Privacy Policy

The Service is operated by CuranovaAI, which is the data controller responsible for your personal information. You can reach us about anything in this policy at info@curanova.ai.

Account information. When you create an account we collect your name and your email address or phone number, depending on how you sign in. You can sign in with Google, with an email and password, or with a one-time code sent by SMS. We record your role (learner, parent, teacher or institution administrator) and, where relevant, the institution, class or group you belong to.

Learning profile and progress. The goals and preferences you choose during onboarding (for example your level, daily goal and which parts of the Qur’an you are memorising), and the progress you make: ayahs and pages memorised, revision schedules, lesson and test results, recitation scores and per-word feedback, streaks, points, achievements and certificates.

AI tutor sessions. When you talk to the AI tutor (“Ustad”), we store a text transcript of the conversation and the feedback generated from it, so you and — where applicable — your parent or teacher can review progress. Before feedback reports are saved, they are passed through an automated tool that detects and removes personal details such as phone numbers and email addresses.

Information from parents, teachers and institutions. Teachers may record notes, attendance, assigned lessons and tests, and in-person recitation assessments about their students. Parents may set parental controls (such as daily time limits, quiet hours and whether the AI voice is enabled). Institutions may create learner accounts on a learner’s behalf using a name, email and class.

Notifications. If you allow notifications we store a device token so we can send reminders (for example that revision is due) and messages from your teacher, together with your notification preferences.

Technical information. Like any online service, our servers receive basic technical data such as your IP address, device and browser type, and the time of requests. We use it to run, secure and troubleshoot the Service and keep it in server logs for a limited time.

Information that stays on your device. Your journal entries, personal planner, word-bank practice and display settings are saved in your browser’s or app’s local storage and are not sent to our servers.

Reciting to the AI tutor needs access to your microphone. We only use the microphone while you are actively reciting or talking to the tutor, and you can deny or withdraw the permission in your device or browser settings at any time.

• Voice audio is processed, not stored. Your voice is streamed to, or sent as short clips to, Google’s Vertex AI service to produce real-time feedback and recitation scores. We do not keep recordings of your voice. What we keep is the resulting text transcript, scores and feedback described above.
• Camera. Some optional assessment features use your camera. Frames are sent to Vertex AI for analysis during the session and are not stored.
• Photos of handwritten notes. If you ask the AI to review a photo of your notes, the image is sent to Vertex AI for that review and is not stored.
• Browser speech recognition. Some features (for example voice input in the journal) use your browser’s built-in speech recognition. In some browsers, such as Google Chrome, the browser provider processes that audio under its own privacy policy.

• To create and secure your account and sign you in.
• To provide the Service: personalised memorisation plans, spaced revision, AI recitation feedback, lessons, tests and certificates.
• To let the parents, teachers and institutions you are linked to see your progress and support you.
• To send reminders and notifications you have allowed.
• To enforce fair-use limits on AI features, and to prevent abuse and keep the Service secure.
• To fix problems and improve the Service.
• To comply with our legal obligations.

We process your information because it is necessary to provide the Service you asked for, because you (or your parent or guardian) have given consent, for our legitimate interest in running a safe and reliable Service, or where the law requires it.

We do not use your recitations, transcripts or other personal information to train AI models, and our AI provider does not use them to train its models.

We do not sell or rent your personal information. We share it only as follows:

• People you are linked to. If you join a class or link your account to a parent or teacher (for example with a join code), they can see your learning progress, results and AI feedback. Institution administrators can see the progress of learners in their institution.
• Service providers. We use Google Cloud and Firebase (Google LLC) to host the Service, store data, authenticate users, send notifications and SMS sign-in codes, and run AI features (Vertex AI, Cloud Text-to-Speech and data-loss-prevention tools). Google processes this data on our behalf under contract.
• Qur’an audio providers. Recitation audio is played directly from public Qur’an audio services (cdn.islamic.network and audio.qurancdn.com). When audio plays, those services receive your IP address, as with any web request. We do not send them any account information.
• Legal reasons. Where required by law, or to protect the rights, safety and security of our users, the public or CuranovaAI.
• Business changes. If CuranovaAI is involved in a merger, acquisition or transfer of the Service, your information may be transferred as part of it, and this policy will continue to protect it.

The Service is used by learners of all ages, including children. Accounts for children should be created or linked by a parent or guardian, or provided by a school or institution that has obtained any consent required from parents. Where the law requires parental consent (for example, for children under 13, or a higher age in some countries), we rely on the parent, guardian or institution to give it.

We collect only what is needed to provide the learning experience, we do not show children advertising, and we do not use their data for profiling or marketing. A parent or guardian can review their child’s progress, set parental controls, and ask us to access, correct or delete their child’s information by contacting info@curanova.ai. If you believe a child has given us personal information without appropriate consent, please contact us and we will delete it.

Our databases and servers are hosted on Google Cloud in India (the asia-south1 region, Mumbai). AI processing through Vertex AI, and some supporting Google services, may take place in other countries where Google operates. Your information may therefore be processed outside the country where you live. When that happens we rely on Google’s contractual commitments and safeguards to protect it.

• We keep your account and learning data for as long as your account is active, so your progress and revision history are not lost.
• When you delete your account, or ask us to, we delete or anonymise your personal information within 30 days. Encrypted backups may take up to a further 90 days to expire.
• We keep limited information for longer only when the law requires it, or when it is needed to resolve disputes or prevent abuse.
• Voice audio, camera frames and note photos are not retained after they are processed.

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it;
• correct information that is inaccurate or incomplete;
• delete your information or your account;
• receive your data in a portable format;
• object to or restrict certain processing;
• withdraw consent at any time, without affecting processing that has already taken place;
• complain to your local data-protection authority.

You can edit your profile and notification preferences in the app, export your memorisation progress from Settings, and turn off microphone, camera and notification permissions in your device settings. For any other request, email info@curanova.ai. We will respond within 30 days and may need to verify your identity first.

You can permanently delete your learning history at any time in the app under Settings → Delete Learning History.

To delete your whole account and all associated personal data, email info@curanova.ai from the email address or phone number linked to your account, with the subject “Delete my account”. We will confirm the request and complete the deletion within 30 days, as described in section 8. Parents and guardians can request deletion of a child’s account in the same way. If your account was provided by an institution, you can also ask the institution to arrange deletion.

We use a single essential cookie to keep you signed in securely. We do not use advertising, analytics or tracking cookies, and we do not track you across other apps or websites.

The Service also uses your device’s local storage to remember your language, display settings and where you left off, and to hold the on-device data described in section 2. You can clear this at any time through your browser or app settings.

We protect your information with encryption in transit and at rest, access controls that limit each user to the data they are allowed to see, and verified sign-in sessions. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authorities of a breach where the law requires it.

We may update this policy from time to time. We will change the “Last updated” date above and, for significant changes, notify you in the app or by email before they take effect.

If you have questions about this policy or how we handle your information, contact CuranovaAI at info@curanova.ai.