Scroll Your Quran: Privacy Policy
Effective date: November 5, 2026 Who we are: Scroll Your Quran is published by Yusuf Sallam ("we", "us"). Contact: ysallam64@gmail.com.
Scroll Your Quran helps you read the Quran one ayah at a time and memorize it with daily plans. It is built to work without knowing who you are: there is no sign-up, no account, no email and no password.
The short version
- Your reading, notes and memorization progress stay on your phone.
- We never sell data, show ads, or use advertising or analytics SDKs from other companies.
- A few anonymous records leave the phone so that purchases work and we can count how many people start a trial. They are tied to a random identifier, not to your name, email or Apple Account.
What stays on your device
These are stored only on your iPhone or iPad and are never sent to us:
- your reading position, saved ayahs and private notes;
- your memorization plan, progress, review schedule and streak;
- your settings (language, digits, text size, reminder time, meaning line) and your onboarding answers.
Reminders are local notifications scheduled on your phone. Deleting the app, or using Settings › Clear Reading Data, deletes this data. We cannot recover it, because we never had it.
What leaves your device, and why
| What | Sent to | Why |
|---|---|---|
| A random installation token, created on first use and kept in the iOS Keychain | Our server (hosted on Supabase) stores only a one-way hash of it and the time it was first used | To recognise this installation without an account, and to give purchases a stable anonymous ID |
| An anonymous customer ID (derived from that installation), your subscription and purchase history, and a few app attributes: onboarding steps reached, the language you chose, how much you said you have memorized, your daily pace, your reminder time, the meaning line selected, the number of app opens and days with an open, and the time of the last open | RevenueCat, our subscription processor | To unlock and restore your subscription, check free-trial eligibility, and understand where people stop during onboarding |
| A short event list: "paywall seen", "trial started", "paid", "practice session completed", "review completed", with the campaign tag of the link you opened the app from (if any), the app version and the time | Our server | To count how many people start and keep using the app, per marketing campaign. No content of your notes or reading |
| An error report you choose to send (the surah and ayah, the kind of error, your optional note, the app version and language). Please do not put personal details in the note | Our server | To check and fix the Quran text, translation or audio timing |
| Requests for recitation audio files | Our audio host (audio.scrollyourquran.com) | To stream or download the recitation you play. Like any web request, the host sees your device's IP address; we do not log it against your identifier |
Payments are handled by Apple. We never see your card details, name or Apple Account email.
Who processes it for us
- Supabase hosts our server and database (the installation hash, event list and error reports).
- RevenueCat processes subscriptions on our behalf.
- Our audio host (a content-delivery network) serves the recitation files.
Each of them processes the data only to provide that service to us, under terms that protect it at least as well as this policy does. None of them is an advertising or data-broker company, and nothing is shared with anyone else.
What we do not do
- No ads, ever, and no advertising identifiers (we do not ask for tracking permission because we do not track).
- No third-party analytics or crash-reporting SDKs.
- No AI processing of your notes or reading. The meaning lines in the app are published tafsir and translations, bundled with the app.
- No sale or sharing of data with data brokers or advertisers.
How long we keep it
- Installation token hashes and event records: up to 24 months after the last activity, then deleted or aggregated so they no longer relate to an installation.
- Error reports: 90 days after the report is closed (fixed or rejected), and never more than 24 months.
- Deletion runs automatically on our server every day.
- RevenueCat and Apple keep purchase records as their own policies and the law require.
Your choices and rights
- Delete everything on the device: delete the app, or use Settings › Clear Reading Data (this does not cancel a subscription).
- Subscriptions: manage or cancel them in your Apple Account settings.
- Stop sending data: deleting the app stops everything described above. Error reports are only sent when you tap Send.
- Server records: because we do not know who you are, write to ysallam64@gmail.com and we will help you find and delete the records tied to your installation. Depending on where you live (for example under the GDPR or California law) you may have rights to access, correct or delete data and to object to processing; we honour these requests for everyone.
Children
The app is suitable for all ages (rated 4+), but it is not directed at children under 13 and we do not knowingly collect personal information from them. The records described above contain no personal details.
Changes
If this policy changes, we will update the effective date above and, for material changes, tell you in the app.