Noor

Noor

Privacy Policy

This policy explains what Noor (com.noorfaith.app) collects for version 1.1 of the mobile app and this public website, how that information is used, and how you can delete your account.

1. Introduction

Noor is an educational Islamic learning product. This website is published at https://noorfaith.com. You can use much of Noor without creating an account. If you create an account in the app, some learning data can synchronize through a hosted backend (Supabase).

This policy is written for currently implemented version 1.1 behavior. It does not claim features that are disabled or not yet launched, including Community, private messaging, chat, and remote push notifications.

2. This website

This site is a static informational website hosted on Cloudflare Pages. It is operated by NurTech LLC, a Pennsylvania company. It does not create accounts, does not set cookies, does not use a website database, and does not include advertising, analytics, or tracking scripts. Visiting these pages does not require a login. It does not serve a Quran HTTP API.

3. Information Noor collects

Account information (when you sign up or sign in in the app)

Passwords are handled by Supabase Auth. Noor does not store readable passwords in application databases or local app storage.

Cloud learning data (when you are signed in)

When you sign in on a device, Noor can merge cloud progress and lesson bookmarks with local copies so learning can continue across devices.

In-app feedback (optional; guests and signed-in users)

When you use the in-app feedback form, Noor sends only what you submit plus a small amount of app and device context needed to understand the report. Submissions are accepted from guests and from signed-in users. You do not need an account to send feedback.

Each submission includes:

The feedback flow does not submit precise location, prayer coordinates, passwords, authentication tokens, Quran notes, highlights, reading history, or other local study content.

4. Information stored only on the device

The mobile app stores the following on your device (for example with local Hive storage). These items are not synchronized to Noor’s servers in version 1.1:

Guest use does not create a Noor cloud account. Local lesson progress and lesson bookmarks remain on the device until you sign in and sync, or clear local data.

5. Location, prayer times, and reminders

Location may be used on the device to calculate prayer times and Qibla direction. You can deny system location permission and still set a city manually. Optional city search uses OpenStreetMap Nominatim. Prayer, Sunrise, Daily Ayah, and Jumu’ah reminders are processed on-device. Maghrib is the sunset prayer; there is no separate sunset reminder.

Version 1.1 does not send these reminders through Firebase Cloud Messaging or Apple Push Notification service. Precise location used for prayer or Qibla on the device is not included in in-app feedback submissions.

6. How information is used

Noor processes account and sync data to provide the service you request (account creation, sign-in, password recovery, progress sync, and account deletion), to maintain security of authentication, and to operate the hosted infrastructure required for those features. When you submit in-app feedback, Noor processes that submission to review and respond to your report and to operate the feedback intake path.

8. Service providers and data sharing

Noor does not sell your personal information. Version 1.1 uses service providers that process data as needed to run the product:

Version 1.1 does not use advertising SDKs, third-party analytics SDKs, or Crashlytics in the free release configuration. Community features are disabled and are not active processors for v1.1. There is no private messaging or chat in v1.1.

The mobile app may include Firebase configuration files for a possible later remote-notification setup. That is not described here as active tracking, analytics, or live FCM/APNs delivery for v1.1.

9. Data retention

Cloud account data, lesson progress, and lesson bookmarks are retained while your account exists. Local device data remains until you clear it, uninstall the app, or delete your account (which clears local user-generated data the app manages after a successful cloud deletion). Authentication sessions expire according to Supabase Auth session rules.

Optional in-app feedback rows in app_feedback are retained for support and product-improvement purposes. No automated retention window or purge schedule is implemented in the current product. Email copies delivered through Resend are also subject to that provider’s retention practices. Specific numeric retention windows beyond that implemented behavior are not stated here.

10. Account and data deletion

You can permanently delete your Noor account from the app. Deletion removes the Supabase Auth user and the cloud user_progress and user_bookmarks rows for that user. The mobile app then clears local user-generated data it manages. This cannot be undone.

Account deletion does not automatically delete prior in-app feedback rows. Feedback submissions are not tied to a required account in the current implementation. To request deletion of a feedback submission, contact support@noorfaith.com and include any details that help identify it (for example the optional reply email you used or the approximate time of submission).

See the step-by-step instructions: Account deletion.

11. Security

Noor uses HTTPS for this website and for app backend calls, and access rules that limit cloud learning rows to the signed-in user. In-app feedback is accepted only through the submit-feedback Edge Function. The mobile app does not embed SMTP credentials, Resend API keys, or the Supabase service-role key. Direct client access to app_feedback by the anonymous and authenticated roles is revoked; inserts are performed server-side. The function applies basic input validation and rate limiting. No method of transmission or storage is completely secure, and we do not claim absolute security.

12. Children’s privacy

Noor is an educational resource suitable for a general audience. We do not knowingly create accounts for children under 13. If you believe a child has provided personal information, contact support@noorfaith.com.

13. International data processing

Service providers may process data in the regions where they operate. By using signed-in features or optional in-app feedback, you understand that account, sync, and feedback data may be processed outside your local country through those providers. Exact data-center locations are those of the providers, not independently inventoried here.

14. User choices and rights

Privacy questions: support@noorfaith.com.

15. Changes to this policy

If Noor’s data practices change materially, this page will be updated and the last-updated date revised. Continued use after an update means you should review the revised policy.

16. Contact information

Operator: NurTech LLC, a Pennsylvania company
Contact: support@noorfaith.com
Website: https://noorfaith.com

17. Effective date

Effective 25 August 2026. Last updated 25 August 2026.

These pages describe Noor version 1.1 as implemented. They have not been reviewed by independent legal counsel unless that review is separately recorded.