Gizlilik politikası

Last updated: 13 November 2026. Your privacy is a trust to us. In short: no ads, no tracking, your data is never sold.

1. Data controller

Data controller: Muhammet Duhan Kaya (sole proprietorship operating under the RUHM PRO brand). Address: Akşemsettin Mah. Selimpaşa Sk. No: 8 İç Kapı No: 1, Eyüpsultan / Istanbul, Türkiye. Contact: [email protected]. This notice follows the principles of Turkey's Personal Data Protection Law (KVKK) and the EU General Data Protection Regulation (GDPR).

2. Using the app without an account

No account is required. Your settings, progress, notes, goals, tracking and daily logs, the start date of the 7-day trial and any offline packs you download are kept only in your device's storage (browser storage or the phone app's own storage) and are not sent to us. You can erase them at any time in Settings › Reset data.

Without an account, only these features send data to our server or to a provider, and only when you use them: Hatim circle and Friday quiz (your display name and a random device ID), Mosques near me (rounded location), Recitation check, Find the verse and Hafiz coach (an audio recording), asking by voice in Ask & Find (your speech, to your device's speech recognition service) and listening to Qur'an audio (your IP address, to the audio provider). Details are in sections 5 and 6.

3. If you create an account

Data processed: your name, email address, a one-way hash of your password (your password itself is never stored) and, while you are signed in, the app data synced between your devices: settings and profile, Qur'an Path and lesson progress, reading and memorisation progress, reading plan, goals and activity log, prayer/make-up and voluntary-prayer tracking, dhikr counters, notes, bookmarks and favourites, reminder settings, ʿumrah plan, gratitude journal and mood check-ins.

Purpose and legal basis: creating your account and syncing your data across devices, i.e. performance of the service you request and your consent (GDPR Art. 6(1)(b),(a)).

Retention: for as long as your account exists. When you delete your account, it and all server-side data are permanently erased. Session tokens expire automatically after 60 days.

Not synced: menstruation/postpartum days, the onboarding "on your heart" field, audio recordings, downloaded offline packs and the trial start date are never sent to your account. Changes are batched and sent from your signed-in devices about every 30 seconds at most.

4. What we never collect

We do not collect advertising identifiers, analytics or tracking data, contacts, photos or health data. The microphone is never on in the background; it is used only in Recitation check, Find the verse, Hafiz coach, Family voice and Ask & Find, when you press record or the microphone button. What you write in the onboarding "on your heart" field stays on your device only; it is not even synced to your account. Menstruation/postpartum days you can mark in the Tracker are also kept only on your device; they are never synced or sent to our server.

5. Location

Only taken when you tap "Use my location" and grant permission; it is used on your device for prayer times and the qibla and is not sent to a server. Exception: on "Mosques near me" your location is rounded to about 1 km and sent to our server only to find nearby mosques; no record linked to you is kept (the result for that area is cached for a day for speed). You can pick your city manually instead.

6. Service providers

Hosting and account data: Cloudflare, Inc. (USA; global network, under EU Standard Contractual Clauses). Qur'an audio: Quran Foundation (quran.foundation), EveryAyah (everyayah.com), QuranicAudio (quranicaudio.com) and mp3quran.net; audio loads directly from these sites when you listen, and your IP address is shared with them. Translation, tafsir and word data are fetched from Quran Foundation through our server; your IP address is not passed to Quran Foundation for these requests. Fonts load from our own server (no requests to Google). Family voice: recordings stay only on your device and are never sent to our servers; sharing them is up to you. Recitation check, Find the verse and Hafiz coach: the recording of your recitation, or of a recitation you let it hear, is sent to Cloudflare Workers AI only with your permission and only to be transcribed; the verse itself is identified on your device. RUHM PRO does not store the recording or the resulting text on its servers; Cloudflare's own processing and retention terms apply. The microphone is on only while you press record. Camera qibla (AR): the camera image is only shown on screen; it is never recorded or sent anywhere. Hatim circle: the circle name, intention, display name and a random device ID are stored in Cloudflare D1 for as long as the circle exists; the creator can delete the circle and all its records in the app, and participants can release their own juz. Friday quiz: your display name, a random device ID, your weekly score and number of correct answers are stored in Cloudflare D1; your display name is visible to everyone on the leaderboard; entries are deleted after 8 weeks. Ask & Find: when you type, the search runs entirely on your device and nothing is sent anywhere; if you ask with the microphone, your speech goes to your browser's or phone's own speech recognition service to be transcribed (e.g. Google in Chrome, Apple in Safari and on iPhone); that service is run by your device's provider, not by RUHM PRO. Email: verification and password-reset emails are sent with Cloudflare Email Service; your email address is used only for this. Purchases (phone app): subscriptions go through the Apple App Store or Google Play and we never see your payment details; to verify subscription status, RevenueCat, Inc. (USA) processes store purchase records and a random app user ID. Home-screen widgets, notifications and the adhan alarm: content and Premium status are shared only on your device, between the app and its widgets; notifications are scheduled on your device. Word-by-word: word data and timings come from Quran Foundation. Offline pack: downloaded audio is stored only on your device. Mosque data: OpenStreetMap (© OpenStreetMap contributors, ODbL).

7. Security

All connections are encrypted with HTTPS. Passwords are hashed with salted PBKDF2-SHA256; session tokens are stored only as hashes. Sign-in attempts are rate-limited and a strict content security policy is enforced.

8. Your rights

Under GDPR and KVKK you have the right to access, rectify, erase and port your data and to object to processing. You can download a backup file from the Account page and delete your account instantly. Other requests: [email protected]. You may also complain to your local data protection authority.

9. Children

The app is suitable for families. Children under 13 should not create an account; when using it with your child, on-device storage without an account is enough.

10. Changes

When we update this notice we change its date and announce significant changes in the app.

ملخص الخصوصية

• دون حساب: تبقى إعداداتك وتقدّمك وملاحظاتك وسجلاتك على جهازك فقط ولا تُرسل إلينا.
• ما يُرسل حتى دون حساب، وعند استخدامك فقط: حلقة الختمة ومسابقة الجمعة (الاسم الظاهر ومعرّف عشوائي للجهاز)، المساجد القريبة (موقع مقرّب إلى نحو كيلومتر واحد)، فحص التلاوة و«اعثر على الآية» و«مدرّب الحافظ» (تسجيل صوتي يُحوَّل إلى نص عبر Cloudflare Workers AI ولا نحفظه)، السؤال بالصوت في «اسأل وابحث» (إلى خدمة التعرّف على الكلام في متصفحك أو هاتفك)، والاستماع إلى التلاوات (يصل عنوان IP إلى مزوّد الصوت).
• عند إنشاء حساب: الاسم والبريد الإلكتروني وبصمة أحادية الاتجاه لكلمة المرور، وبيانات التطبيق التي تُزامَن بين أجهزتك. لا تُزامَن أيام الحيض والنفاس ولا حقل «ما في قلبك» ولا التسجيلات الصوتية.
• لا إعلانات ولا تتبّع ولا بيع للبيانات. يمكنك حذف حسابك وجميع بياناته على الخادم من صفحة «حسابي».
• النص القانوني الكامل متاح بالتركية والإنجليزية، وهو المرجع.

Ringkasan privasi

• Tanpa akun: pengaturan, kemajuan, catatan, dan riwayat Anda hanya disimpan di perangkat Anda dan tidak dikirim kepada kami.
• Yang dikirim meski tanpa akun, hanya saat Anda menggunakannya: Lingkaran khatam dan Kuis Jumat (nama tampilan dan ID perangkat acak), Masjid terdekat (lokasi yang dibulatkan sekitar 1 km), Cek tilawah, Temukan ayat, dan Pelatih hafiz (rekaman suara yang ditranskripsi oleh Cloudflare Workers AI dan tidak kami simpan), bertanya dengan suara di Tanya & Temukan (ke layanan pengenalan suara peramban atau ponsel Anda), serta mendengarkan bacaan Al-Qur'an (alamat IP Anda diterima penyedia audio).
• Jika membuat akun: nama, email, hash satu arah kata sandi, dan data aplikasi yang disinkronkan antarperangkat. Hari haid/nifas, kolom "isi hati", dan rekaman suara tidak disinkronkan.
• Tanpa iklan, tanpa pelacakan, data tidak dijual. Anda dapat menghapus akun beserta semua datanya di server dari halaman Akun.
• Teks hukum lengkap tersedia dalam bahasa Turki dan Inggris, dan teks itulah yang menjadi acuan.