Privacy policy

The short version

• Sadri stores your email address so you can sign in, and the revision data you create in it.
• There are no ads, no analytics, no tracking and no crash reporting.
• Your data is never sold, never shared for advertising and never used to train AI.
• You can have everything deleted by writing to support@sadri.app.

What is collected

Your account. Your email address, used to sign you in through Firebase Authentication. If you sign in with Google on the web, Firebase also receives the name and profile picture your Google account shares. Passwords are handled by Firebase and are never visible to Sadri.

Your app data. What you record in Sadri: your surah progress (which surahs you are learning or have memorized, and when you last revised them), your sessions, passages and weak spots, and your revision runs. It is stored in Google Cloud Firestore in the EU (multi-region eur3), in an area only your account can read or write. Nobody else using Sadri can see it.

Nothing else is collected: no contacts, location, photos, microphone recordings, advertising identifiers or usage statistics.

What stays on your device

Some things are kept only on your phone or in your browser, and never leave it:

• Recitation audio you have played or downloaded, so it works offline.
• A copy of your app data, so the app opens with your lists when there is no connection.
• A playback log of the player's recent events, used to diagnose audio that stops.
• Preferences such as playback speed, loop goals and the last surah you picked.
• A Revise run that has not reached your account yet, such as one paused when the phone closed the app. It is removed from the phone once it is saved with your app data.
• A record of your Revise subscription (which one, and when it renews), so Revise works offline.
• Your sign-in session, so you stay signed in.

Deleting the app, or clearing the site's data in your browser, removes all of it.

Services Sadri relies on

• Google Firebase (Firebase Authentication and Cloud Firestore) signs you in and stores your app data. Firebase Authentication is a global Google service, so sign-in may be processed outside the EU. Google acts as a processor under the Firebase data processing terms.
• everyayah.com hosts the recitation audio. The app downloads each ayah's audio file from it, so it sees your device's IP address, as any website you visit does. It receives nothing else from Sadri.
• Apple App Store and Google Play handle purchases. Payment happens entirely with them; Sadri never sees your card or payment details, only a confirmation of what was bought so it can unlock the feature.
• Expo delivers app updates. On launch the app asks Expo's update service whether a newer version exists, which shares your IP address and the app's version and platform.
• Vercel hosts this website and the web app, and keeps standard server logs, including IP addresses.

How long data is kept, and deleting it

Your account and app data are kept until you delete them. To have your account deleted, email support@sadri.app from the address you sign in with. Deleting your account removes your sign-in account and all of your app data from Firebase; it cannot be undone. Copies on your devices go when you delete the app or clear the browser's site data. You can also write to the same address to ask for a copy of your data or to correct it.

Children

Sadri is not directed at children under 13 and does not knowingly collect their data. If you believe a child under 13 has created an account, write to support@sadri.app and it will be deleted.

Changes to this policy

If this policy changes, the new version is published on this page with a new effective date. A change that collects more data, or uses it in a new way, will be announced in the app before it takes effect.