Welcome to Aayaatul Quran (“we”, “our”, or “us”). We are committed to protecting the privacy and personal data of all our participants — youth, college students and adults — and of the parents and teachers who register learners with us. This Privacy Policy explains exactly what we collect, why we collect it, how it is processed and secured, and how you stay in full control of it, including your right to download, correct or permanently delete your account.
1About the Service & Scope
This Privacy Policy governs the Aayaatul Quran Android mobile application (Package ID: com.flowersofquran.app) distributed via the Google Play Store, along with our educational web services at aayaatulquran.com, including the learner portal and the public certificate check. The platform offers the pages of the Aayaatul Quran book to read online, short quizzes for each of its 50 levels, progress tracking, private study notes and bookmarks, and a digital completion certificate.
Your Aayaatul Quran data is kept separately. Aayaatul Quran is one of three programmes in the ‘Aayaatul Quran’ project by CharacterBee, alongside Flowers of Quran and Pearls of Quran. The three programmes share only the physical database their records are stored in. They are separate products with separate accounts:
- Your Aayaatul Quran account, learners, progress, certificates, classes and messages belong to Aayaatul Quran only.
- Registering on a sister programme with the same mobile number creates a separate, unrelated account there. Editing or deleting your account here never changes it.
- A sister programme’s team cannot see your Aayaatul Quran data, and we cannot see theirs.
2Information We Collect and Why
We believe in strict data minimisation. We only collect the personal data needed to provide sign-in, keep each learner’s progress, and issue their personalised completion certificate.
| Data Category | Data Elements Collected | Purpose & Operational Need |
|---|---|---|
| Account |
|
The account belongs to one mobile number. It is used for sign-in, to know who is responsible for the learners on it, and — only if you add an email — to contact you by email. |
| Learner Profiles |
|
Each learner on an account has their own profile. The name identifies them on their pass and is printed on their certificate. |
| Learning & Quiz Progress |
|
Kept per learner. Lets each learner pause and resume across devices, unlocks levels in order, and generates their printable certificate. |
| Your Study Journal |
|
Stored with each learner’s profile so the learner portal can show their notes, bookmarks and study days on any device. |
| Sign-in & Security |
|
Enables mobile-number sign-in, keeps you signed in on your device and protects against unauthorised access. See section 4. |
| Anonymous Visit Statistics |
|
Tells us which pages help learners and where the website needs work. Never linked to a name or mobile number. See section 5. |
| Messages & Requests |
|
Used only to answer your message, to carry out your request, or to send occasional learning messages (such as “your certificate is ready”). Reply STOP to any of our WhatsApp messages and we will not message that number again. |
| Certificate Checks |
|
Anyone can check a certificate on our certificate check page. It shows only the learner’s first name and surname initial, the issue date and the course. We keep a short record of checks to spot misuse. |
On your device only. Your theme, sound and animation preferences, and which learner is studying in this browser, are kept in your browser’s storage. In guest mode, reading and quiz progress stays in the open page only and is lost when it is closed or reloaded.
What We DO NOT Collect
- We do not collect precise GPS location data.
- We do not access contacts, phonebooks, SMS history, or files stored on your device.
- We do not collect financial, credit card, or payment information — learning, quizzes and the certificate are 100% free.
- We do not use cookies, collect biometric identifiers or track browsing behaviour outside our app and website.
3Family & Class Accounts
One mobile number can hold several learners. There are three kinds of account:
- Personal: a learner on their own, with one learner profile.
- Family: a parent or guardian holds the account and adds their children as learners.
- Class: a teacher, lecturer or college holds the account and adds their students as learners.
The account holder — the parent or teacher — gives the mobile number, their own name and, optionally, an email and a school name. They can view, edit, add and remove the learners on the account, see each learner’s progress, download all of the account’s data, and delete the account. Every learner on the account keeps their own name, progress, notes and certificate, which are never mixed with another learner’s.
A learner may also join a class with a code from their teacher. The teacher then sees that learner’s name and progress in their class. The learner can ask their teacher, or us, to be removed from the class at any time.
Friends. Learners may connect with friends who share their personal friend code. Friends see only each other’s first name and surname initial and, while “Share my progress” is on, levels and pages completed, the study streak, the days studied this week and whether the certificate is ready — never a mobile number, email, notes or quiz answers. To show a streak we keep the dates a learner studied for 120 days. A learner can switch sharing off, remove or block a friend, or get a new code at any time; deleting the account removes every friendship.
4Sign-in & Login Codes
You sign in with your registered mobile number and country code. There is no password to remember, and we never collect or store one.
Login codes are off by default. Our team can switch on one-time login codes to add a layer of protection. When they are on, we send a short code to your mobile number (by WhatsApp or SMS) or to your email address, and use it only to confirm that the number or email is yours. Codes expire after ten minutes and are never used for marketing.
5Anonymous Visit Statistics
To learn which pages help learners, our website counts visits in a privacy-first way:
- No cookies and no third-party analytics or advertising trackers.
- No names or mobile numbers are ever attached to visit statistics, even when you are signed in.
- A random visitor ID is kept in your browser’s storage so that repeat visits are not counted twice. It says nothing about who you are, and clearing your browser’s site data removes it.
- Your approximate city is added by our server from the connection, and your IP address is not stored.
- If your browser sends “Do Not Track”, nothing is recorded at all.
6Third-Party Service Providers (Data Processors)
We work only with reputable, enterprise-grade cloud service providers that adhere to rigorous international data security standards:
- Database & Authentication Provider: We use Supabase Inc. to store accounts, learner profiles, learning progress and study journals, and to manage mobile-number sign-in securely. Supabase complies with SOC 2 Type II, ISO 27001, and GDPR standards. All data transmission is encrypted using modern TLS encryption, and data at rest is secured using AES-256 encryption with Row-Level Security (RLS) enforcement, so each programme’s records are only ever available to that programme.
- Message delivery: When login codes or learning messages are switched on, they are delivered through a WhatsApp Business, SMS or email delivery service, which receives only the number or email address and the message itself.
- Form delivery: Account Deletion requests submitted on the web are delivered to our administrative desk by email through a form-to-email relay (FormSubmit), which receives only the details you enter on that form.
- Web fonts: The website’s typefaces are served by Google Fonts, which receives the standard technical information (such as your IP address) needed to deliver them.
- No Advertising SDKs: The Aayaatul Quran app and website contain no third-party advertising SDKs, no ad networks, and no targeted behavioural trackers.
- No Data Selling: We do not sell, rent, or trade your personal information to third parties, data brokers, or advertisers under any circumstance.
7Children, Parental Consent & India’s DPDP Act 2023
Aayaatul Quran is written for youth and adults — college students and anyone from about 17 upwards. Some learners are under 18, and parents and teachers may register younger learners on a family or class account. Under India’s Digital Personal Data Protection Act, 2023, the personal data of anyone under 18 is processed only with the verifiable consent of a parent or lawful guardian. We also follow the Children’s Online Privacy Protection Act (COPPA) and the Google Play Families Policy:
- Consent at registration: parents, teachers and learners under 18 must tick a consent box before an account is created. A parent confirms they are the parent or guardian of the children they add; a teacher confirms that their students — and the parents or guardians of any under 18 — have agreed.
- A consent record: we keep a record on each account of whether consent was given or withdrawn, when, by whom and how (at registration, by signed form, phone call, email or in person).
- Withdrawing consent: a parent or guardian can withdraw consent at any time by writing to ask@characterbee.com. We then stop processing the learner’s data and delete it on request.
- Registration asks only for names and a mobile number; email, age, gender and grade are optional. We never condition participation in any level or quiz on disclosing more than is reasonably necessary.
- There is no public profile, no chat, no messaging between learners, no advertising and no tracking or behavioural monitoring of children.
8Your Rights & “Download my data”
Every account holder — and every parent or guardian of a learner under 18 — can:
- Access: open Me → Account & learners → Download my data in the learner portal to download one file with the account, every learner on it, their quiz attempts, classes and messages — for Aayaatul Quran only. You can also ask us for a copy.
- Correct: edit names, email, age, gender and grade in the learner portal. To change the mobile number, contact us.
- Erase: remove a learner from the account, or delete the whole account (section 10).
- Withdraw consent at any time (section 7), and opt out of WhatsApp messages by replying STOP.
- Raise a grievance: write to our grievance contact at ask@characterbee.com. We reply within 30 days.
9Data Retention Policy
We retain personal information, learning progress and study journals only for as long as the account remains active and as needed to provide our educational service. If you choose to delete your account, your Aayaatul Quran account, every learner on it, their progress, notes, bookmarks, certificates and class memberships are permanently removed from our active databases within 30 calendar days of receiving your verified request. The technical sign-in record for the mobile number is removed too, unless the same number still has its own account in a sister programme.
Two small records are kept by design: a deleted certificate number stays reserved, without any name attached, so it can never be given to someone else; and a WhatsApp opt-out is kept so that a STOP keeps working. Automated backup snapshots are overwritten on a rolling 30-day cycle, and no deleted account is ever restored from them.
10How to Delete Your Account and Data
In full accordance with Google Play’s Account Deletion Policy, we provide multiple easy ways for you to permanently delete your account and all associated data:
- Inside the learner portal (website or app): Log in, open Me → Account & learners → Delete account, and confirm your request.
- Via the Public Web Deletion Resource: If you have uninstalled the application or cannot sign in, visit our dedicated Account Deletion Page. You can submit your deletion request directly without having to reinstall the app.
- Via Email Request: Send an email to ask@characterbee.com with the subject line “Account Deletion Request”, including your registered phone number and participant name.
This portal only. Deleting an account removes the account and every learner on that mobile number in Aayaatul Quran. It does not touch an account with the same number in Flowers of Quran or Pearls of Quran — to delete one of those, use that programme’s own website. To remove just one learner and keep the rest, use Me → Account & learners instead.
11Security Safeguards
We implement robust technical and organisational security measures, including:
- HTTPS/TLS encryption for all data exchanged between the app or website and our servers.
- Database Row-Level Security (RLS) ensuring each learner can access only their own data, and each programme only its own records.
- Encrypted session tokens to prevent session theft, and no passwords to steal.
- A small admin team with individual accounts and roles, optional 2-step sign-in, and an activity log of every change made to learner data.
12International Data Transfers
Our educational services are accessed by participants globally. If you use our service from outside the jurisdiction where our cloud servers are located, your information may be processed and stored on servers managed by our cloud infrastructure provider (Supabase) in compliance with recognised international data transfer frameworks.
13Policy Updates
We may update this Privacy Policy periodically to reflect enhancements in our app functionality, legal obligations, or Google Play policy updates. When changes are made, we will update the “Last Updated” date at the top of this document. Continued use of the service following the posting of changes constitutes acceptance of the revised terms.
Have Questions or Concerns About Your Privacy?
Our data protection and privacy team is available to assist parents, teachers, participants, and regulatory authorities with any inquiries.
- Emailask@characterbee.com
- Phone+91 98459 66702
- AddressCharacterBee, Raj Tower, Udupi, Karnataka, India