Privacy Policy
Updated: 24 October 2026
This policy explains how information is handled when you read the Quran, use an account, save bookmarks or access learning recordings. AutoQuran is an independent application using Quran Foundation Content APIs; it is not an official Quran.com or Quran Foundation application.
Information and its purpose
We store your name, username, email address and a password hash to operate accounts and sign-in. Verse and page bookmarks are stored for registered accounts. Admins may upload titles, descriptions and audio or video files for learning. Hosting and Cloudflare technical logs may contain IP addresses, browser details, timestamps and request paths for security and troubleshooting.
When you request a password reset, we use the registered email address to send a temporary link through SMTP. Reset tokens are stored as hashes, expire and can be used only once. Your new password is never sent by email.
Cookies and browser storage
Session cookies support sign-in, form protection and language selection. Your reciter, translation and last reading positions are stored in localStorage in your browser. You can clear them through browser settings; doing so may sign you out or remove reading preferences on that device.
Religious information
Bookmarks and reading activity may reveal religious interests or practices and deserve privacy protection. Use saving features by choice. Account and reading information is not used to build advertising profiles, sold to advertisers or used to train AI models without your specific permission.
Third-party services
Quran Foundation provides Arabic text, mushaf data and fonts. Content API requests are made through our server using verse or page references without sending your AutoQuran account identity. Your browser may also contact the Quran Foundation font CDN and EveryAyah audio servers; those providers receive connection details such as IP addresses. Existing translations remain in the original database and are subject to their respective sources. Available reciter portraits are displayed from the Quran.com CDN; your browser sends connection details to the image provider.
Cloudflare supports site delivery and protection. The hosting provider processes data to operate the application; the application server is hosted in Singapore. The SMTP provider configured by the administrator processes recipient addresses and security email content. These services may process information outside your country of residence.
Controls and retention
Account and bookmark data is kept to provide account features until deleted or no longer needed for that purpose. You can remove bookmarks in the application and clear device preferences in your browser. Admins may archive recordings; archiving does not necessarily erase the original file immediately. Hosting backups and logs have separate retention cycles.
Contact the administrator to request a copy, correction or deletion of account data. We must verify account ownership before processing a request. Certain records may need to be retained for security, disputes or legal requirements. AutoQuran accounts are separate from Quran.com accounts; this application does not link Quran.com user accounts through user OAuth.
Security and shared devices
Passwords are stored as hashes. Access controls, form protection and temporary reset links help protect accounts. Use HTTPS and a strong password, and sign out on shared devices. No system can guarantee absolute security; report unfamiliar account access to the administrator. Children should use account features with a guardian's guidance and should not upload other people's personal information.
Policy changes
The current policy is published here with its update date. Review it when important changes are made to the application's features or data sources.
Contact the administrator
Third-party references
Quran.com Privacy · Quran Foundation Developer Terms · Cloudflare Privacy · EveryAyah · Tanzil