Privacy Policy

Effective: 24 June 2026  ·  Last updated: 19 July 2026

Tibyan AI ("the app", "we", "us") is a Qur'an-recitation learning app for madrasas. This policy explains what we collect, why, how it is shared, and your choices.

Who this app is for

Tibyan AI is used by madrasas and includes students who may be children, as well as teachers and parents. We collect the minimum information needed to run the learning features and we do not use children's data for advertising or any purpose unrelated to the app. Where required, a parent, guardian, or the supervising madrasa/teacher is responsible for consenting to a child's use of the app and for creating or approving the child's account.

What we collect

Account information

When you create an account we collect:

• Name
• Email address
• Role (student, teacher, or parent)
• Gender (students only — used to show boys' and girls' leaderboards)
• Account links — a student account stores the teacher's and/or parent's account ID so the right teacher and parent can see that student's progress.

Authentication

• Email address and password, handled by Google Firebase Authentication. We never see or store your raw password.

Recitation audio

• When you practise or submit a recitation, the app records audio of your voice and: uploads it to our secure storage (Google Firebase Storage) so your teacher (and you) can listen back, and sends it to our recitation-analysis service to generate recitation accuracy feedback. Audio may be transcribed to text for this purpose.
• The microphone is also used on-device for live "follow-along" recitation.

Learning progress

• Points, completed tasks, and progress are stored on your device and synced to your account so you can see your progress across sessions.

Diagnostics

• Crash reports and basic usage events (Firebase Crashlytics and Google Analytics for Firebase) — used only to keep the app reliable and understand which features are used. Never used for advertising, and not linked to advertising identifiers.

What we do NOT collect

• We do not show advertising or use advertising identifiers.
• We do not sell your data or share it with data brokers.
• We do not collect location, contacts, photos, or device identifiers for tracking.

How your information is used

• To create and manage your account and sign you in.
• To connect students with their teacher and parent.
• To record, store, analyse, and play back recitations and generate recitation accuracy feedback.
• To track and display learning progress, points, and leaderboards.

We do not use your information for advertising or for any purpose unrelated to providing the app's learning features.

How your information is shared

We share data only with the service providers that operate the app's features:

• Google Firebase (Authentication, Cloud Firestore, Cloud Storage) — stores account data, progress, and recitation audio. See Google's privacy policy: https://policies.google.com/privacy
• Our recitation-analysis backend — a private service we operate (Google Cloud Run) that receives recitation audio to produce recitation accuracy feedback.
• Google Gemini API — used to draft natural-language feedback text. Recitation comparison data may be processed to generate this feedback. See Google's API terms: https://ai.google.dev/gemini-api/terms

Within the app, a student's name, progress, points, and recitation submissions are visible to that student's linked teacher and parent. This is the core purpose of the app.

We do not otherwise share your personal information, except where required by law.

Data retention

• Account data is retained while your account is active.
• Recitation submissions are deleted automatically within 7 days of upload.
• Delete your account in the app at any time — Settings / menu → Delete account. This immediately removes your profile, progress, class links, and leaderboard entry, and permanently deletes your sign-in account; any remaining recitation audio expires within 7 days. You may also request deletion by email at the address above.

Your rights and choices

• Access / correction / deletion — delete your account directly in the app (Settings / menu → Delete account), or contact us to access, correct, or delete your personal information.
• Microphone — recitation features require microphone access; you can deny or revoke it in your device settings, though recitation features will not work.
• Children — a parent, guardian, or supervising teacher/madrasa may request access to or deletion of a child's data on their behalf.

Depending on where you live, you may have rights under laws such as the GDPR (including protections for children) or COPPA. We honour deletion and access requests regardless of location.

Security

We use Google Firebase's managed infrastructure and access rules so that, for example, a student's recitation audio is readable only by that student and their linked teacher. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

Changes to this policy

We may update this policy. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, notified in the app.

Contact

Questions or requests (including data deletion): support@tibyanai.co.uk