Privacy Policy

Axiom Data ("we", "us", or "our") operates the Secure Quran App ("the App") on Android and iOS. This Privacy Policy describes how we handle information when you use our App on either platform.

1. Information We Collect

None. The Secure Quran App does not collect, transmit, or store any personal information on external servers. Specifically:

• No personal information (name, email, phone number)
• No device identifiers or advertising IDs
• No usage analytics or telemetry
• No crash reports sent to any server
• No location data transmitted anywhere
• No browsing or reading history sent externally
• No cookies or web tracking technologies

2. Data Stored on Your Device

The App stores the following data locally on your device only. This data never leaves your device:

• Reading position — your last read surah and verse, so you can resume where you left off
• Bookmarks — saved verses with optional colour tags
• App preferences — theme, font size, reciter selection, and other settings
• PIN hash — if you enable app lock, a cryptographic hash of your PIN (never the PIN itself)
• Recent searches — your last 10 search queries, stored locally for convenience

Android

All user data is encrypted at rest using SQLCipher (AES-256-CBC encryption with 256,000 PBKDF2 iterations). Encryption keys are managed by the Android Keystore hardware security module.

iOS

All user data is encrypted at rest using Core Data with SQLCipher or iOS Data Protection. Encryption keys are managed by the iOS Keychain Services backed by the Secure Enclave.

3. Network Access

The App connects to the internet only when you explicitly choose to stream or download Quran audio recitations. Audio is streamed from:

• EveryAyah.com — a public Quran audio CDN

These audio requests contain no user data, no device identifiers, and no tracking parameters. The App uses HTTPS for all network connections.

The App works fully offline for Quran reading, search, and bookmarks. No internet connection is required for any feature other than audio streaming.

4. Third-Party Libraries

The App includes the following third-party libraries. None of them collect or transmit user data:

Android

• Hilt (Dagger) — dependency injection framework, no network activity
• Jetpack Media3 (ExoPlayer) — audio playback engine, connects only to the audio CDN listed above
• SQLCipher — local database encryption, no network activity
• AndroidX Biometric — hardware biometric authentication, no network activity

iOS

• SwiftUI — native UI framework, no network activity
• AVFoundation — audio playback engine, connects only to the audio CDN listed above
• Core Data / SQLCipher — local database encryption, no network activity
• LocalAuthentication — hardware biometric authentication (Face ID / Touch ID), no network activity

On neither platform does the App include:

• Firebase, Google Analytics, or Apple Analytics
• AdMob or any advertising network
• Crashlytics or any crash reporting service
• Facebook SDK or any social media SDK
• Any analytics, tracking, or telemetry SDK

5. App Permissions

Android Permissions

iOS Permissions

All permissions on both platforms are optional or required only for specific features. The core Quran reading experience requires no special permissions.

6. Security Measures

The App implements the following security measures to protect your data:

• Encryption at rest — all user data encrypted with SQLCipher (AES-256-CBC) on both platforms
• Hardware-backed key storage — encryption keys managed by Android Keystore or iOS Keychain / Secure Enclave
• PIN protection — PBKDF2 with 600,000 iterations and SHA-256
• Biometric authentication — via Android BiometricPrompt API or iOS Face ID / Touch ID (LocalAuthentication)
• Screenshot protection — FLAG_SECURE on Android prevents screen capture (can be toggled in settings)
• No cloud backup — sensitive databases are excluded from Android backup and iCloud backup
• HTTPS only — cleartext network traffic is disabled on both platforms

7. Children's Privacy

Secure Quran App is committed to following the Google Play Families Policy and Apple's App Store Guidelines for Kids. The App does not collect any data from any user, including children. Specifically:

• The App does not collect or share any personal information
• The App does not require an account or sign-in
• The App contains no advertising or ad networks
• The App contains no in-app purchases
• The App does not have user-generated content or social features
• The App does not link out to external websites or apps beyond the audio CDN

The App is suitable for users of all ages and complies with applicable children's privacy regulations, including COPPA (Children's Online Privacy Protection Act), by virtue of collecting no data whatsoever.

8. Data Deletion

Since no data is collected or stored externally, there is no data to delete on our end. To remove all locally stored data:

Android

• Clear app data — go to Settings > Apps > Secure Quran > Storage > Clear Data
• Uninstall the app — this removes all app data from your device

iOS

• Delete the app — tap and hold the app icon, then select Remove App > Delete App. This removes all app data from your device
• Offload the app — go to Settings > General > iPhone Storage > Secure Quran > Delete App to remove the app and all its data

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. Our commitment to collecting zero data will not change.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at: