Privacy Policy

1. Introduction & data controller

Muqraa — Everlasting Trade, the Women’s Tele‑Qur’an School (“the platform”, “Muqraa”, “we”), respects your privacy and is committed to protecting your personal data and processing it fairly, transparently and in accordance with the applicable laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law and its implementing regulations.

Muqraa is the data controller and operates under the supervision of Maknoon Association. For any privacy question or to exercise your rights, contact our data protection contact at privacy@tejarahlntpoor.com or support@tejarahlntpoor.com.

This policy explains what data we collect when you use the Muqraa app or website, the legal basis for processing it, how we use, share and protect it, how long we keep it, and your rights. Using the platform confirms that you have read and understood this policy.

2. Definitions

Personal data: any information that identifies an individual, or makes them identifiable directly or indirectly, such as name, email and phone number.
Processing: any operation performed on personal data, such as collection, storage, use, disclosure and deletion.
Data subject: the student, teacher or guardian to whom the personal data relates.
Controller: the party that determines the purpose and means of processing — i.e. Muqraa.

3. Data we collect

Account data: name, email, phone number, role (student/teacher), the program you choose, and your password (stored in an encrypted form that cannot be retrieved as plain text).
Learning content: audio recordings of your recitation, attendance/absence records, warnings, certificates and your progress.
Communications data: the messages you send us by email or contact forms and their content.
Technical usage data: device type and operating system, notification identifier (FCM), and performance/crash logs — used to operate, secure and improve the service.

We do not knowingly collect any sensitive data beyond what is necessary to provide the educational service, and we do not request bank‑card details through this website.

4. Legal basis for processing

We process your data on one or more of the following legal bases:

Performance of a contract: to let you create an account, attend circles and use the platform.
Consent: where you provide explicit consent (and a guardian’s consent for minors); you may withdraw it at any time.
Legitimate interests: to secure the platform, prevent fraud and improve the service without prejudicing your rights.
Legal obligation: to comply with laws and competent judicial orders.

5. How we use your data

To create and manage your account, verify your identity and let you attend circles and live sessions.
To let your teacher review recordings, track attendance and issue certificates.
To send notifications about session times, request status, account verification and password resets.
To improve quality, resolve technical issues, and maintain the security and safety of users.
To respond to your inquiries and support requests.

6. Cookies & tracking

This informational website does not use advertising cookies or third‑party analytics/tracking tools, and does not build advertising profiles about you. The app may use local storage on your device only to keep your login session and language preference — data that is strictly necessary to operate the service.

We do not sell or rent your personal data. We may use trusted service providers who process data on our behalf and only on our instructions, including:

Google Firebase for push notifications.
A video‑meeting service to run live sessions between student and teacher.
An email service to send verification, password‑reset and notification messages.
A hosting provider to run the platform’s servers and store data securely.

These providers are contractually bound to keep data confidential and process it only for the specified purposes. We may disclose data where required by law or a competent judicial or regulatory authority.

8. International data transfers

Some of your data may be processed or stored by service providers outside your country. Where this happens, we apply appropriate safeguards to protect your data to a standard no lower than that required by the laws applicable to us.

9. Children’s privacy & guardian consent

Some programs (such as Young Buds) include younger students. In these cases, registration and use must occur under a guardian’s supervision and explicit consent, and the guardian accepts this policy on the minor’s behalf. If we learn that data was collected from a minor without proper consent, we will delete it.

10. Data retention

We retain your personal data while your account is active and for as long as necessary to fulfil the purposes described here. When you delete your account, access is revoked immediately and your personal data is removed or anonymized within no more than 30 days, except where retention is required by law or for legitimate purposes (e.g. certificate‑issuance records) and only for the period mandated by law.

11. Your rights

Subject to applicable law, you have the following rights regarding your personal data:

To be informed about how your data is collected and why it is processed.
To access your data and obtain a copy of it.
To rectify inaccurate or incomplete data.
To erase your data when it is no longer needed — see “Account & data deletion”.
To restrict or object to processing in certain cases.
To withdraw consent at any time, without affecting the lawfulness of prior processing.
To lodge a complaint with the competent supervisory authority.

To exercise any of these rights, email us at privacy@tejarahlntpoor.com; we will respond within statutory periods after verifying your identity.

12. Account & data deletion

You can delete your account and data yourself, instantly, from the Delete account page by entering your email and password and confirming, or from within the app. Once confirmed, your app access is revoked and your personal data is deleted as described under Data retention.

13. Security & breach notification

We apply appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS), hashed (non‑reversible) password storage, access controls and periodic review. However, no method of transmission or storage over the internet can be guaranteed to be perfectly secure. In the event of a breach affecting your data, we will take the necessary action and notify the authorities and affected data subjects as required by law.

14. Changes to this policy

We may update this policy from time to time to reflect legal or operational changes, publishing the updated version on this page with a new “Last updated” date. Continued use after a change constitutes acceptance.

15. Governing law

This policy is governed by and construed under the laws in force in the Kingdom of Saudi Arabia.

16. Contact us

For any privacy inquiry or to exercise your rights, email us at privacy@tejarahlntpoor.com or support@tejarahlntpoor.com.

This policy is effective as of June 2, 2026.