services, you can contact us to review, modify, or delete your child's information.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

Changes to Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request details about what personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the "sale" of personal information (Note: We do not sell your data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise your CCPA rights, contact us at [email protected]

European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on consent, contract performance, legal obligations, and legitimate interests
• Data Controller: TahfeezHub is the data controller for your personal information
• International Transfers: Your data may be transferred outside the EEA with appropriate safeguards
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority