Datenschutzrichtlinie

1. Introduction

This Privacy Policy describes how Sadr ("we", "our") collects, uses and protects your personal information when you use the Sadr mobile app available on iOS and Android, and the sadr.app website.

By using Sadr, you agree to the practices described in this policy. If you do not agree, please stop using the app.

2. Data Collected

2.1 Account Data

When creating your account, we collect:

• Email address
• Password (stored as a hash, never in plain text)
• Optionally: display name

2.2 Learning Data

To personalize your experience and ensure synchronization:

• Memorization progress (verses learned, review scores)
• Session statistics (duration, number of verses reviewed)
• Initial evaluation results and learning profile (persona)
• Badges and achievements
• App settings and preferences

2.3 Technical Data

• Device type and operating system (for debugging)
• Anonymized error logs

2.4 Voice Data

The recitation feature uses voice recognition. Audio is processed in real time via native system APIs (Android SpeechRecognizer / iOS SFSpeechRecognizer). We do not store any audio recordings on our servers. Voice processing is subject to Apple's and Google's privacy policies.

3. Use of Data

We use your data to:

• Provide and personalize the service (SRS algorithm, learning plan)
• Sync your progress across your devices
• Improve the app (aggregated and anonymized analysis)
• Contact you when necessary regarding your account
• Comply with our legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Third-Party Services

4.1 Supabase

Our database and authentication system are hosted by Supabase (servers in the EU). Supabase is GDPR compliant.

4.2 Voice Recognition

• iOS: Apple Privacy Policy
• Android: Google Privacy Policy

4.3 Quran Audio

Recitation audio is streamed from EveryAyah.com (free third-party service). Your IP address may be visible to this service during streaming.

5. Data Retention

Your data is kept as long as your account is active. Upon deletion, all personal and learning data is erased within 30 days.

6. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

• Right of access: obtain a copy of your data
• Right of rectification: correct inaccurate data
• Right to erasure: delete your account and all your data
• Right to portability: receive your data in a structured format
• Right to object: object to certain processing

To exercise these rights, contact us at contact@sadr.app or use the Delete Account feature.

7. Security

We apply appropriate security measures: TLS encryption in transit, password hashing, restricted database access. However, no system is infallible. In the event of a breach, we will notify you in accordance with applicable regulations.

8. Minors

Sadr is not intended for children under 13. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us for immediate deletion.

9. Changes

We may update this policy. The date of last modification is shown at the top of this page. For significant changes, a notification will be sent by email or displayed in the app.

10. Contact

For any questions about the privacy of your data:
📧 contact@sadr.app
🌐 sadr.app