إتقان القرآن الكريم is an international, non-commercial educational platform for adults (18+) to learn correct Quran reading, letter articulation (makhārij), and expressive recitation — combining traditional maqraʾah-style oral transmission with community e-learning. The platform currently includes about 1,000 instructional audio/visual segments.
Learning follows five sequential stages: Letter Engineering (هندسة الحروف), Idghām Art (فن الإدغام), Secrets of Ikhfāʾ (أسرار الإخفاء), Recitation Styles (أساليب التلاوة), Teaching Khatmah (Qālūn). Each segment typically shows a Qālūn mushaf image with instructor guidance and a model recording; the microphone unlocks only after a required number of listens; students may re-record before submit; teachers rate attempts (e.g. accepted / needs improvement) and reply by voice — full listening to the reply may be required before retry. Features include peer learning (hearing other students’ attempts and teacher replies), dynamic difficulty from real acceptance rates, and leaderboards by stage and lesson. Login uses a personal code plus a Telegram OTP; software deploys may trigger a Force-Logout to clear caches without deleting your stored progress. Advanced students may be appointed as teachers by the operator when needed — not an automatic in-app promotion alone.
This policy explains how we process personal data (transparency, minimisation, security, and your rights). The Arabic version سياسة الخصوصية is equivalent in content.
Mahdi Fakhfakh
Mennwarthstr. 7, 86154 Augsburg, Germany (operator’s address — service is international)
Email: mahdi.fakhfakh007@icloud.com
The app is provided without commercial activity and without profit motive. No separate data protection officer is appointed given the scale of processing.
Registration is for adults only (18+). We do not accept minors. Registration is rejected if the birth year indicates age under 18. On login, students confirm their identity including the birth year stored at registration (we do not recalculate age from the current calendar year on each login).
The service is not directed at children under 18 and is not intended to be used by minors (including under COPPA and similar child-privacy laws). If we learn that an underage person registered, we will delete the account.
| Category | Examples | Required? |
|---|---|---|
| Account | User ID (uid), first/last name, birth year, role (student/teacher), PIN (hashed on server; held in memory and sessionStorage for the current browser session only — cleared on logout) | Yes |
| Audio | Microphone recordings (recitation, voice replies) | Core feature |
| Learning data | Memorisation progress, ratings, notifications, view/repeat statistics | Yes |
| Telegram | Telegram ID, username, first name — identity verification, community group membership, account linking | Yes (registration & login) |
| Telegram notifications | Bot messages (@It9anBot) for ratings, reminders, educational updates — mandatory for students; teachers choose per level (Stufe) | Students: yes · Teachers: optional per level |
| FCM push (device) | FCM token on iOS/Android — optional (only if you allow notifications; not for ads) | — |
| Technical | IP address (temporarily for login rate limiting), browser/device type, timestamps | Security & operation |
To use إتقان القرآن الكريم after registering, you must:
This is requested during registration. Only the admin can unlink Telegram. To link your app account to a different Telegram account, email mahdi.fakhfakh007@icloud.com to request an unlink.
We do not collect: location, financial data, phone contacts, camera photos, SMS, or medical data. No behavioural analytics, ads, or marketing tracking.
Name, role, and basic progress are visible to other logged-in users within the closed educational community.
With your consent at registration, your audio is used for:
We do not sell audio or share it with advertisers.
Voice data is not used for biometric identification. Recordings are processed solely for Quran education (teacher feedback, learning comparison). We do not create voiceprints or use voice data to identify you outside the app.
Report and peer block: Authenticated users can report inappropriate recordings to the admin (in-app) and block another user so that user’s recordings are hidden for the reporter only. Admin may delete content or block accounts on abuse. Peer block is not a global ban.
europe-west3): Auth, Firestore, Storage, Functions. Firebase Privacy — Google DPA applies.Details: Processor documentation · Record of processing activities (Art. 30 GDPR).
No reCAPTCHA or on-device tracking. Security checks (e.g. login rate limits) run server-side only.
Fonts (Amiri) are self-hosted — no Google Fonts CDN, no IP transfer for fonts.
Main data on Google servers in Europe (europe-west3). Connections are encrypted (HTTPS/TLS). Processing by Google Firebase / Google Cloud is under Google’s Data Processing Terms and Standard Contractual Clauses (SCC) for any residual international transfers within Google’s infrastructure. We do not sell personal information and do not share it for cross-context behavioral advertising.
Telegram transfer: Using Telegram for required registration/login means data such as Telegram ID and username are processed by Telegram FZ-LLC. Telegram’s infrastructure may be outside the EU/EEA. Legal bases: Art. 6(1)(b) GDPR (contract necessity) and your consent to this transfer at registration. See also Telegram’s privacy policy. No alternative login exists while Telegram remains a service requirement.
legalConsentAt and version stored at registration / re-consent.We do not use advertising or analytics tracking cookies. Essential session data may be held in memory and browser sessionStorage (e.g. session PIN) and is cleared on logout. Native apps may store a local session token for the signed-in user only. No third-party marketing pixels.
In-app: Settings → Delete my account now (PIN confirmation). Your account and all data (profile, recordings, replies, Firebase Auth, Telegram link, reminder log) are erased immediately in a self-service flow. Irreversible. You may also email mahdi.fakhfakh007@icloud.com if the in-app button fails — we then delete within 30 days.
Art. 17 GDPR / community content: Before teacher rating you may delete your own recordings. After teacher reply and rating, recordings become closed-community educational material. Self-delete of that specific audio is restricted (contract / legitimate interest in the shared learning record). Full account deletion still removes your posts, audio files, and identifiers immediately via self-service above — a balanced Art. 17 approach for community UGC.
Where applicable (e.g. GDPR): access, rectification, erasure, restriction, objection, portability.
Complaints: contact us first at mahdi.fakhfakh007@icloud.com. If unresolved, you may lodge a complaint with the data protection authority in your country of residence, where applicable law allows. The operator is based in Germany (EU); the service is international and not limited to Germany.
Sale of personal information / California (CCPA/CPRA): We do not sell or “share” personal information for cross-context behavioral advertising. California residents may contact us via the email above for access, deletion, and non-discrimination rights. Similar US state privacy laws (where applicable) are handled the same way — no sale, same contact channel.
International rights (same tools worldwide): Wherever local law grants you access, correction, deletion, restriction, objection, or portability rights — including EU/EEA GDPR, UK GDPR, Switzerland (nDSG/FADP), Brazil (LGPD), Canada (PIPEDA), Australia (Privacy Act / APPs), India (DPDP), Japan (APPI), South Korea (PIPA), South Africa (POPIA), Türkiye (KVKK), and MENA regimes (e.g. Saudi Arabia / UAE PDPL) — you may exercise them via the email above and in-app Export / Delete my account now. We respond within 30 days where those laws apply. Local supervisory authority complaints remain available in your country of residence.
Age recheck: On each login we recompute age from your stored birth year against the current calendar year. Under-18 accounts are refused login (review/demo PINs exempt). The service is adults-only (18+) worldwide.
sessionStorage (cleared on logout).Microphone is used only with your OS permission to record recitation.
Telegram notifications: All students receive notifications via @It9anBot (ratings, reminders, educational messages). Teachers choose in settings per level (Stufe) whether to receive notifications. FCM device push (iOS/Android app) is optional: the OS may prompt for permission; you can deny it. Not used for ads or cross-app tracking.
iOS/Android (Capacitor) ship the user interface bundled in the app. Account data, audio, and progress are stored on our Firebase backend (EU). This policy applies to web and native apps alike.
We may update this policy. The date above shows the current version. If we make material changes (especially regarding audio sharing or data use), we will ask you to accept the updated policy in the app before you can continue using إتقان القرآن الكريم. Your consent version (legalConsentVersion) is stored with your account.