Mushaf — Privacy Policy

Mushaf is built and operated by HUApp Studio. This page describes what data the app collects and how we use it.

What stays on your device

The complete Quran text, the Yazır and Pickthall translations, the Latin transliteration, your bookmarks, your notes, and your last-read position all live on your device. We do not have access to them.

What we collect

To enforce a one-time per-account trial and to remember whether you have purchased the lifetime upgrade, our backend stores:

• The provider (Google or Apple) and the provider's stable opaque user ID for your account (the sub claim of your sign-in token).
• Your email address, only if your provider releases it to us. Apple "Hide my email" relays are stored as-is; we do not de-anonymize them.
• Your trial start / end timestamps and your premium-purchase timestamp.

What we do NOT collect

• No reading analytics, no scroll tracking, no crash telemetry.
• No advertising identifiers, no third-party trackers, no SDKs that report to anyone other than Google Sign-In, Apple Sign-In, RevenueCat, and our own backend.
• No payment details — purchases are processed by Google Play / App Store directly.

Who has access

The data above is stored in our managed Postgres database hosted on Railway. RevenueCat receives the same provider sub as a "user identifier" so that purchases can be reconciled to your account; RevenueCat's privacy policy applies to that copy.

Deleting your data

Email halil.ugur.acikgoz@gmail.com with the email address you used to sign in and we will permanently delete the corresponding user record within 30 days. Your local bookmarks and notes are not affected by deletion of the server-side record.

KVKK / GDPR rights

Users in Turkey (KVKK) and the EU/UK (GDPR) may request access to, correction of, or deletion of personal data via the email above.

Changes

We may update this policy. The latest version is always served at this URL.