KhatmahThe short version
- We collect what the app needs to work: your name as you enter it, your country, your sign-in email, and what you do in Khatmahs and Circles.
- We use Google Firebase to run the app, including usage analytics and crash reports so we can fix problems.
- We don't sell your information or use it for advertising.
- You can delete your account from inside the app at any time.
What we collect
| Information | Where it comes from | Why |
|---|---|---|
| Name: first name and last initial | You, during setup | Shown to people in the Khatmahs and Circles you join |
| Country | You, during setup | Shown with your name and on Khatmahs you create; used for your country collection |
| Email and account ID | Sign in with Apple or Google, or the email you sign up with | To sign you in, verify your address, reset your password, and contact you about your account. If you tick "Email me occasional updates" (in onboarding or Settings → Notifications), we also add your address to our mailing list, hosted by Brevo, until you untick it or unsubscribe from any email. Never shown to other users. If you sign up with email, your password is stored securely by Firebase Authentication. We never see it. |
| Avatar colour and photos | You, if you choose to add them | Profile and Circle photos are shown to other members |
| What you write: Khatmah titles, intentions, group names, Circle names and descriptions | You | Shown to the people who can see that Khatmah or Circle |
| Activity: Juz you claim, return and complete, Salawat you log, Khatmahs and Circles you join, your role in them | The app | To run Khatmahs, show progress, and calculate your badges and Est. Hasanaat |
| Notification settings and device token | Your device, if you allow notifications | To send the notifications you've turned on |
| Usage and diagnostics: app events such as sign-in, device model, OS and app version, approximate region, crash reports | Google Analytics for Firebase and Firebase Crashlytics | To understand how the app is used and fix crashes |
| App integrity check | Firebase App Check (Apple App Attest / Google Play Integrity) | To confirm requests come from the real Khatmah app |
We don't collect your precise location, contacts, or browsing activity outside the app.
Who can see what
- Public Khatmahs appear on Discover. Anyone signed in to Khatmah can see their title, intention, country, creator's name, and progress.
- Invite-only Khatmahs are visible to their members and anyone who has the link.
- Just me Khatmahs are visible only to you.
- Circles: a Circle's Khatmahs and member list are visible only to its members. Public Circles' names and descriptions appear on Discover.
- Other members see your name, country and avatar next to the Juz you hold and the Salawat you log. They never see your email.
- The Khatmah team can see account and activity data when needed to run the service, respond to a report, or help with a support request.
Services we use
We use Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Cloud Storage, Cloud Messaging, Analytics, Crashlytics and App Check) to store and process data on our behalf, on Google Cloud infrastructure. Sign in with Apple and Sign in with Google are provided by Apple and Google under their own privacy policies. If you opt in to email updates, your address is held by Brevo, our mailing-list provider, under its privacy policy. Notifications are delivered through Apple Push Notification service and Firebase Cloud Messaging.
We don't sell your information, share it for advertising, or let third parties use it for their own purposes.
How long we keep it
- Your account data is kept while your account exists.
- In-app notifications are deleted automatically after 5 days.
- A deleted Khatmah can be recovered for 3 days. After that it is archived, and only a record of what each member contributed is kept.
- Analytics and crash data are kept according to our Firebase retention settings.
Deleting your account
In the app, go to Profile → Settings → Account → Delete My Account. This permanently deletes your profile, notifications and sign-in account, and removes you from your Khatmahs and Circles. Juz you completed and Salawat you logged stay part of the Khatmahs you contributed to, no longer linked to your profile. You can also ask us by email; see the account deletion page.
Your rights
You can see and edit your name, country and photo in the app at any time. You can ask us for a copy of your data, or to correct or delete it, by emailing support@khatmah.app. Depending on where you live, you may have further rights under local law, and we'll honour them.
Children
Khatmah is for people aged 13 and over. It isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child under 13 has an account, email us and we'll delete it.
Security
Data is encrypted in transit and at rest on Google Cloud. Access is restricted by security rules, so people can only read what the app is designed to show them.
Changes
If we change this policy, we'll update the date at the top of this page, and tell you in the app if the change is significant.
Contact
Questions about privacy: support@khatmah.app.