Legal
Privacy Policy
Last updated: 28 July 2026 · Applies to the HifzMate mobile app and this website.
The short version
- Your memorization progress, notes, settings and date of birth are stored on your device only. There is no account and no cloud sync.
- A recording leaves your device only when you ask for a recitation check — and it is never used to train models.
- On child profiles the cloud voice check is switched off entirely, so children's recordings never leave the device.
- You can delete your recordings, downloads or everything at any time, from inside the app.
- This website sets no cookies and runs no analytics or trackers.
1. Who we are
HifzMate is a Qur'an memorization and revision app developed and operated by Murat Çatal, an independent developer. For the purposes of the GDPR and comparable laws, we are the controller of the limited personal data described below. You can reach us at privacy@hifzmate.app.
2. What we collect
HifzMate is built to keep data on your device. In practice there are only four categories:
| Data | Why | Where it goes |
|---|---|---|
| Voice recordings | To check your recitation word by word, and — if you opt in — to analyse tajweed on a single verse. | Sent for processing only when you request a check. Off entirely on child profiles. |
| Date of birth | To choose an age-appropriate experience and apply the protections required for minors. | Stays on your device. |
| Progress, notes, settings | Your daily plan, revision schedule, bookmarks, notes and preferences. | Stays on your device. |
| IP address (request counter) | To cap how many recitation checks can be made per day and prevent abuse of a paid service. | Stored as a daily counter on our processing service. Not linked to your recordings or profile. |
We do not collect your name, email address, phone number or contacts. We do not use advertising identifiers for tracking, and we do not build advertising profiles.
3. How the recitation check works
When you record yourself reciting and ask for feedback, the recording is sent over an encrypted connection to our processing service, and from there to the speech providers listed below, which return a transcript or a phoneme-level analysis. That result is compared against the verified Qur'anic text on your device to mark each word as correct, wrong or skipped.
- Word-level check — runs automatically after a recording in a memorization session.
- Tajweed (phoneme) check — a separate, optional check you start yourself, on one verse at a time.
We do not keep your recordings on our servers, and they are not used to train any model. Audio is processed to produce your feedback and then discarded. The recordings you can play back inside the app are the copies stored on your own device, and you can delete them at any time.
If you are offline, or you never use the voice check, no audio leaves your device at all — reading, memorizing and revising work entirely offline.
4. Where your data lives
Your progress, revision schedule, notes, bookmarks, settings and date of birth are stored in the app's local storage on your device. HifzMate currently has no accounts, no login and no cloud backup, so this information is not transmitted to us and we cannot see it. If we add optional accounts and sync in the future, this policy will be updated before that feature ships.
Because the data is local, uninstalling the app removes it. Please note that this also means it is not backed up by us — if you delete the app or lose the device, the data is gone.
5. Third-party processors
We use a small number of providers to run the recitation check and this website. They process data on our instructions and only for the purposes below.
| Provider | Purpose | Region |
|---|---|---|
| Supabase | Secure processing endpoint and daily request counters | EU (Frankfurt) |
| Groq | Speech-to-text for the word-level recitation check | United States |
| Modal | Hosting of the tajweed (phoneme) analysis model — optional check only | United States |
| Cloudflare | Hosting of this website and email forwarding for our contact addresses | Global network |
Where audio is processed outside the EEA, that transfer is necessary to provide the feature you asked for and is covered by the providers' standard contractual clauses. Child profiles never reach these providers, because the cloud voice check is disabled for them.
6. Children
HifzMate is designed for ages 10 to 70, so protections for minors are built into the app rather than added on:
- Under 13 — the profile is set up and managed by a parent or guardian.
- Ages 13–17 — parental consent is required during setup.
- Cloud voice check is switched off for child profiles. Their recordings are not sent for analysis and stay on the device.
- Social features and leaderboards are disabled for minors.
- Recordings are kept minimal and can be deleted in one tap from the app's Privacy screen.
We do not knowingly collect personal data from children beyond what is described here. If you are a parent or guardian and believe we have, contact privacy@hifzmate.app and we will act promptly.
7. Legal bases (EEA/UK)
- Performance of a contract — processing your recording to give you the recitation feedback you requested.
- Legitimate interests — daily request counters keyed to your IP address, to prevent abuse and control the cost of a service we pay for per use.
- Consent — the optional tajweed analysis, which you start explicitly, and parental consent for users aged 13–17.
Voice recordings analysed for recitation feedback are used to assess your reading, not to identify you, and we do not use them for biometric identification.
8. Retention
- Recordings — not retained on our servers; processed and discarded. Copies on your device remain until you delete them or uninstall the app.
- Progress, notes, settings, date of birth — kept on your device until you delete them in the app or uninstall.
- Request counters — a per-day count against an IP address, kept only for abuse prevention and not linked to any profile or recording.
9. Your rights and controls
The app's Privacy & data screen (Profile → Privacy) gives you direct control:
- Delete your voice recordings.
- Delete downloaded recitation audio.
- Delete all of your data, which resets the app to first-time setup.
Because your personal data lives on your device rather than on our servers, these controls are the fastest way to exercise deletion. If you are in the EEA, the UK or another region with comparable law, you also have the right to access, correct, delete, restrict or object to processing, to data portability, and to lodge a complaint with your local supervisory authority. Write to privacy@hifzmate.app and we will respond within 30 days.
10. This website
hifzmate.app is a static page. It sets no cookies, embeds no third-party scripts and runs no analytics or advertising trackers. As with any website, our host (Cloudflare) processes standard request data such as IP address for security and to serve the page.
11. Changes and contact
We may update this policy as the app develops — for example when accounts and sync are introduced. The current version always appears on this page with its date, and material changes will also be surfaced in the app.
Questions, requests or concerns: privacy@hifzmate.app. General enquiries: hello@hifzmate.app.