HERAZUR LLC / HAFIZ HOCA

Hafız Hoca privacy policy

Effective October 20, 2026

This policy explains how Herazur LLC (“we”, “us”) handles information in Hafız Hoca, our app for reading, listening to, and memorizing the Quran and duas, with a dhikr counter, prayer times, a Qibla compass, and an AI teacher that gives feedback on your recitation. Hafız Hoca is published on Google Play (package com.hafiz.hafiz_hoca).

Summary

• You can read and listen to the Quran, use the dua library, the dhikr counter, prayer times, and goals without an account. An account is needed for the friends features and the weekly leaderboard.
• When you use the AI teacher (Premium), your recitation recording and your chat messages are sent to Google’s Gemini API to produce feedback. We do not upload your recordings to our own servers or keep them.
• Without Premium, the app shows a banner ad from Google AdMob, and anyone can choose to watch a rewarded ad. We do not sell your personal information.
• You can delete your account and its cloud data at any time from inside the app.

Information we collect

Account information

If you create an account with an email address and password, Firebase Authentication stores your email address and a protected form of your password, and sends you a verification email. We never see your password. If you sign in with Google, we receive your Google account identifier, name, email address, and profile photo link.

Profile and friends

When you are signed in, we store a profile record that contains your display name, your email address, your profile photo (the Google photo link, or a photo you choose from your gallery, resized to 512 pixels), a friend code, the list of friends you have added, and your progress statistics: hasene points, daily goal completion, and weekly dhikr counts. Other users who add your friend code see your display name, profile photo, and these statistics in their friends list and on the weekly leaderboard.

Learning progress on your device

Favourite surahs and duas, the last surah you read, reading progress, goals, badges, dhikr counts, downloaded audio, font and language settings, and your AI teacher chat history are stored on your device. When you are signed in, the statistics listed above are also saved to your profile record.

Location (optional)

If you allow location access, the app reads your approximate location to show prayer times and the Qibla direction. The coordinates are sent to the AlAdhan prayer-times service to calculate the day’s prayer times. The Qibla direction is calculated on your device. We do not store your location on our servers. If you do not allow location access, the app uses a default location.

Purchases

If you buy Premium, Google Play processes the payment and we never see your card details. RevenueCat tells us whether your subscription is active. It is linked to your account’s user ID when you are signed in, or to a random identifier when you are not.

Advertising

Ads are provided by Google AdMob. If you do not have Premium, the app shows a banner ad; anyone can also choose to watch a rewarded ad to earn hasene points. AdMob receives your device’s advertising ID, IP address, device information, and how you interact with ads, and Google may use them to show, measure, and personalize ads. You can reset or delete your advertising ID in your device settings.

Usage and diagnostics

We use Firebase Analytics to record which screens are opened and Firebase’s automatic app events, linked to a random app-instance identifier, and Firebase Crashlytics to receive crash reports with your device model, Android version, and technical details of the error. Firebase Remote Config delivers feature settings to the app. These are not used to show you ads.

Quran text and audio

Quran text, translations, recitation audio, and page images are downloaded from public Quran content services (AlQuran Cloud, EveryAyah, QuranicAudio, Islamic Network, and GitHub). As with any web request, these services receive your IP address and the content requested. No account information is sent to them.

Recordings and the AI teacher

The AI teacher in the live session screen is a Premium feature. When you tap record, the app records your recitation through the microphone for up to 20 seconds. When you stop, or when the time limit is reached, the recording is sent directly from your device to Google’s Gemini API together with the surah you are practicing (if you chose one) and the language you want feedback in. Gemini returns the words it recognized and word-by-word feedback on missing, wrong, extra, or out-of-order words, which the app shows to you.

The temporary audio file is deleted from your phone as soon as it has been read. Recordings are not uploaded to our servers and are not stored in your account. Google processes the recording under its Gemini API terms.

When you chat with the AI teacher, your message, up to 20 earlier messages from the conversation, and the result of your last recitation check are sent to the Gemini API so it can answer in context. The chat history is saved only on your device.

Feedback is generated by AI and can be wrong. It is a study aid, not a replacement for a qualified teacher.

Permissions

Microphone: recording your recitation in the live session, only after you tap record. Location: prayer times and the Qibla direction. Advertising ID: used by Google AdMob for ads. A profile photo is chosen with the system photo picker, which shares only the photo you select. You can change permissions in your device settings at any time.

How we use information

We use information to create and secure your account; show your friends and the weekly leaderboard; save your statistics; give the AI recitation feedback and chat answers you request; show prayer times; provide and restore Premium; show ads; fix crashes and improve the app; respond to support requests; and meet legal obligations.

Service providers

We share information only with providers that process it on our behalf to run the app:

• Google Firebase (Authentication, Cloud Firestore, Remote Config, Analytics, Crashlytics): accounts, profile records, feature settings, usage statistics, and crash reports.
• Google Gemini API: recitation recordings, the surah being practiced, and AI teacher chat messages.
• Google AdMob: banner and rewarded ads, as described above.
• RevenueCat: subscription status and purchase history.
• Google: Google Sign-In, app distribution, and in-app purchases through Google Play.
• AlAdhan: your approximate coordinates, to calculate prayer times; it also supplies the list of the Names of Allah.
• Quran content services listed above: requests for Quran text, translations, audio, and images.

We may also disclose information if required by law or to protect the rights, safety, or security of our users or others. We do not sell personal information or share it for cross-context behavioral advertising.

Where data is processed

Our service providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the providers’ standard contractual clauses.

Retention

• Your profile record is kept while your account exists and is deleted when you delete your account.
• Recitation recordings are not kept by us. Google may keep Gemini API requests for a limited period under its own terms.
• Progress, favourites, and chat history on your device stay there until you delete the app or clear its storage. Signing out does not remove them.
• Analytics and crash data are kept for the providers’ standard retention periods. Purchase records held by Google Play or RevenueCat may be retained as the law requires.

Deleting your account

In the app, open the Settings tab, then Account → Delete account, and confirm. For your security you will be asked to sign in again (your password, or the Google sign-in sheet). This permanently deletes your profile record (display name, email address, profile photo, friend code, friends list, and statistics) and your account. It cannot be undone. Users who had added you keep only an internal reference to your former user ID, which no longer leads to any data.

Data stored only on your device is not removed by account deletion: delete the app or clear its storage to remove it. Deleting your account does not cancel a Premium subscription: cancel it in Google Play under Payments & subscriptions → Subscriptions.

If you cannot access the app, email support@herazur.us from your account’s email address with the subject “Hafız Hoca account deletion”, and we will delete your account and confirm when it is done.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can view and edit most of your information in the app. For other requests, contact us at the address below. We aim to respond within 30 days and will not discriminate against you for exercising your rights. You may also complain to your local data protection authority.

Security

Data is encrypted in transit, and your profile record can be changed only by your own signed-in account. No method of transmission or storage is completely secure.

Children

Hafız Hoca is a general-audience app and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

If we change how we handle information, we will update this page and its effective date and, for significant changes, tell you in the app.

Contact

Questions about this policy: furkan@herazur.us. Support and account deletion requests: support@herazur.us.