Privacy & safety

This is what we believe matters most for a kids' app, and what we've actually built our site around. The detail is below if you need it.

When your child opens our website, our hosting provider sees their IP address and what page was loaded — the same way every website on the internet works. On top of that we keep three small, anonymous measurements so we can tell which surahs, stories and lessons are actually helping: a cookieless page-view counter (Cloudflare Web Analytics), an anonymous learning tracker (which pages get opened and which activities get finished, plus the country, tied to a random number stored in the browser — never a name), and a short-lived visit log that records the approximate country, region and city a visit came from, which page it landed on, and how many pages it viewed. Visit-log entries use a throwaway id that changes every visit, never store an IP address, and are automatically deleted after 7 days; learning-tracker entries are deleted after 12 months. None of this can identify your child, and none of it is shared with anyone.

As they play games, read stories, or watch videos, their progress (stars, streaks, completion counts) is saved on their device, in their browser. By default nothing leaves the device — if you clear the browser's storage, that progress is gone, because we never had a copy.

Optionally, you (the parent) can create a free account so that progress is also saved to our servers and follows your child to any device you connect. The account is passwordless, and the only personal detail we store is your email address. Skip the account and nothing changes — everything stays on the device, exactly as above.

Our character intro videos and Watch section are embedded from YouTube. When your child plays one, YouTube sees their IP and what was watched, the same as if they'd opened YouTube directly. We use unlisted videos, so they don't appear in YouTube search or the channel feed.

Our fonts come from Google Fonts, so Google sees a request for the font each time your child loads a page. They don't see what your child does on the page, just that a font was requested.

If you write to us through the contact form, your message goes through a third-party form service (Formspree) and lands in our inbox. We read it and reply. We don't share your email with anyone.

That's it. There's no algorithm, no recommendation engine, no behavioral targeting, no data partner sharing.

We can't (and don't want to) reinvent every piece of internet infrastructure. Here's everyone who touches a request when your child uses the site, and what they see.

1. Information we don't collect

We don't ask your child for, and don't store on our servers, any of the following:

• Your child's name, age, or birthdate (a profile nickname and age band are optional and chosen by you, the parent — not collected from your child)
• Your child's email address or phone number
• Photos, audio recordings, or video
• Location data beyond rough geography inferred from IP address
• Contact lists or social profiles
• Passwords (our optional parent sign-in is passwordless)

If you create an optional parent account, the one thing we do store is your email address, used only to sign you in — see section 3.

2. Information we automatically receive

Like nearly every website, our hosting provider (Cloudflare) automatically receives certain technical information when a page is loaded:

• IP address (which roughly indicates city/region)
• Browser type and version
• Operating system
• The page or asset being requested
• Timestamp of the request
• The previous page that linked here, if any

This information is used for security, debugging, and basic operations (like making sure the site loads when traffic spikes). Our hosting provider retains these logs only for a short operational period. We do not combine this information with anything else.

2b. Our own anonymous analytics

Beyond hosting logs, we run three first-party measurements. All three are anonymous by design and are used only to improve the site.

• Page-view counter (Cloudflare Web Analytics): a cookieless script that counts page loads, country, device type and referring site. Cloudflare's privacy-first analytics doesn't fingerprint or store IP addresses; the numbers are sampled estimates.
• Learning tracker: when a page is opened, and when an activity is finished (a surah played to the end, a story read, a prayer practiced), we record the page or activity's name, the country the request came from, and a random identifier that our site stores in the browser. Country only — never a region or a city, which are kept in the separate visit log below that holds no browser identifier at all. The identifier is not linked to a name, email, account, or IP address; it exists only so we can count distinct devices. Clearing your browser's site data resets it. Entries are deleted after 12 months.
• Visit log: for each visit we record the approximate location Cloudflare's network infers from the connection (country, and an estimated region and city), the first and most recent page of the visit, the number of pages viewed, the device type, and the referring site's hostname. This is keyed to a throwaway visit id that changes every time the browser is reopened, and we do not store the IP address. Every entry is automatically deleted 7 days after it is created. We separately keep only daily totals per place (for example "12 visits from Hebron on a given day"), which contain no identifiers.

None of these measurements are combined with parent-account data, and none are shared with third parties.

3. Where progress is saved

Our site uses your child's browser storage (called "localStorage") to remember their progress between visits — stars earned, daily streaks, books finished, games completed, which sections they've explored, and a few preferences (like whether sound is muted). By default this lives only on their device, in their browser, and is never sent to us or to any third party.

If you don't sign in, nothing changes — that progress stays only in your child's browser, exactly as above, and we never receive a copy. If you clear the browser's site data, it's permanently lost, because we never had it.

If you create a free parent account, your children's progress is also saved to our servers (Cloudflare D1) under the profiles you set up, so it follows them to any device you connect. The only personal detail attached to the account is your email address. Each child profile holds just the nickname and avatar you pick, an optional age band, and the same stars/streaks/completion data — no personal information about the child. Sign-in is passwordless (a one-time link we email you). You can remove a profile or delete your whole account at any time (see "Your rights").

4. Embedded content from third parties

Some of our pages embed content from third-party services. These embeds may set their own cookies or receive your child's IP address as part of the embed loading.

The third parties we currently embed from:

• YouTube — for character intro videos and song content. Their privacy policy applies to anything YouTube sees: policies.google.com/privacy.
• Google Fonts — for type styling. Same policy link as above.
• Formspree — only when you submit our contact form. Their policy: formspree.io/legal/privacy-policy.
• Resend — only if you use the optional parent account. When you request a sign-in link, your email address passes through Resend to deliver that one email. Their policy: resend.com/legal/privacy-policy.

We do not embed advertising networks, behavioral tracking, social media widgets, or any other third-party content beyond what's listed above.

5. Children's privacy

This site is designed for children. Because of that, we hold ourselves to a stricter standard than a typical website would.

We comply with the United States Children's Online Privacy Protection Act (COPPA). Specifically:

• We do not knowingly collect personal information from children under 13.
• We do not require children to provide any information to use the site.
• We do not show advertising to children.
• We do not engage in behavioral advertising, profiling, or remarketing.
• We do not sell or share children's information with anyone.

If you believe we have somehow received personal information from a child, please contact us at [email protected] and we will delete it.

Our optional parent accounts are designed to keep us COPPA- and GDPR-K-compliant: the account belongs to you, the parent, not the child. Your child never creates an account, never logs in, and is never asked for personal information. The only personal data we process is the account-holding parent's email address, with the parent's own consent, for the sole purpose of signing in. Child profiles contain only parent-chosen labels and learning-progress data.

6. How we use information

The technical information our hosting provider receives (described in section 2) is used only for:

• Operating the site and keeping it secure
• Debugging problems
• Understanding rough usage patterns (e.g., how many people visited a page on a given day) at an aggregate, non-identifying level
• Understanding, at an aggregate and non-identifying level, where visitors come from and which activities children start and finish, so we can improve the content (see section 2b)

Information you submit through the contact form (your email address and message) is used only to reply to you. We don't add it to a marketing list. We don't share it.

7. Sharing with third parties

We do not sell, rent, or share information with advertisers, data brokers, or marketing partners. The only third parties involved are the infrastructure providers listed in section 4, and only because they are necessary for the site to function.

We may disclose information if legally required to do so (for example, in response to a valid court order), but in our entire operation we've never been asked to.

8. Your rights

Because we hold so little, the practical implications are short:

• To delete progress data: clear your browser's site data for our site. The progress is gone immediately.
• If you have a parent account: delete any child profile from your family page at any time. To delete your entire account — your email and every child profile and all their progress — email [email protected] and we'll erase it, typically within a few days. You can also ask for a copy of what we hold.
• To delete contact form submissions: email us at [email protected] and we'll delete your message and email from our records.
• Analytics data: because it holds no identifiers, we can't look up or delete "your" entries — but the visit log erases itself after 7 days, learning-tracker entries after 12 months, and clearing your browser's site data resets the learning tracker's random id.
• To ask what we have: email us with the same address. We'll tell you everything within a few days.
• To opt out of anything: there's nothing to opt out of, because there's no marketing, no profiling, and no behavioral tracking. But if you don't want our site to know you've ever been here at all, you can use a private/incognito browser window.

9. Changes to this policy

If we change how we handle privacy — for example, if we add a new infrastructure provider — we'll update this page and bump the "Last updated" date at the top. We'll never quietly start collecting more than what's listed here without saying so.

10. How to contact us

For any privacy question, concern, or request: [email protected]. We read every email and try to reply within a few days.