Privacy Notice

Last updated: 5/7/2026

1. Who we are

Quran Sheikh Finder (the "Service") is operated by QURAN IDENTIFIER ("we", "us"). We act as the data controller for personal data processed through the Service.

2. Data we collect

  • Account data: name, email address, login credentials (managed via our authentication provider, including Google sign-in if used), profile preferences.
  • Audio uploads: short audio clips you record or upload for identification.
  • Scan history: the results of your identifications (sheikh, surah, ayah, confidence, timestamps).
  • Usage and telemetry: scan counts, credits granted/used, error logs, device type, browser, IP address.
  • Purchase records: when you buy a credit pack, we receive a Gumroad sale ID, the product purchased, the buyer email, and a flag indicating whether the sale was a test or live transaction. We use this to credit the right account and to honour refunds.
  • Support messages: any communication you send us.

3. Why we use it (purposes & legal basis)

  • Provide the Service (account creation, identification, history, granting purchased credits) — performance of contract.
  • Security & fraud prevention (rate limiting, abuse detection, webhook verification) — legitimate interests.
  • Service improvement (debugging, quality of identification) — legitimate interests.
  • Customer support — performance of contract / legitimate interests.
  • Legal compliance — legal obligation.

Payment data (card details, billing address, tax info) is collected and processed directly by our payment provider, Gumroad. We never see or store your card details — we only receive the minimal sale metadata described above so that credits can be added to the correct account.

4. Who we share data with

  • Service providers / subprocessors: hosting, database, authentication, file storage, error logging, audio identification providers (e.g. ACRCloud), and AI providers used for identification.
  • Gumroad — our payment provider — for one-off credit pack checkout, payment processing, tax compliance, and receipts. Gumroad sends us a webhook confirming each sale so we can grant the corresponding credits.
  • Professional advisers (legal, accounting) where necessary.
  • Authorities where required by law.

5. International transfers

Some of our providers may be located outside your country, including outside the UK/EEA. Where this is the case, we rely on appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions) to protect your data.

6. Retention

We keep account data for as long as your account is active. Scan history and uploaded audio are retained until you delete them or close your account. Billing records are retained as required by tax law (typically 6–10 years). After these periods, data is deleted or anonymized.

7. Your rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time (where processing is based on consent)
  • Lodge a complaint with your local data protection authority

To exercise these rights, contact us through the in-app support channels. We will respond within one month.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), encrypted storage, access controls, and row-level security on our database.

9. Cookies

We use essential cookies and local storage to keep you signed in and remember your preferences. We do not use advertising cookies. Gumroad may set cookies during checkout to process your payment.

10. Children

The Service is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect data from children.

11. Changes to this notice

We may update this Privacy Notice from time to time. We will notify you of material changes through the Service or by email.

12. Contact

For privacy questions, contact us through the in-app support channels. The data controller is QURAN IDENTIFIER.