Privacy Policy

Last updated: October 2026 · GDPR / UK GDPR / COPPA aware

Data controller

Quran Academy (quranforlife.com) is the controller for personal data collected through this platform. Contact: support@quranforlife.com

What we collect

• Account: name, email, password (hashed), region, timezone
• Student: name, age, gender, course track, progress, Hifz entries
• Lessons: schedule, homework, Co-Pilot notes, recording URLs
• Consent flags: recording, GDPR, COPPA, marketing
• Payment: processed by Stripe — we store enrollment hours, not full card numbers

Why we use it

• Deliver and schedule Quran lessons
• Safeguard minors (recordings, parent observe mode, platform messaging)
• Track curriculum progress and billing hours
• Send transactional emails (trials, reminders, lesson summaries)
• Marketing only if you opt in

Legal bases (GDPR)

Contract (lesson delivery), consent (recordings, marketing, COPPA), and legitimate interest (safeguarding, fraud prevention).

Processors

• Vercel — hosting
• PostgreSQL provider — database
• Resend — email
• Stripe — payments
• Zoom — video meetings (when configured)

Retention

Active account data is kept while you use the service. Recordings are retained per SafeguardTrust policy (typically 90 days unless longer retention is legally required). You may export or delete your data from Parent Settings.

Your rights

Access, rectification, erasure, restriction, portability, and objection (where applicable). UK/EU users may complain to their supervisory authority. Use Parent Settings or email support@quranforlife.com.

Cookies

We use essential cookies for login sessions. Analytics cookies are off by default; the cookie banner stores your preference in local storage.

International transfers

Data may be processed in the US and EU. We use providers with appropriate safeguards (SCCs where required).

Children

We do not knowingly collect data from children without parental consent. Parents manage student profiles and may delete accounts at any time.