Privacy Policy
This Privacy Policy explains what data Ayahline (the "App," "we," "us") collects, processes, and shares when you use it. Ayahline is published by an independent developer based in the United States. Contact: email us.
1. Information we collect
1.1 Information stored only on your device
The following data is created and stored locally on your iPhone using Apple's SwiftData framework inside the App's sandboxed App Group container. It never leaves your device unless you back up your iPhone to iCloud (using Apple's standard encrypted device backup) or transfer it to a new iPhone via Apple's migration tools.
- Where you are in the Quran, which ayahs you have read in the current khatm, and how many khatms you have completed.
- Ayahs you saved, your daily ayah goal (5, 10, or 20), today's count, and how many free Study sheets you have used today.
- Your chosen reciter.
- Your current streak count and last active date.
- Daily reminder time, if you enabled the optional reminder.
- Recitation audio and tafsir text the App has already fetched, cached so they don't download again.
- Your current Premium entitlement status (subscriber / not), once you have subscribed.
- Cached anonymous identifier issued by RevenueCat's on‑device SDK so the App can ask Apple whether you have an active subscription on this device (see §3).
- Ayahs you memorized in Memorize mode.
- The codes of the khatm circles you are in, and a random key, kept in the iOS Keychain, that lets your App act as you in them (see §1.3).
None of this is transmitted to us. There is no Ayahline account and no login.
1.3 Information sent to Ayahline's server
Ayahline runs a small server at api.ayahline.app, hosted by Cloudflare (Cloudflare Workers and D1). It receives only the following.
- Read counts. When an ayah counts as read, the App sends that ayah's number, at most once a day per ayah, in small batches. Nothing identifies you or your device. The server keeps only a running total per ayah per day, deletes those totals after two days, and shows them to everyone as "read by … people today". Turn this off in Settings → Count my reading.
- Khatm circles, only if you start or join one. The circle's name, the name you choose to be shown as, which juz you take and whether you have read them, when you joined, and a one‑way hash of your App's random key. People who have the circle's code can see the circle's name, its members' chosen names and their juz; nobody else can. When you leave a circle, or its starter removes you, your membership is deleted; a circle is deleted when its last member leaves.
Like any web server, Cloudflare processes your IP address to deliver these requests. Ayahline does not store IP addresses.
1.2 Information we do not collect
The App never requests or collects any of the following:
- Your real name, email address, phone number, photo, contacts, calendar, reminders, location, or any other personally identifying information. (In a khatm circle you choose the name others see; it can be a nickname.)
- Health data, financial data, or biometric data.
- Camera, microphone, photo library, or HealthKit access.
- Advertising identifiers (IDFA). The App does not request App Tracking Transparency permission because nothing in the App tracks you.
- Device fingerprints (model, IP address, language, time zone are not transmitted by the App).
- Crash logs that contain personal data. Apple may collect anonymous crash logs at the OS level if you opted in to "Share With App Developers" in iOS Settings; if so, you can revoke that at any time in Settings → Privacy & Security → Analytics & Improvements.
2. How we use information
Almost everything is used only on your device:
- To reopen the feed where you left off and show your progress toward a khatm and your daily goal.
- To keep your saved ayahs and your chosen reciter.
- To schedule local notifications via Apple's
UNUserNotificationCenter. Notifications are scheduled by your iPhone; they do not pass through a remote push server controlled by us. - To show widgets that read the ayah of the day and your streak through Apple's App Group container.
- On Ayahline's server: to show how many people read an ayah today, and to show the people in a khatm circle who is reading which juz (§1.3). For nothing else.
3. Third‑party services
The App connects to the services below, each governed by its own privacy policy. We do not share anything beyond what is technically required for each to work.
| Service | Purpose | What is sent |
|---|---|---|
| Apple Inc. (App Store, StoreKit, APNs, iCloud backup) | Distributing the App; processing in‑app purchases; delivering OS‑level features; optional encrypted backup if you enabled it in iOS Settings. | What Apple normally receives when you download or buy an app on the App Store. Ayahline does not send anything additional. Apple's privacy policy: apple.com/legal/privacy. |
| RevenueCat, Inc. (subscription receipt validation) | Validating App Store purchase receipts and telling the App whether your Premium entitlement is active. Standard practice for iOS in‑app subscriptions. | An anonymous user identifier generated by RevenueCat's SDK, the App Store transaction receipt, and the bundle identifier. No personal data, no usage data, no content you read. Their privacy policy: revenuecat.com/privacy. |
| Quran recitation hosts (download.quranicaudio.com, audio-cdn.tarteel.ai, mp3quran.net) | Streaming the recitation of the surah you are listening to. | A standard web request for that recording, which reveals your IP address to the host. Nothing else. Only when you press Listen. |
| QuranEnc.com (tafsir) | Fetching the Al‑Mukhtasar tafsir for an ayah you open in Study. | A standard web request naming the surah and ayah, which reveals your IP address. Only the first time you study that ayah; afterwards it is read from your device. |
Cloudflare, Inc. (hosting for api.ayahline.app and this website) |
Running Ayahline's server for read counts and khatm circles, and serving ayahline.app. | What is described in §1.3, plus your IP address as part of each web request. Their privacy policy: cloudflare.com/privacypolicy. |
If you never purchase Ayahline Premium, RevenueCat may still be invoked once when the App launches to confirm there is no active subscription. This generates a single anonymous identifier and a short receipt‑status check. It does not include any of the data listed in §1.1.
The App contains no analytics SDKs (no Google Analytics, no Firebase Analytics, no Mixpanel, no Amplitude, no Segment), no advertising SDKs, no attribution SDKs, and no social‑login SDKs.
4. AI and machine learning
Ayahline contains no AI features and contacts no AI service. The Quran text, translation, word meanings and tafsir are shown as their sources publish them; nothing is generated or rewritten by a model, and we do not train any model on your data.
5. Notifications
If you grant notification permission, the App may schedule one local notification per day at the time you choose, carrying that day's ayah, and, if you start a free trial, one reminder two days before it ends. Both are created on your device. No notification ever passes through a remote push server we control. You can disable notifications at any time in iOS Settings → Notifications → Ayahline or within the App in Settings → Daily reminder.
6. Widgets, Live Activities, and the App Group container
Ayahline includes home‑screen and lock‑screen widgets showing the ayah of the day and your streak. They share data with the main App through Apple's App Group mechanism, which is local to your device. They do not transmit anything.
7. Children
Ayahline is rated 4+ on the App Store and contains no objectionable material. The only personal data the App can send is the name a member chooses in a khatm circle (§1.3), shown only to that circle. We do not knowingly collect personal data from children under 13. If a parent believes a child has given us information in a circle, email us and we will delete it; the child can also simply leave the circle, which deletes it.
8. Your rights
Ayahline stores almost nothing about you, so most data‑rights requests are answered by Apple's own controls and by the App:
- Access / export. All your local data lives in SwiftData files inside the App's sandboxed container. iCloud encrypted device backup includes them; you can extract them via Apple's standard tools.
- Delete. Settings → Reset all progress wipes the local database. Leaving a khatm circle deletes your membership on the server. Read counts hold nothing about you and are deleted after two days. To cancel a Pro subscription, see §10.
- Object / restrict. Turn off Settings → Count my reading to stop sending read counts, and don't join circles to send nothing else. You may also withdraw notification permission or delete the App at any time.
- Lodge a complaint. EU/UK residents may complain to their local data‑protection authority. We will cooperate with any lawful request.
9. GDPR & CCPA disclosures
Ayahline does not sell personal information and does not share personal information for cross‑context behavioural advertising as defined under the California Consumer Privacy Act (CCPA/CPRA). Under the EU General Data Protection Regulation (GDPR), our lawful basis for the processing performed by RevenueCat (§3) is performance of a contract — that is the only way for us to verify your subscription on a given device — and for khatm circles it is performance of a contract too: you ask us to share your juz with your circle. Anonymous read counts are not personal data. We do not use your data for any other purpose. The controller is the Ayahline developer; the processors are RevenueCat, Inc. and Cloudflare, Inc.
10. Subscriptions, billing, and cancellation
All billing is handled by Apple. Ayahline never sees your payment information. You can manage or cancel your subscription at any time in iOS Settings → [Your Name] → Subscriptions → Ayahline, or via apps.apple.com/account/subscriptions. Cancellations take effect at the end of the current billing period. Apple, not Ayahline, processes any refunds — see support.apple.com/refunds.
11. Security
Your local data benefits from Apple's standard iOS data protection — encrypted at rest on modern iPhones tied to your device passcode. The remote requests described in §3 all use HTTPS. Because no personal data leaves your device, there is no remote breach surface we control.
12. Changes to this policy
If we make material changes, we will update the "Last updated" date at the top and, where the change is significant, surface a notice inside the App. Continued use of the App after a change means you accept the updated policy.
13. Contact
For privacy questions, complaints, or data‑rights requests: