Al Nour Privacy Policy
Effective date: 2026-09-25 · Version 3
1. Who we are and what this policy covers
Al Nour ("we", "us") provides reading, listening, and related services. This policy covers our website at alnour.io and www.alnour.io, our iOS and iPadOS applications, Android phone and tablet applications, browser-based experiences, connected TV and display features, and associated accounts, support, and content-contributor services. The information processed depends on the features you use; not every platform offers every feature.
For privacy questions or requests, contact hello@alnour.io. This policy does not replace the privacy policies of independent websites, app stores, or services that you choose to visit.
2. Information we process
- Account information: your email address, account identifier, authentication and verification records, and profile information you choose to provide. Our authentication service processes passwords and one-time codes. Passwords are not stored as readable text in the application. Never send us your password or verification code by email.
- Saved content and preferences: favorites, reading and playback progress, interface language, reading/display preferences, and search history where its synchronization is enabled. Some preferences and guest activity remain on your device; account-enabled features can synchronize data across devices.
- Content you provide: dedication names and messages, photographs you select, saved display presets, and information you send to support. If you use contributor or administration features, we also process submitted content, recordings, review information, and access/audit records associated with those activities.
- Device, service, and security information: browser or device type, operating system, application/build version, language, installation and session identifiers, network requests, errors, and security/anti-abuse signals. Hosting and security providers process IP addresses to deliver and protect the service. We use country-level information to apply regional privacy settings; our consent ledger does not store precise location or IP addresses.
- Usage and analytics: depending on your settings and applicable regional rules, screen/page visits, content and recording identifiers, reading/listening progress, playback actions and duration, search-result counts, feature use, notification opens, and campaign attribution. Events can use pseudonymous installation identifiers and, where permitted by the analytics settings, account identifiers. Pseudonymous information is not necessarily anonymous.
- Notifications: permission choices, notification preferences, delivery tokens, and notification interactions when you enable supported notification features.
Reading choices and dedication messages may reveal sensitive information, including religious interests or information about another person's health. Only provide information you are entitled to share, and obtain permission before submitting another person's private information or photograph. Avoid including unnecessary sensitive details in free-text messages.
3. Why we use information
We use information to deliver content and playback; authenticate accounts; send verification and recovery emails; save and synchronize your choices; operate connected displays; provide requested notifications and support; manage contributed content; detect abuse; maintain service reliability; and understand and improve the service under the applicable analytics settings.
Where a legal basis is required, processing may rely on providing the service you request, consent for optional features or where required by law, legitimate interests in maintaining and securing the service where permitted, or compliance with legal obligations. Consent can be withdrawn through the relevant settings or by contacting us, without affecting processing already lawfully performed.
4. Analytics, cookies, and local storage
We use essential browser/application storage for sessions, preferences, offline functionality, and security. We also use aggregate cookie-free website measurement and Google Analytics, including Firebase Analytics, for product measurement, together with our internal operational and consent records. Learn how Google processes information from sites and apps using its services.
Our analytics configuration disables advertising storage, advertising user data, and advertising personalization. Our product-event filters exclude email addresses, names, full prayer text, search-query text, free-text messages, precise location, passwords, and authentication tokens from analytics event payloads. Content and recording identifiers and activity measurements may still be included.
Our current regional configuration asks before analytics storage in the EEA, United Kingdom, and Switzerland, and when the region cannot be determined. In other recognized regions, analytics may be enabled by default and can be disabled in privacy settings. On the website, Google's restricted cookieless measurement may operate when analytics storage is denied; refusing optional analytics does not prevent essential security, consent, or service operations. Cookie-free measurement should not be understood as an absence of all data processing.
You can change available analytics choices in the website or app privacy settings. Device/browser settings can also limit storage, but blocking essential storage may affect sign-in and saved preferences.
5. Who receives information
We use service providers in the following categories, with access to information needed for their functions:
- Hosting and account services: deliver the website and apps, manage sign-in, and store and synchronize your saved information.
- Security and reliability services: process network and device information to prevent abuse and keep the service working.
- Email delivery services: process your email address and delivery information to send verification codes, password recovery messages, and service emails.
- Analytics services: process the usage information described in section 4, subject to the applicable privacy settings.
- App distribution and notification services: deliver applications, updates, and requested notifications for your device.
For questions about the providers involved in processing your information, contact hello@alnour.io.
Authorized operators and support personnel may access information needed for their work. Analytics reporting integrations may process service reports for internal analysis. We limit access according to the purpose and role; account holders do not receive administrative access merely by signing in.
Playing externally hosted content, including embedded YouTube videos, can send device, network, and playback information to that provider under its own privacy policy. Third-party services may use their own cookies or identifiers. Choosing to share content or send material to a connected display makes that material available to the recipients or people who can see that display.
We may disclose information when legally required or necessary to protect rights, safety, and the service. If ownership or operation changes, information may be transferred as part of that change, subject to applicable notice and protection requirements.
6. Photos, displays, and device permissions
Where supported, we request permissions such as photo-library access or notifications when you use the associated feature. We process photographs you select for features such as dedications; selecting a photograph is distinct from giving us access to every photograph on your device. Uploaded photographs can be stored with your account and delivered to a display you connect.
A private upload is not a promise that content remains private after you display or share it. Be careful when presenting names, photos, or messages on shared or public screens. You can revoke device permissions in operating-system settings and disconnect display sessions using the available controls.
7. Retention and deletion
Account-linked information is retained to provide the account and saved features until deleted, subject to the exceptions below. Device-local data can remain until you clear the relevant app/browser data or remove it using available controls. Uninstalling an application alone does not delete its cloud account.
You can request account deletion through Profile → Manage account → Delete account in supported app versions, or contact hello@alnour.io from your registered email with the subject Al Nour account deletion. You do not need to reinstall the app to contact us. We may ask you to verify ownership to protect your account. Do not send your password or a one-time code to support.
The account-deletion process removes the authentication account and its associated private uploaded media and account-linked saved data. Historical consent, security, operational, or audit records may remain where necessary; removing the account reference does not necessarily make an installation-linked record anonymous. Provider logs and backups can also remain subject to applicable retention and deletion procedures. Aggregated information that no longer identifies you may be retained.
Retention depends on the purpose, sensitivity, operational need, and applicable obligations. We do not promise immediate erasure from every backup or independent recipient's device. Contact us for questions about particular records or requests to delete additional personal information. Any retention exception should be limited to its necessary purpose.
8. Your choices and rights
You can use public reading and listening features without signing in, manage available account and synchronization settings, change analytics preferences, disable notifications, disconnect displays, and request deletion. Where available, account controls also let you export saved information.
Depending on applicable law, you may have rights to access, correct, delete, or receive a copy of personal information; object to or restrict processing; withdraw consent; and complain to a relevant data-protection authority. Contact hello@alnour.io to exercise these rights. We may need reasonable identity verification and will explain any applicable limitations.
9. International processing and security
Our service providers may process information outside your country. Applicable safeguards and contractual arrangements depend on the provider and the relevant legal requirements. You can contact us for further information.
We use safeguards such as encrypted network connections, authentication, access controls, and restricted storage. No service can guarantee absolute security. Protect your account credentials and avoid using sensitive content on displays or devices you do not trust.
10. Children
We do not knowingly seek personal information from children who cannot lawfully consent to the relevant processing without a parent or guardian. Parents and guardians should supervise account creation, uploads, and sharing. If you believe a child has provided personal information without the required authorization, contact hello@alnour.io so we can investigate and take appropriate action. Store age ratings and target-audience declarations are separate from this policy.
11. Changes and contact
We may update this policy as the service or applicable requirements change. The published page will show its effective or updated date. Where required, we will provide additional notice or request consent for material changes.
Al Nour — hello@alnour.io