Privacy Policy

1. What data we collect

• Account. Only a random account identifier. We use your email once to send the sign-in code and do not store it: the database keeps only an irreversible hash from which the address cannot be recovered. We do not collect your name or photo.
• Purchases. Order number, amount, date, payment status, masked card number and identifier for recurring charges issued by TipTop Pay. We do not receive the full card number, expiry date or CVV.
• Technical data. IP address, browser and device type, request times. They are needed to operate the website, prevent fraud and investigate disputed payments.
• Browser settings. Theme, city for prayer times and reading settings are stored only in your browser (localStorage) and are not sent to the server.

The website has no advertising trackers or advertising cookies. We keep anonymous visit statistics: which sections are opened, which site the visitor came from and what type of device is used. For this, a random identifier not linked to an account is stored in the browser's localStorage; cookies are not used, and no data is passed to third-party services. Statistics are not collected if the “Do Not Track” or Global Privacy Control signal is enabled in the browser.

2. Why we use data

• so that you sign in to one account on the website and in the Quran.kz app;
• to issue, renew and cancel the PRO subscription and open access on all devices;
• to respond to support requests;
• to prevent fraud and investigate disputed payments;
• to comply with the legislation of the Republic of Kazakhstan.

We do not sell personal data.

3. Who we share data with

• TipTop Pay (tiptoppay.kz) — the payment service accepting Visa and Mastercard payments: processing payments and recurring charges;
• RevenueCat, Inc. — subscription status tracking so that PRO also works in the app.

RevenueCat may process data outside Kazakhstan, including in the USA. We share data with other third parties only in cases provided by law.

4. How long we keep data

• account data — until the account is deleted;
• payment records — 5 years, as required by accounting legislation;
• technical logs — up to 12 months.

5. Your rights

You can request information about your data, correct it, withdraw consent to processing or delete your account. Write to qurankzapp@gmail.com; you can also delete your account in your profile on the website or in the Quran.kz app.

6. Security

Data is transmitted only over a secure HTTPS connection. Payment card data is processed by the TipTop Pay payment service under the PCI DSS standard. Employees' access to data is restricted and granted only to perform their tasks.

7. Changes to the policy

If the policy changes, the new version will be published on this page with a new date. The privacy policy of the Quran.kz Android app is published separately on iqra.kz.

Language of this document

This English text is a translation provided for convenience. The Russian version is the governing version: if the texts differ, the Russian version prevails.