Privacy Policy

Data controller

The data controller is Hatim App. For any privacy question or request: iletisim@hatim.app

What we collect

You can read the Quran without signing in; your reading position, bookmarks and settings then stay on your device only. When you sign in, we store the following on our server:

• Account details: your name and email address. With Google sign-in, also your Google account ID and profile photo URL.
• Reading data: where you left off, your bookmarks and the days you read (for your streak).
• Khatm groups: groups you create or join, group name and image, juz you take and read, join requests.
• Notifications: your notification preferences, your device's push token, device language and app version.
• App usage and crashes (mobile app only): which screens are opened and which actions are taken (e.g. joining a group, taking a juz, adding a bookmark; without group names or content), session length, device model, operating system and app version; technical details of the error if the app crashes. Your name, email or account ID are not attached to these records, and no advertising ID is collected.
• Technical records: IP address and browser/device details to keep your session secure; ordinary server access logs.

Why we use it

We use your data only to create your account and verify sign-in, sync your reading across devices, run khatm groups (juz assignment, progress), send the notifications you ask for, protect the service from abuse, and find and fix bugs in the app and improve it based on which parts are used.

Our legal grounds: it is necessary to provide the service (KVKK art. 5/2-c), our legitimate interest such as keeping the service secure (art. 5/2-f), and the permission you give on your device for notifications.

Who can see it

When you join a group, your name, initial and juz status are shown to people who can see that group. Public groups are visible to everyone; private groups only to their members. Your email address is never shown to other users.

Services we use

We run the service on our own server. For some tasks only the necessary data is passed to the providers below, some of which are located outside Turkey (KVKK art. 9):

• Resend: your email address, to send your sign-in code.
• Google: to verify your identity when you sign in with Google.
• Firebase Cloud Messaging and Apple Push Notification service: your push token, to deliver mobile notifications.
• Firebase Analytics and Firebase Crashlytics (Google): usage statistics and crash reports in the mobile app, tied to an ID specific to the app installation that contains no personal details.
• Your browser's push service: for web notifications.
• Al Quran Cloud and Quran.com: recitation audio is played directly from these sources, so your IP address reaches their servers when audio is requested.

Google user data

When you sign in with Google, we only receive your name, email address and profile photo; your Google password never reaches us. We use this information only to create your account and recognize you; we do not share it or use it for advertising. Hatim App's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and on-device storage

We do not use advertising or tracking cookies. Your browser only stores the session cookie, your language preference (hatim.lang) and your settings (theme, font size, reading position).

How long we keep it

We keep account data for as long as your account exists. Sign-in codes expire after 10 minutes; sessions are deleted when they expire. When you delete your account, your name, email, reading data, memberships and notification records are deleted immediately. Juz you have read stay in the shared khatm as "read" but without your name; notifications already sent to other members may still show your name.

Deleting your account

You can permanently delete your account at any time in the app or on the site under Me → Delete my account. In groups you manage, the longest-standing member becomes the admin; groups with no other members are deleted. If you can't sign in, write to iletisim@hatim.app from your registered email address; we complete requests within 30 days at the latest.

Your rights

Under KVKK art. 11 (and similar laws such as the GDPR) you have the right to learn whether your data is processed, request information, learn the purpose, know who it is transferred to, have it corrected or deleted, object, and claim compensation for damages. Send your requests to iletisim@hatim.app; we reply within 30 days at the latest.

Children

You must be over 13 to create an account. Younger children should use Hatim App under parental supervision.

Changes

When we update this policy we change the date above; we announce significant changes in the app or on the site.