Privacy Policy

01 Who We Are

Tibyaan is operated by Tibyaan LLC, a Wyoming limited liability company. Our apps include Tibyaan Quran, Tibyaan Salah, and Tibyaan Masjid.

If you have any questions about this policy, you can contact us at privacy@tibyaan.ai.

02 Information We Collect

We collect only what is necessary to provide our services. Depending on which app you use, this may include:

• Location data — used only to calculate accurate prayer times and Qibla direction. This is processed on-device and never stored on our servers unless you explicitly save a location.
• Device information — basic device type, operating system, and app version for crash reporting and compatibility.
• Usage analytics — anonymized, aggregated data about which features are used. No personally identifiable information is included.
• Account information — if you create an account, we collect your email address and a display name. Passwords are hashed and never stored in plain text.
• Reading progress and bookmarks — stored locally on your device by default. If you enable sync, this data is stored securely on our servers tied to your account.

03 Information We Do Not Collect

We do not collect:

• Your name, phone number, or physical address (unless you provide them voluntarily for support)
• Payment information — all in-app purchases are processed directly by Apple or Google
• Audio recordings of your recitation beyond what is needed for real-time AI feedback, which is processed and immediately discarded
• Contacts, photos, or any data unrelated to the app's function

04 How We Use Your Information

We use the information we collect for the following purposes:

• To provide accurate prayer times based on your location
• To sync your reading progress and bookmarks across devices (if enabled)
• To improve app stability and performance through anonymized crash reports
• To respond to support requests you send us
• To send important service notifications (not marketing emails)

05 AI Features & Data

Tibyaan uses artificial intelligence for features such as tajweed feedback, word-by-word analysis, and recitation assistance. Here is how your data is handled in these features:

• Tajweed and translation features operate using pre-loaded data and do not require sending your data to external servers
• Recitation analysis processes your audio locally on-device where possible. When server-side processing is required, audio is transmitted securely, processed, and immediately deleted — it is never stored or used for training
• AI-generated explanations and queries you submit are processed by our AI provider under strict data processing agreements that prohibit training on your data

06 Data Sharing

We share your data only in the following limited circumstances:

• Service providers — we use trusted third-party services for hosting, analytics, and crash reporting. These providers are contractually bound to handle data securely and only as directed by us.
• App stores — Apple and Google process payments and may collect their own data per their privacy policies.
• Legal requirements — we may disclose information if required by law, court order, or to protect the rights and safety of our users.

We do not share data with advertisers, data brokers, or any party for commercial purposes.

07 Your Data Lives in Your Storage — Not Ours

When you enable sync, Tibyaan writes your data directly to whichever personal cloud storage you choose:

• iCloud — via Apple's CloudKit, governed by Apple's Privacy Policy
• Google Drive — stored in your personal Google Drive, governed by Google's Privacy Policy
• Box — stored in your personal or organizational Box account, governed by Box's Privacy Policy

Tibyaan acts only as a bridge to write and read from your chosen storage. We never have access to your storage credentials, and your data never passes through or rests on Tibyaan servers. You own your data completely — delete your storage files at any time to remove it entirely.

08 Data Retention

Because your personal data is stored in your own cloud storage, you are in full control of retention. For the limited data Tibyaan does hold:

• Account data (email, display name) is retained until you delete your account
• Anonymized analytics are retained for up to 24 months
• Support correspondence is retained for 12 months after resolution
• Upon account deletion, your account data is permanently removed within 30 days

09 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — request that we correct inaccurate data
• Deletion — request that we delete your data
• Portability — request your data in a machine-readable format
• Opt-out — opt out of any optional data collection at any time through the app settings

To exercise any of these rights, contact us at privacy@tibyaan.ai.

10 Global Privacy Compliance

Tibyaan is committed to compliance with privacy laws across all jurisdictions where our apps are available. We adhere to the following frameworks:

GDPR — European Union & United Kingdom

• We process personal data only on lawful bases: consent, legitimate interest, or contractual necessity
• EU/UK users have the right to access, rectify, erase, restrict, and port their data
• You have the right to object to processing and to lodge a complaint with your local supervisory authority
• We do not transfer personal data outside the EEA without appropriate safeguards (Standard Contractual Clauses or equivalent)
• Our Data Protection contact is privacy@tibyaan.ai

CCPA / CPRA — California, USA

• California residents have the right to know what personal information is collected, used, shared, or sold
• We do not sell personal information — California residents can confirm this at any time by contacting us
• California residents have the right to delete their personal information and to non-discrimination for exercising their rights

PIPEDA — Canada

• We collect, use, and disclose personal information only with consent and for purposes a reasonable person would consider appropriate
• Canadian users may access and correct their personal information by contacting us

PDPA — Various Countries

• We respect Personal Data Protection Acts applicable in countries including Thailand, Singapore, Malaysia, and others
• Users in these jurisdictions have equivalent rights to access, correct, and withdraw consent for data processing

11 Children's Privacy & All-Ages Design

We have designed Tibyaan from the ground up to meet the highest standards for children's safety and privacy, in compliance with:

• COPPA (Children's Online Privacy Protection Act, USA) — for users under 13
• GDPR Article 8 (EU) — for users under 16 in the European Union
• Apple App Store Children's Guidelines
• Google Play Families Policy

What makes Tibyaan safe for all ages:

• The app contains exclusively Quranic content — no violent, adult, frightening, or inappropriate material of any kind
• No social features — users cannot communicate with strangers, share public profiles, or interact with other users
• No behavioral advertising — we do not serve ads of any kind to any user, including children
• No interest-based tracking — we do not build profiles on children or any user for commercial purposes
• No third-party advertising SDKs or analytics SDKs that target children
• In-app purchases, if any, require parental authorization through the device's built-in controls (Apple Screen Time / Google Family Link)
• All AI features (tajweed feedback, word analysis) operate locally on-device where possible and do not expose children's data externally
• No account is required to use the core features — children can use Tibyaan without providing any personal information

For parents and guardians:

• Tibyaan does not require children to create an account or provide personal information to read the Quran
• If a child creates an optional account, we collect only an email address and display name — with parental consent required for users under 13 in the USA and under 16 in the EU
• Parents may request deletion of any data associated with their child's account by contacting privacy@tibyaan.ai
• All data is stored in the child's own cloud storage (iCloud, Google Drive, or Box) — Tibyaan never holds children's personal data on its own servers

We are committed to maintaining the 4+ / Everyone rating permanently. Any future features are reviewed against children's safety standards before release.

12 Security

We take the security of your data seriously. We use industry-standard measures including:

• HTTPS/TLS encryption for all data in transit
• Encrypted storage for all data at rest
• Regular security reviews and vulnerability assessments
• Strict access controls — only authorized personnel can access user data

No system is completely secure. If you believe your data has been compromised, please contact us immediately at support@tibyaan.ai.

13 Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the app or by email. The date at the top of this page always reflects the most recent update.

Continued use of Tibyaan after changes are posted constitutes your acceptance of the updated policy.

14 Governing Law

This Privacy Policy is governed by the laws of the State of Wyoming, United States. Any disputes arising from this policy shall be resolved in the courts of Wyoming.