Privacy Policy
Last updated 15 September 2026. This policy explains what we collect, why, and what you can ask us to do about it. We collect as little as the app can work with.
Who is responsible
The Hifza app (hifza.app) is operated by MXMEDIA. For any question about your data write to [email protected] and we will answer within 30 days.
What we collect
When you sign in: your phone number, or — if you use Google — the email address, name and profile picture your Google account passes to us.
While you use the app: the name you enter yourself, your language and script settings, your chosen reciter, which ayahs you have memorised, your scores, and the questions you ask the teacher.
Technical data: the IP address of the request and the time it was made, kept so that we can stop abuse.
Voice recordings
The microphone is used only while you hold or press the record button.
The recording is sent to a speech-recognition service to be compared with the text, and is deleted once the answer comes back. We do not store recordings.
What remains is the score, the list of mispronounced words and the teacher's advice.
Why we are allowed to do this
To provide the service you asked for — an account, saved progress, review reminders. In European terms this is performance of a contract.
For the microphone and the AI teacher, your consent, which you give by pressing the button and may withdraw at any time by not using them.
To keep the service safe from abuse — our legitimate interest.
Who else sees it
Google (Firebase Authentication) — verifies your phone number or Google account. It never receives your memorisation progress.
The AI provider — receives the voice recording or the question and the ayah in hand, and nothing that identifies you.
Our hosting provider, on whose servers the data is stored.
We do not sell your data, do not pass it to advertisers and do not use it to build advertising profiles.
Where the data lives
On servers in Finland, within the European Union.
If you use the app from outside the EU, your data is transferred there. We rely on the European Commission's standard contractual clauses where they apply.
How long we keep it
Your account and progress: while the account exists.
Sign-in codes and technical records: up to 90 days.
Voice recordings: not kept at all.
If you delete your account, everything tied to it goes with it, except what we are obliged by law to retain.
Your rights
You may ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop processing it, or ask for it in a portable form.
Write to [email protected]. We do not charge for this and we answer within 30 days.
If you are in the European Union and you are unhappy with our answer, you may complain to your national data protection authority.
Children
The app is not aimed at children under 13, and we do not knowingly collect their data. If a child under 13 has an account, write to us and we will delete it.
What is stored in your browser
We use no advertising or tracking cookies.
Your browser keeps your sign-in token, your chosen language, theme and filters — so that you are not asked again on every visit. All of it stays on your device and you can clear it in your browser settings.
Changes to this policy
If the policy changes in a way that matters, we will say so on this page and change the date at the top.