Privacy Policy

Noor ("Noor", "we", "us", or "our") respects your privacy and is committed to protecting the information you provide when using the Noor mobile application (the "App").

This Privacy Policy explains what information Noor collects, how we use it, how it may be processed or shared with service providers, how we protect it, and the choices available to you. This policy describes our data practices; it does not replace permission requests or consent where these are required.

Your controls: Your choices and rights · Terms of Use

Account deletion: https://noorapp-backend-production.up.railway.app/delete-account

1. About Noor

2. Information We Collect

Depending on how you use Noor and which permissions you grant, we may collect the following categories of information.

2.1 Account and authentication information

• Name or display name
• Username
• Email address
• Noor user/account ID
• Authentication provider (email/password or Google)
• Google account identifier when you choose Google Sign-In
• Phone number, where you provide it
• Profile image URL, where applicable
• Password in protected (hashed) form — Noor never stores your password in plain text
• Session information required to keep you signed in

If you use Google Sign-In, the App sends a Google ID token to Noor's backend, which verifies it with Google and receives your email address, name, and Google account identifier.

You may use certain Noor features without creating an account where guest access is supported.

3. Location Information

Noor may request access to your device's location. When you grant permission, Noor may collect precise latitude and longitude coordinates.

Location information may be used to:

• Calculate accurate prayer times
• Determine the Qibla direction
• Support Azan and prayer-related features
• Save your selected prayer location (coordinates, city, and country) to your Noor profile

Location access is optional. If you deny location permission, Noor continues to work using default settings (Cairo, Egypt) or previously saved settings, although some features may be less accurate.

Noor does not track your location continuously in the background. Location is read only when a feature needs it, such as Qibla, refreshing prayer times, or updating your prayer location. Location coordinates may also be stored locally on your device as part of prayer and Azan settings.

4. Time Zone Information

Noor reads the time zone configured on your device. For signed-in users, this time zone is saved to your Noor account. We use it to calculate prayer times, align reminders with your local time, and determine your local calendar day for daily worship tracking.

5. Quran and Worship Activity

When you use these features while signed in, Noor stores the following information with your account:

Quran

• Bookmarks and notes you add to Quran content
• Last-read position and reading history
• Khatmah plans and progress
• Reading preferences (font size, reciter, tafsir, translation)
• Sajdah (prostration verse) completion

Worship and journey

• Prayer completion records
• Nawafel (sunnah prayer) completion
• Adhkar progress and favorites
• Tasbih counts and custom Tasbih phrases
• Daily challenge progress, answers, points, and level
• Legacy Sadaqah goals and amounts you previously entered, and optional charity reminder preferences. New charity experiences do not set monetary targets or award charity points.
• Zakat calculations are processed from your inputs without saving the asset breakdown. If you explicitly save an assessment, Noor stores its financial totals, currency, due date, chosen reference and price source/date, plus payment entries you record. These are private user-reported records, not verified donations or bank transactions. You can delete these records or your account. Noor does not process payments.
• Reference gold and silver prices are obtained by the backend from Metals.dev and converted to the selected currency. Requests contain price-query parameters; your identity, asset values and payment records are not sent to that provider. These international spot prices exclude local dealer premiums, taxes and making charges. Saved assessments retain the price source and collection timestamp.
• Reminder preferences (Azan, Salawat, Surah Al-Mulk, Duha, Qiyam, Khatmah, optional charity reminders)

This information is used only to provide personal progress tracking and the features you request. We do not sell your religious or worship activity data.

6. Push Notifications

If you grant notification permission, Noor uses Firebase Cloud Messaging (FCM) to deliver push notifications such as prayer and Azan reminders, Salawat reminders, Khatmah reminders, and other reminders you enable.

To deliver notifications, Noor stores an FCM device token together with your device platform, app version, and language setting. Most optional reminders are off by default until you turn them on. You can control notifications from your device settings and from Noor's notification settings.

7. Device and Technical Information

Noor and its service providers process technical information required to operate and secure the App, including:

• Device platform, app version, and locale
• Crash and diagnostic information
• IP address and User-Agent of requests to Noor's servers
• Request identifiers used for troubleshooting

Noor's backend uses this information for security, rate limiting (abuse prevention), diagnostics, and service operation. IP addresses are not stored in Noor's database; they may appear in server logs kept by our hosting provider.

8. Analytics

Noor uses Firebase Analytics to understand how the App is used. Analytics may collect screen views, app interactions, feature usage (including prayer and Khatmah activity events), and a Noor user identifier where applicable.

Analytics is used to understand usage, diagnose issues, and improve the App. Noor does not use analytics to sell your personal information.

9. Crash Reporting

Noor uses Firebase Crashlytics in release builds to identify and fix crashes. Crash reports may include crash details, technical diagnostic information, device and app information, and the Noor user identifier where configured.

10. Google Sign-In

If you choose to sign in with Google, Noor requests only the scopes needed for sign-in: OpenID, email, and profile. Google processes information according to its own privacy policy.

11. How We Use Your Information

• Create, manage, and authenticate your account
• Provide Noor's features, including prayer times, Qibla, Quran, Khatmah, and worship tracking
• Deliver notifications and reminders you enable
• Send account emails such as password reset
• Maintain security and prevent abuse and unauthorized access
• Diagnose errors and crashes, analyze usage, and improve the App
• Respond to support requests and comply with legal obligations

12. How We Share Information

We do not sell your personal information. Information is processed by service providers that help us operate Noor:

We do not authorize these providers to use Noor user data for purposes unrelated to the services they provide to Noor, except where required by law.

13. Quran and Third-Party Content Services

Some Quran text, translations, and tafsir are obtained by Noor's servers from external content services (such as Quran Foundation / Quran.com). These requests are for public content and do not include your account information.

When you play or download a recitation, the App downloads the audio file directly from the audio host (such as EveryAyah or the Quran.com audio CDN). That host receives your device's IP address and the requested file, but not your Noor account information.

14. Data Security

• Encrypted network communication (HTTPS/TLS)
• Passwords hashed with bcrypt; session and password-reset tokens stored only as SHA-256 hashes
• Short-lived access tokens and revocable refresh tokens
• Secure token storage on supported devices
• Rate limiting, security headers, and server-side validation
• Access-controlled database

No Internet service can guarantee absolute security. Please keep your credentials private.

15. Data Retention

We keep your information while your account is active and as needed to provide Noor's services.

When you delete your account, Noor permanently deletes your account and all associated app data from its database immediately, including profile, Quran and worship progress, preferences, sessions, and notification device tokens. Deleted data cannot be restored.

After deletion, Noor keeps only a minimal record — your email address, your Google account identifier (if you used Google Sign-In), and the deletion date — so that your deleted account is not automatically recreated or restored when an old session or sign-in is used. This record is removed if you later choose to create a new account with the same email address.

Server logs held by our hosting provider, and data held by Firebase (analytics and crash reports), are retained according to those providers' retention periods.

Some settings and cached content (for example prayer settings, the last prayer location, and downloaded Quran pages or audio) are stored only on your device. They are removed when you uninstall the App or clear its data.

16. Account Deletion

In the App

Open the Account tab in Noor and choose Delete account, then confirm. Deletion is immediate and permanent.

Outside the App

Visit https://noorapp-backend-production.up.railway.app/delete-account to delete your account on the web, or email us at mahmoudahmedabuelazem@gmail.com from the email address associated with your account.

Some information stored locally on your device (such as cached settings) is removed when you uninstall the App or clear its data.

17. Your Choices and Rights

• Deny or revoke location and notification permissions
• Update your account information and reminder preferences
• Sign out of your account
• Delete your Noor account
• Contact us to request access to or correction of your personal data
• Where applicable law provides these rights, request data portability, object to processing, request a restriction, or withdraw consent for processing based on consent

We may need to verify your identity before fulfilling a data request. The rights and response requirements that apply depend on your location and applicable law. You may also contact the relevant data-protection authority where that right is available.

18. Children's Privacy

Noor is not intended to knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to Noor where this is not permitted, contact us at mahmoudahmedabuelazem@gmail.com and we will take appropriate action.

19. International Data Processing

Noor's database is hosted in the European Union (Frankfurt, Germany). Our hosting and service providers (Railway, Google Firebase, Brevo) may process information in other countries, including the United States. Where required by law, we take appropriate measures for international transfers.

20. Changes to This Privacy Policy

We may update this Privacy Policy when Noor's features, data practices, or legal requirements change. When we make material changes, we will update the "Last Updated" date and, where appropriate, notify you in the App.

21. Contact Us