Privacy

The short version

Qiyamah works without an account, and a signed-out visitor is not tracked at all. There are no analytics, no advertising, and no third-party trackers anywhere on the site.

If you sign in, we keep the minimum needed to remember your reading — your Google account identifier, your email address, your name and your profile picture — plus the things you asked us to remember, like your bookmarks and where you stopped reading.

Nothing is sold, and nothing is shared with anyone for advertising.

If you never sign in

You can read the entire Quran and the whole hadith corpus, search both, and use prayer times without an account. In that case no personal data reaches our servers at all.

Your reading preferences — light or dark, the reading layout, your location for prayer times — are kept in your own browser's local storage. They never leave your device, and clearing your browser data removes them.

If you sign in

Sign-in is through Google. We request only three things: your OpenID identifier, your email address, and your basic profile. We do not request and cannot access your Gmail, your Drive, your contacts, your calendar or anything else in your Google account.

From that we store:

• Your Google account identifier — the stable id Google issues. This is what identifies you to us, not your email address, so changing your email does not create a second account.
• Your email address, so we can recognise your account and contact you if we ever must.
• Your display name and profile picture URL, shown to you in the interface.
• The date your account was created and when it was last seen.

What you create

Alongside your account we store what you asked the app to remember: your bookmarks and any notes on them, where you stopped reading in the Quran and in the hadith, your memorisation progress and review history, your reading plans, and your display preferences.

This is yours. It is never shared, never analysed for advertising, and never used for anything except showing it back to you.

Location

Prayer times need a location. Your browser only provides one when you click the button asking for it — there is no silent request.

That location stays in your browser and is used to calculate the times on our server without being stored there. If you are signed in and choose to save it, it is kept on your account so you do not have to grant permission on every device.

Prayer times are computed from astronomical algorithms on our own server. No third-party location or prayer-time service is contacted, so your coordinates are never sent to anyone else.

What we do not do

Stated plainly, because these are the things people reasonably worry about:

• No analytics of any kind — no Google Analytics, no Plausible, no pixels.
• No advertising, and no advertising identifiers.
• No third-party trackers, fingerprinting or session recording.
• No selling, renting or sharing of personal data. There is no arrangement under which anyone else receives it.
• No email marketing. We will not add you to a list.
• No reading of anything in your Google account beyond the three scopes named above.

Who else is involved

Two external parties, and only these:

• Google, for sign-in. You authenticate with them directly; we receive only the identity information described above. Their handling of that exchange is governed by Google's own privacy policy.
• Quran Foundation, whose content API provides the Quranic text, translations and tafsir the reader displays. Requests for that content are made by our server, not your browser, so your address is not disclosed to them.

About the Quranic text

Quranic text and tafsir are provided by Quran Foundation under terms that permit display but not storage beyond a short period. We hold their content only in a temporary in-memory cache that is discarded when the server restarts, and never write it to our database. Their attribution appears wherever their content is shown.

The hadith corpus is different: it is stored locally, which is why search is instant and works without any external service.

How long it is kept

Your account and its contents are kept for as long as your account exists. Delete your account and everything tied to it — bookmarks, reading positions, memorisation history, plans, preferences — is deleted along with it. There is no archived copy.

Your rights

You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted. Write to the address below and we will act on it.

You can also revoke Qiyamah's access to your Google account at any time from your Google account's security settings, independently of us.

Security

The site is served over HTTPS. Your session is held in a signed, HttpOnly cookie, which means it cannot be read by scripts in your browser. There are no passwords in this system, so there are none to leak.

No system is perfectly secure, and we do not claim otherwise. We keep what we hold small precisely so there is little to lose.

Changes

If this policy changes materially, the date at the top of this page changes with it. We do not make quiet edits.

Contact

Questions, requests or complaints: hello@qiyamah.com