Legal information
Privacy policy
Last updated: October 20, 2026
Controller
The controller of your data is the service provider:
For any question about your data or to exercise your rights:
Each processing, one by one
For each processing: the data, the purpose, the legal basis, the retention period and the recipients.
- Account and sign-in — email address, name if you give one, password stored as a hash or Google identifier, sessions, creation date, whether your address is confirmed, and last activity. Purpose: identify you and provide your space. Basis: performance of the contract. Period: as long as the account exists; a session expires after 30 days. Recipients: the hosting provider; Google if you choose to sign in with Google.
- Reading — bookmark, favourites, surahs read and progress. Purpose: find them on all your devices. Basis: performance of the contract. Period: as long as the account exists, or until you remove them. Recipient: the hosting provider.
- Quran assistant — your questions, the answers, the passages cited, the titles and folders of your conversations. Purpose: answer your questions and keep your conversations. Basis: performance of the contract, for the assistant service you choose to use (see “Sensitive data”). Period: until you delete the conversation or the account; the content is then erased at once. Recipients: OpenAI, which produces the answers on our behalf; the hosting provider.
- Questions and costs — number of questions per cycle and per hour, days of use and, for each answer, the model used, the number of tokens and the cost, without the content. Purpose: apply the free plan’s limit and the assistant’s technical protections, and track the cost of the service. Basis: performance of the contract and legitimate interest in managing the service. Period: as long as the account exists. Recipient: the hosting provider.
- Partner codes — the partner your account is linked to, the code used and the date, whether your account was already Premium at that time and, for the promotional credit, the number of questions used and when, and, if your account later takes a paid Premium subscription, the date of that first payment, without its amount, as Stripe’s payment confirmation states it. Purpose: grant the promotional advantage, measure where sign-ups and subscriptions come from, and how effective the partner programme is. Basis: performance of the contract for the advantage, legitimate interest for the measurement. Duration: as long as the account exists. Recipient: the host. The partner receives none of these data; it may only receive overall statistics (number of linked accounts, of subscriptions), without your name, your email address, your questions or your conversations.
- Premium subscription — customer and subscription identifiers at Stripe, status, period and cancellation dates, and the proof of your order: version of the terms accepted, date and time, request for immediate performance, language. Purpose: provide and bill Premium and prove the contract. Basis: performance of the contract, legal accounting and tax obligations, legitimate interest in keeping proof. Period: see “Retention periods”. Recipients: Stripe; our accountant for accounting records.
- Google Play subscription — if you take out Premium in the Android app: the Google Play purchase token and order number, the product and its plan, the status, the dates of the period paid, automatic renewal and the purchase acknowledgement, read from Google Play, and the proof of your order (version of the terms accepted, date and time, request for immediate performance, language). Purpose: verify the purchase, provide Premium on your account and prove the contract. Basis: performance of the contract, legitimate interest in keeping proof. Period: see “Retention periods”. Recipient: Google, which processes the payment.
- Contract and account emails — link to confirm your address, subscription and cancellation confirmations, acknowledgement of a withdrawal and of your help requests, password reset link, notice that your password changed, notice of a team reply, and the record that they were sent (kind, address, subject, outcome; never the content). Purpose: inform you, including on a durable medium. Basis: legal obligation and performance of the contract. Period: the record, as long as the account exists; a reset link, one hour; a confirmation link, 24 hours. Recipient: Resend, the email delivery service.
- Withdrawal — your statement, the name and email address given, the date and time of receipt, the contract date and the sending of the acknowledgement. Purpose: handle your withdrawal and keep proof of it. Basis: legal obligation. Period: see “Retention periods”. Recipients: the hosting provider; Resend for the acknowledgement.
- Account deletion — the request (date, language, confirmation link stored as a fingerprint and valid for one hour), then the receipt of the deletion: its reference, its dates and the subscriptions stopped, with no email address or name. Purpose: check that the request comes from the account holder, stop subscriptions and prove the request was handled. Basis: legal obligation (Articles 12 and 17 GDPR). Period: an unconfirmed request, at most as long as the account exists; the receipt, see “Retention periods”. Recipients: the hosting provider; Resend for the link and the deletion notice; Stripe or Google to stop a subscription.
- Site help — your messages, the answers of the help assistant and of the team, your requests (category, form details, email address, status, history) and a useful summary of your account (plan, subscription status). For a visitor without an account, a random cookie of which only a fingerprint is kept. Purpose: answer your requests. Basis: performance of the contract or pre-contract steps, legitimate interest in answering visitors, legal obligation for requests about your rights. Period: see “Retention periods”. Recipients: OpenAI for the help assistant’s answers; Resend for notifications; the hosting provider.
- Security — IP address and account identifier, used in memory to limit abuse, and the server’s technical logs. Purpose: protect the service and accounts. Basis: legitimate interest. Period: a few minutes to one day for in-memory limits; a limited period set for security for logs. Recipient: the hosting provider.
- Administration — log of administrators’ actions, including each time a conversation or a help request is viewed (who, when, which), without a copy of the content. Purpose: security and accountability of access. Basis: legitimate interest and security obligation. Period: see “Retention periods”.
Sensitive data: your questions about the Quran
Your questions to the Quran assistant, and the conversations kept in your account, can reveal your religious beliefs, which belong to the special categories of data protected by Article 9 of the General Data Protection Regulation.
They are processed only when you choose to ask the assistant a question, solely to answer you and keep your conversations in your account. You decide what you write; reading the Quran, the translations, the explanations and the help can all be used without ever asking the assistant.
You can delete each conversation at any time from the conversations page: its content is erased at once. Deleting your account erases all your conversations.
This data is never used for advertising or profiling, is not sold, and we do not use it to train models. It is sent to OpenAI only to produce the answer, on our instructions; for its business customers, OpenAI undertakes not to use it by default to train its models and may keep it for up to 30 days to detect abuse.
Do not include any information about your beliefs in the site’s help: it is not meant for that.
Artificial intelligence
The answers of the Quran assistant and of the help assistant are produced by an artificial intelligence system and labelled as such (“AI assistant”); the team’s messages are labelled “Tefsir Quran team”; explanations written with the help of AI carry a notice.
No decision producing legal effects concerning you or similarly significantly affecting you is based solely on automated processing: refunds, withdrawals, requests about your data and suspensions are decided by a person.
The team’s access to your data
Only authorised administrators can view a conversation with the assistant or a help request, and only to handle a request from you, examine reported abuse or fix a fault.
Each view is recorded in a log (administrator, date, conversation or request concerned), without a copy of the content.
Service providers and recipients
Your data is shared only with the providers the service needs, which process it on our behalf, on our instructions and under contract:
- the hosting provider of the site and the database, identified in the legal notice;
- Stripe, for the subscription payment; Stripe also acts as a separate controller for its own obligations, in particular fraud prevention;
- OpenAI, to produce the answers of the Quran assistant and of the help assistant;
- Resend, to send emails;
- Google, if you choose to sign in with Google, and Google Play, for the payment of a subscription taken out in the Android app; Google also acts as a separate controller for that payment.
When you listen to a recitation, the audio file is loaded directly from Quran Foundation’s servers: as with any web page, your browser gives them your IP address. No data from your account is sent to them.
Your data is neither sold nor rented. It may be disclosed to the authorities where the law requires.
Transfers outside the European Union
Some providers, in particular OpenAI, Resend, Stripe and Google, may process data in the United States or other countries outside the European Economic Area. These transfers rely on an adequacy decision of the European Commission, in particular the EU–US Data Privacy Framework for certified companies, or on the standard contractual clauses adopted by the Commission.
You can obtain information about these safeguards at the contact address.
Retention periods
- Account, reading, usage counters and subscription: as long as the account exists.
- Link to a partner and promotional credit: as long as the account exists; when it is deleted, the link to your account is removed and only a record with no link to your account (partner, code, dates, including that of any first Premium payment) remains, for statistics.
- Assistant conversations: until you delete them or the account; their content is then erased at once, and only content-free rows used to track costs remain.
- Sign-in session: 30 days. Password reset link: one hour.
- Help conversation of a visitor who made no request: 30 days.
- Help requests, proof of order, withdrawal statements and email records: as long as the account exists.
- Log of administrators’ access: kept to control access, without conversation content.
- When the account is deleted, its data is erased at once, except what the law requires us to keep: the proof of Premium orders (consents, confirmations sent), withdrawal statements, and the Stripe customer ID or Google Play order numbers that tie them to invoices. They are then kept apart, blocked, with restricted access, only to meet a legal obligation or a claim, during limitation periods, as provided for by Article 32 of Spanish Organic Law 3/2018. A receipt of the deletion (reference, dates, subscriptions stopped) is kept, with no email address or name.
- Accounting and tax records of payments: for the periods required by accounting and tax law, kept by Stripe and our accountant.
Your rights and how to exercise them
You can ask for access to your data, its rectification, its erasure, the restriction of its processing and its portability, object to processing based on legitimate interest, and withdraw a consent at any time.
To exercise these rights: through the site’s help, “Personal data” form (signed in, your identity is verified by your sign-in), or by email to the contact address. If there is reasonable doubt about your identity, we may ask for additional information. To delete your account, the page “Delete your Tefsir Quran account” (tefsirquran.com/en/delete-account) is enough, signed in or not: a link sent to the account’s address confirms the request.
The answer is free and given within one month, which may be extended by two months for a complex request; you are then informed.
You can lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, or with the data protection authority of your country of residence.
People linked to a deceased person or their heirs may, under the conditions of Article 3 of Spanish Organic Law 3/2018, ask for access to their data, its rectification or its erasure.
Security and data breaches
Passwords are stored as hashes, exchanges go through an encrypted connection, payments are processed by Stripe, and access to data is limited to the administrators who need it, with sensitive views logged.
In the event of a data breach that is a risk to your rights, we notify the AEPD within 72 hours where the law requires it, and inform you without delay if the risk is high.
Minors
You must be at least 14 years old to create an account, the age from which a person can consent alone to the processing of their data under Spanish law. We do not knowingly create accounts for younger people; if it happens, the account is deleted as soon as we become aware of it.
The Premium subscription is reserved for adults; for a minor, it is taken out by their legal representative or with their authorisation.
Changes
This policy may change; the date of the last update is shown at the top of this page. A significant change is pointed out to you, and a new consent is asked for where needed.