Zohra App Privacy Policy

Last updated: 8 October 2026

This policy explains how Elhussini Limited (“Zohra”, “we”, “us”) collects and uses personal data in the Zohra app for iOS and Android, where people complete the Quran together. Our website and blogs have their own policy: zohra.app/blogs/privacy.

1. Who we are

We are the data controller for the personal data described here.

2. What we collect

• Your account: first name, last name, display name, email address, country, language, theme preference, and gender if you provide it. Your password is stored only as a one-way encrypted hash — we never see or store it in plain text.
• Your khatma activity: the group you join, the part of the Quran you reserve, the parts you complete, and your current reading position (surah and ayah).
• Notifications: a push notification token for your device, if you allow notifications.
• App usage: when your sessions start and end, when you last opened or closed the app, your platform (iOS or Android) and app version.
• Crash and error reports: error messages and technical details, your platform, operating system version, app version and device model.
• Location (optional): if you allow it, your location is used on your device to calculate prayer times and show your city. To find the city name, your device sends your coordinates directly to OpenStreetMap’s Nominatim service. Your location is not sent to or stored on our servers.

What we don’t do: we don’t show ads, we don’t sell your data, and we don’t use third-party advertising or analytics trackers or track you across other apps and websites.

3. Why we use it

• To run your account and your khatma groups — necessary to provide the app (contract).
• To send account emails such as verification codes and temporary passwords (contract).
• To send notifications such as khatma reminders — only if you allow them; you can switch them off in your device settings at any time (consent).
• To keep the app working and secure and to fix crashes (our legitimate interests).
• To show prayer times for your location — only if you allow location access (consent).

4. Who we share it with

We use a small number of service providers who process data only on our instructions:

• Hetzner Online GmbH (Germany) — hosts our servers and database.
• Resend, Inc. (USA) — delivers account emails.
• Apple Push Notification service, Google Firebase Cloud Messaging and Expo — deliver notifications to your device.
• OpenStreetMap Foundation (Nominatim) — looks up your city name, directly from your device, if you allow location.

We may also disclose data if the law requires it.

5. International transfers

Our main servers are in Germany. Some providers above are based in the United States. Where data leaves the UK or EEA, it is protected by Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision.

6. How long we keep it and deleting your account

We keep your data while you have an account. You can delete your account at any time in the app under Settings → Delete account. This immediately deletes your profile, your reservations and completions, and your push notification tokens.

Technical records linked to your account (session times and crash reports) may remain after deletion. Email hello@zohra.app and we will remove them.

7. Your rights

Under UK and EU data protection law you can ask to access, correct, delete or receive a copy of your data, object to or restrict how we use it, and withdraw consent at any time. Email hello@zohra.app — we reply within one month. You can also complain to the UK Information Commissioner’s Office or your local data protection authority.

8. Children

The Zohra app is not directed at children under 13, and we don’t knowingly collect their data. If you believe a child under 13 has given us personal data, contact us and we will delete it.

9. Security

Data is encrypted in transit (HTTPS), passwords are stored only as hashes, and access to our systems is limited to the people who run Zohra. No system is perfectly secure, but we work to protect your data.

10. Changes

If we change this policy, we will update the date above and, for important changes, tell you in the app.