Privacy Policy

Last updated: June 2026

Irtaqi is a Quran memorization app for children. We take your family's privacy seriously — especially because many of our users are children.

Who we are

Irtaqi is operated by Irtaqi, United States. Contact: contact@irtaqi.app.

What data we collect

We collect the minimum needed to run the service:

• Account data — email address and a hashed password for the parent/guardian account.
• Child profiles — a name (can be a nickname) and age range, provided by the parent. We do not collect the child's email address or any contact details.
• Memorization progress — which surahs have been started, reviewed, and memorized; daily review scores; streak data.
• Push notification tokens — device tokens for web push, stored only if you opt in to reminders.
• Usage analytics — page views and click events collected via PostHog (see below). No personal identifiers are attached to analytics events.
• Payment data — billing information is handled entirely by Polar (our payment processor). We do not store card numbers or bank details.

Children's privacy COPPA / GDPR-K

Child profiles are created and managed exclusively by parents or guardians. We do not knowingly allow children to create accounts directly. If you believe a child has registered without parental consent, contact us and we will delete the account promptly.

Under COPPA (US) we do not collect personal information from children under 13 without verifiable parental consent. Under GDPR (EU/EEA) children under 16 require parental authorisation.

Legal basis for processing (GDPR)

• Contract performance — account and progress data are necessary to provide the service.
• Consent — push notification tokens are stored only with explicit opt-in.
• Legitimate interest — anonymous analytics to improve the app.

Third-party services

• PostHog — analytics. Events are pseudonymous. PostHog is hosted on their cloud (servers may be outside the EU/EEA). We use it only with anonymous/pseudonymous identifiers. We are reviewing self-hosting as an alternative.
• Payment processor — subscription billing is handled by our Merchant of Record. When you subscribe, they process your payment details under their own privacy policy. We receive only a confirmation of your subscription status.

Data storage and retention

All application data is stored on servers in the European Union. We retain your data for as long as your account is active. You may request deletion at any time by emailing support@irtaqi.app — we will permanently delete your account and all associated data within 30 days.

Your rights

Under GDPR you have the right to: access your data, correct inaccurate data, erase your data ("right to be forgotten"), restrict or object to processing, and data portability. To exercise any right, email contact@irtaqi.app.

Cookies

We use a single session cookie to keep you logged in. See our Cookie Policy for details.

Changes to this policy

We will notify registered users by email of any material changes before they take effect.

Contact

Questions or requests: contact@irtaqi.app