Tilawify Join the waitlist
How it works Join the waitlist Contact Privacy Credits

Privacy Policy

Last updated: 10 August 2026

Tilawify helps you practise reciting the Qur'an by listening to your microphone and comparing your pitch to a target reciter, in real time, entirely on your device. We do not record, store, or upload your voice. We do keep a small account so your practice progress can follow you between devices — and that is all.

1. Who we are

Tilawify is developed by Akram Gadir (“we”, “us”). This policy explains what data the Tilawify app collects, why, and what you can do about it.

2. Microphone audio — processed on-device only

  • When you use a practice session, Tilawify's on-device pitch-detection engine analyses your microphone input in real time to compare it against the target recitation's pitch.
  • Your voice is analysed on this phone only — audio is never recorded or uploaded. It exists only as a live signal processed in memory on your device for the duration of the session, then discarded.
  • We do not have access to your voice, and no one — including us — can listen to or retrieve it.

3. Account and progress data

Because Tilawify includes accounts and cross-device sync, the following is collected and stored on our servers when you choose to sign in:

  • Account info: your email address (or sign-in identifier) and an account identifier created for you, used to create and secure your account.
  • Progress data: which verses/surahs you've practised, completion status, streaks, and accuracy scores over time. This is pitch-matching results, not audio — for example “verse 3, 82% match, 9 August”, never a sound file.
  • Standard connection data: when the app talks to our service providers (sign-in, sync, downloads), those providers briefly handle standard connection information such as your IP address, as any internet service does (see §5). The app does not send crash or error reports.

We do not collect location data, contacts, photos, or any other data unrelated to the above.

4. How we use this data

  • To sync your progress across your devices.
  • To let you sign in and recover your account.
  • To diagnose and fix technical problems.

We do not sell your data. We do not use it for advertising. We do not share it with third parties except the infrastructure providers that host it (see §5).

5. Where data is stored

Account and progress data is stored with Firebase (Google), which provides the authentication (Firebase Authentication) and database (Cloud Firestore) services Tilawify relies on. Progress data is held in the europe-west2 (London) Firestore region.

6. Reciter audio

Recitation audio (the recordings you listen to and match against) is delivered as downloadable packs from Cloudflare R2 (Cloudflare, Inc.). Like any file download, a pack request exposes your IP address to Cloudflare's standard server infrastructure; we don't attach your identity or practice data to pack downloads. This is pre-recorded reciter audio, unrelated to your own microphone input, and is covered separately on our Audio & Data Credits page.

7. Your rights

  • Access: you can view your account and progress data in-app.
  • Deletion: you can delete your account and all associated data at any time from Settings — see our account deletion page for exact steps. Deletion is immediate and permanent from the live service. Copies in our provider's encrypted backups are purged within 180 days.
  • What deletion cannot reach: our providers keep their own standard infrastructure logs (for example sign-in and file-download records containing an IP address and a timestamp). Those are held by Google and Cloudflare on their own short retention schedules, are not linked to your practice data, and cannot be connected back to a deleted account by us.
  • Correction: you can update your sign-in details in-app.

If you're in a region with additional statutory rights (e.g. GDPR, CCPA), those rights apply on top of the above — see §9 to contact us.

8. Children's privacy

Tilawify is not directed at children under 13 (or the relevant age of digital consent in your region). We do not knowingly collect account data from children below that age without appropriate consent.

9. Contact

Questions about this policy, or any request about your data, can be sent through the contact form. Choose “Privacy or account deletion” as the subject and it will be handled as a priority. Account deletion requests can also be made using either method described on our account deletion page.

10. Changes to this policy

If this policy changes materially, we'll update the “Last updated” date above and, for significant changes, notify you in-app.