Privacy Policy — NurHafiz
The German version of this document is the binding one. This translation is provided for information only.
Scope
This policy applies to the Android and the iOS app, and to this website insofar as it concerns that app.
What data is collected
Order data from Google Play
When you buy something in the app through Google Play, Google provides us with order data for billing and tax purposes: order number, product, amount, date and the buyer’s country. Region (canton or state) and postcode are added only where Google is not the seller of the order. We do not receive your name, full address or payment details. The source of this data is Google Play, not your device.
Sales reports from the App Store
When you buy something in the app through the App Store, Apple provides us with sales reports for billing and tax purposes: product, price and currency, date, the store’s country, the device type and whether a purchase was refunded. For subscriptions, an identifier is added that Apple generates at random and that applies only in relation to us; if you end all your subscriptions with us and do not take out a new one within 180 days, Apple deletes it. These reports do not contain your name, email address, postal address or payment details. The source of this data is the App Store, not your device.
Apple processes your purchase and account data itself, under Apple’s own privacy policy: apple.com/privacy
Purpose and legal basis
- Order data serves billing and bookkeeping only.
- Sales reports from the App Store serve bookkeeping and the evaluation of sales only.
For order data the legal basis is compliance with statutory retention obligations (Art. 6(1)(c) GDPR in conjunction with Art. 958f CO) and our legitimate interest in proper billing (Art. 6(1)(f)).
For sales reports from the App Store the legal basis is compliance with the statutory bookkeeping obligation (Art. 6(1)(c) GDPR in conjunction with Art. 958f CO) and our legitimate interest in evaluating sales (Art. 6(1)(f)).
Retention period
- Order data is kept for the duration of the statutory retention obligation — in Switzerland ten years from the end of the financial year (Art. 958f CO).
- Sales reports from the App Store are the basis of our bookkeeping and are therefore kept for the duration of the statutory retention obligation — in Switzerland ten years from the end of the financial year (Art. 958f CO).
Recitations
The recitations are not contained in the app. When you listen to or download a recitation, the app fetches the audio file directly from EveryAyah (everyayah.com), a third-party service. In doing so that provider receives — as with any request on the internet — technical connection data such as your IP address, and the requested file reveals which recitation, which surah and which ayah was loaded. The app transmits no identifier, no account and nothing about your learning progress; nothing comes to us. The provider’s terms apply. Downloaded files stay on the device and can be played afterwards without a connection. As long as you do not request a recitation, the app opens no connection.
Subscription
The app offers a subscription. Purchase, payment and proof of purchase run through the store you installed the app from: on Android through Google Play, on iOS through Apple’s App Store. We operate no server of our own for this. On the device the app records only whether access is active and when it was last confirmed; it does not store order numbers, receipts or payment details. Which data we receive from Google and from Apple is described above under “Order data from Google Play” and “Sales reports from the App Store”. The terms of the respective store apply.
One-time purchase
The app also offers a one-time purchase that applies permanently. Purchase, payment and proof of purchase likewise run through the store you installed the app from; we operate no server of our own for this. On the device the app records only that access is unlocked; it does not store order numbers, receipts or payment details. Which data we receive from Google and from Apple is described above under “Order data from Google Play” and “Sales reports from the App Store”. The terms of the respective store apply.
Device permissions
The app asks for the permissions below. They serve functions on the device; nothing is transmitted to us in the process. Where data does leave the device, this is stated in the relevant section.
Notifications
The app can show reminders as notifications. The operating system asks for permission once; you can decline it or revoke it at any time in the system settings, without losing the remaining functions.
Reminders are scheduled and triggered on the device only. No data is transmitted to us or to third parties for this.
Microphone
The app can use the microphone so that you can record your own recitation and compare it with the reciter’s. The operating system only asks for permission the first time you tap “Record”. Access is optional: you may decline it or revoke it at any time in the system settings; the remaining features stay usable.
Recording only happens when you start a recording. The recordings stay on the device: they are not uploaded and not analysed, they are excluded from the device backup and from the app’s backup file, and they can be deleted individually.
Home screen widget
If you set up the app’s widget on your home screen, it only shows what the app has calculated or stored on the device. For this, the app stores this information in a storage area on the device that the widget can read; the widget does not load anything from the internet and does not transmit anything.
Account
The app creates no account and requires no sign-in.
Device backup
Android may include the app’s data in the backup of your Google account if you have device backup turned on. Google manages this backup for you; we have no access to it.
Depending on your settings, iOS includes the app’s data in the iCloud or device backup. Apple or your computer manages this backup; we have no access to it.
How to delete your data
You delete the data on the device yourself, and immediately. On Android in the settings under “Apps” via “Storage” and “Clear data” — the app stays installed and starts as it did the first time — or by uninstalling the app; Android removes the data along with it. On iOS via “Settings” → “General” → “iPhone Storage” → select the app → “Delete App”, or by holding the app icon and choosing “Remove App” → “Delete App”. “Offload App” is not enough: it keeps the data.
You cannot delete the order data from Google Play or the sales reports from the App Store yourself. For the order data, you have the rights of access and erasure, insofar as no statutory retention obligation precludes this. The identifier in the sales reports from the App Store cannot be attributed to any person by us; access or erasure is possible there only if you provide us with information that allows attribution (Art. 11 GDPR). An informal message to privacy@nurharun.com is enough.
Your rights
You have the rights of access, rectification, erasure, restriction of processing, data portability and objection. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or with a data protection supervisory authority in the EU.
An informal message to the following address is sufficient for any request: privacy@nurharun.com
Controller
Harun Mustafa
Lindenpark 41
3427 Utzenstorf
Switzerland
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Insofar as the EU General Data Protection Regulation (GDPR) applies, the legal bases stated here are those under the GDPR.