Privacy Policy

Information we collect

Hifz AI is developed by VertexBytes. This draft policy covers the mobile apps, learner web application and public website. Google or Apple sign-in provides your name, email, profile photo URL, account identifier and sign-in method. We do not provide a separate email/password login.

Mobile practice history and downloaded model files are kept on the device. Web cloud recitation sessions, review results, preferences and teacher assignments may be stored in Supabase. Local web practice does not write permanent mistake history. Support submissions contain the name, email, category and message you provide.

Your voice and microphone

Microphone access is used for recitation capture when you start a practice session. Local recognition processes audio on your device. Installed mobile practice files support offline practice with a valid restored session.

When you choose a web cloud recitation method, audio is sent to Azure speech services through the applicable browser or backend flow. Transcripts and analysis can be used for session review. Audio is never stored permanently without explicit consent. You can revoke microphone permission in your browser or device settings.

How we use information

Account data identifies you across sessions. Web session data supports the learning and teacher-review features you use. Support data lets us respond to your request. We do not sell your information or use it for advertising; the application does not display ads.

Third-party services

Firebase Authentication manages identity. Google and Apple provide sign-in and mobile app distribution. Supabase provides application data and backend functions. Azure processes audio when you use cloud speech tools. Reciter playback loads audio from EveryAyah. Each service has its own privacy practices.

Data retention and deletion

Account information is retained while your account exists. Use Delete account to request permanent removal of your Firebase identity and linked server profile data. The deletion service removes related rows according to the database relationships; contact support if a deletion fails or you need help with remaining data.

Device-local history and downloaded files can remain separately from server account data. Clear application data or uninstall the mobile app to remove those local files. Browser-stored practice assets can be cleared using your browser’s site-data settings.

Your choices

You may sign out, revoke microphone permission, choose between available local and cloud tools, clear local application data, and request account deletion. Contact support about your information or any concern.

Children’s privacy

Hifz AI is not directed at children under 13 and does not knowingly collect their personal information. Parents or guardians may help a young learner use their own account. Contact us if a child has provided personal information so we can address its removal.

Security

We use Firebase and Supabase infrastructure and encryption in transit. Browser authentication uses Firebase session storage and an HttpOnly application cookie; theme and language preferences are stored locally. No transmission or storage method is completely secure.

Policy changes

We may update this policy and will reflect changes in the date shown above. This combined mobile and web draft remains subject to legal review before publication.

Contact us