🌙 Noor — Privacy Policy

Last updated: 27 September 2026

Noor is an Islamic companion app for iPhone and Android (Quran, prayer times, Qibla, Hadith, Islamic calendar, nearby mosques, radio, an AI question feature, and a halal ingredient scanner). We built Noor to keep your data on your device. This policy explains the cases where data leaves it — including the ads that fund the free tier.

What stays on your device

What Noor collects, at a glance

This list covers what Noor collects on both iPhone and Android:

Accounts & backup

Having an account is optional — in guest mode none of your worship data is backed up anywhere. (Guest mode is not offline mode: ads, the halal scanner, Ask Noor, audio and the mosque search still reach the internet when you use them, as described throughout this policy.) An account exists so your data survives changing or reinstalling your phone:

On a new or reinstalled device, signing in restores your backed-up data automatically, and it merges — anything you have already recorded on the new device is kept rather than overwritten.

What we collect for an account: a user id; your email address (Sign in with Apple lets you hide it behind Apple's private relay); your name, if your sign-in shares one or you type one into your profile, and any other profile field you choose to fill in (a streak message, a Quran goal); a profile photo, only if you add one; and the backed-up data listed above. Your profile photo is stored at a web address that anyone who has that exact address could open, as profile pictures usually are, so only use a photo you are happy to be seen; adding a new one replaces the old one, and deleting your account deletes it. Your coordinates are not uploaded to your account, and your account data is not linked to advertising or used to target ads. Noor embeds no third-party analytics or attribution SDKs — no analytics company receives your usage from Noor. The only third-party SDKs in the app are the ad network (free tier only), the subscription-state provider, crash reporting, and, on Android, the map on the Nearby Mosques screen, each described in this policy. To know which parts of the app are worth improving, Noor counts in aggregate how many times each screen and each feature is opened, and how long the app is on screen in total each day: plain daily numbers, with no user id, no account link and no device id, exactly like the scan counter described below. It does not record what you read or what you pray — no surah, no dhikr, no station, no note, and nothing that could be traced back to you. It also counts how visits end — which screen the visit ended on, roughly how far into setting Noor up this phone had got, and whether Noor was opened again within a week — as plain totals, so we can see what we are getting wrong before people give up on the app; and it labels those particular totals — together with the count of first launches, the count of times the subscription screen was shown, the count of barcode scans, and the count of barcode scans that found nothing — with the country your phone is set to (its region setting, not your location). It does count, in the same aggregate way, which named part of a screen was tapped (for example “the quick-actions grid on the Home screen”) and which screen was opened from which — from a fixed list of region names built into the app, never a position on your screen and never what the region contained. See Anti-abuse & aggregate counts below, and Diagnostics for crash reporting. The free tier does show ads, which are described in full under Advertising.

How it's protected: account data is stored with our database provider (Supabase), isolated per account by row-level security so only you can read it (the one exception is the profile photo described above), and encrypted in transit and at rest.

Your control & retention: signing out stops this device from backing up any further; your existing backup stays until you remove it. You can permanently delete your account and all its server data from inside the app (Account → Delete account & data). We keep backed-up data only until you delete it.

Prayer logs reflect religious practice; we treat them as sensitive data. For a signed-in account we back them up automatically, solely to provide backup and restore, on the basis of the consent you give by signing in after the notice described above. Delete your account at any time to erase them from our servers.

Advertising (free tier)

The free tier of Noor is funded by ads, served by Google AdMob. They appear as banners on some screens, as an occasional full-screen ad at a natural break (for example when you come back to Noor, or between one radio selection and the next), and as an optional rewarded video you may choose to watch to unlock extra halal scans — a rewarded ad is shown only when you tap to watch one.

Google's own handling of ad data is governed by its policies — see Google Privacy & Terms and How Google uses information from apps that use its services.

Noor Plus & purchases

Noor Plus subscriptions are processed by Apple through the App Store on iPhone, and by Google through Google Play billing on Android. Our subscription state is managed with RevenueCat, which receives the store's record of the purchase (which subscription, and when) so it can tell Noor whether it is active. Your payment details are handled by Apple or Google and are not shown to or stored by us; we are told only whether Noor Plus is active. If you are not signed in, your purchase is attached only to an anonymous purchase id. If you are signed in, Noor links your subscription record to your Noor account id, so Noor Plus follows you to every phone where you sign in; the account id is the only thing about you that RevenueCat receives from Noor — not your email, your name or your worship data. Signing out unlinks this phone. If you delete your Noor account, the account is gone, but the store's and RevenueCat's record of the purchase remains, as purchase records do, carrying only that now-unused id.

AI features: the Photo halal scan & Ask Noor

If you use the Photo mode of the halal scanner, the photo you take of an ingredient label is sent to our server and then to our AI provider (OpenRouter, which routes to Google Gemini) to read the ingredients and return a screening result. The image is processed to generate the result and is not stored by us; the resulting product verdict may be cached against the product's barcode so the next person does not need to scan it again. If you are signed in, the request carries your account token so the scan counts against your allowance, and our server records one anti-abuse row holding that identifier (or, for a guest, your purchase id or IP address) and the fact that an AI scan happened — not the photo and not the product. Do not photograph anything private.

After a Photo scan of a barcode we could not answer, Noor offers to add that reading to the shared product database. If you do, what is stored is: the barcode, the ingredient list as it was read from the label, your phone's own region setting as one of twelve country buckets (not your location — no GPS is read and nothing is worked out from your internet address), the first three digits of the barcode, which name the numbering organisation that issued it and say nothing about the product, and the verdict our rules engine derived from that text, with its reasons. The photograph itself is not stored — there is no image field on that path and no column that could hold one. Nothing identifies you: no account, no email, no device id, no IP address, no location and no scan history is stored with it, and the row is judged only on the label it carries. A Noor administrator reviews the reading, and if they approve it, it becomes the answer other people see when they scan that barcode. Because nothing links the row to you, it stays in the shared database indefinitely and cannot afterwards be found or withdrawn on your behalf — so please only send readings of ordinary retail packaging.

If you use Ask Noor (the AI question feature), the question you type is sent to our server together with the source passages Noor retrieved on your device, and on to the same AI provider so the answer can be written and checked against those sources. We send an app-generated random identifier with the request to enforce the free monthly limit. Your question text and the answer are not written to our logs — we keep only counters (how many requests, tokens, and refusals) with no user content and no identifier attached.

If you report that a halal result looks wrong, or that a scanned product is not yours, the barcode, the verdict you were shown and the reason you picked are sent to a review queue that a Noor administrator reads. No account, device id or location is sent with the report.

The Barcode and Text modes of the scanner do not send your photos to us.

Anti-abuse & aggregate counts

To keep the free halal scanner and Ask Noor running for everyone, our server keeps a few minimal, non-identifying records — none of which is analytics, advertising, or profiling:

Diagnostics (crashes & performance)

So that crashes can be fixed, Noor can report crash and performance diagnostics to Sentry. These reports contain the technical details of the failure — the error, a stack trace, the app version, and the device model and OS version. They are configured to carry no personally identifying request data, no screenshots, and no view hierarchy: the IP address is blanked, any signed-in user record is removed, and a scrubber strips fields naming your location, the product you scanned, or what you were reading before the report is sent. We do not attach your Quran reading, prayer log, questions or scans to a report; because a crash report captures the technical state at the moment of failure, we cannot promise that no fragment of what was on screen is ever included, which is why the scrubbing above runs on every report.

Promotional cards (our own, not ads)

Separately from the AdMob ads described above, Noor may occasionally show a promotional card inside the app (for example, highlighting a Noor feature or a seasonal reminder). These cards are authored by Noor's owner and delivered from our own server. They involve no ad network, no auction, no tracking, and no profiling. Showing a card requires no personal data from you and does not report back who saw it.

Third-party content you connect to directly

Noor streams and fetches Islamic content directly from third-party providers, so your device's IP address is visible to them when you use those features:

We do not control these providers' own data practices.

Who controls your data & your legal rights (UAE PDPL & GDPR)

Data controller: Noor is operated by the Noor team. For any privacy request or question, contact noorislamicapplication@gmail.com.

Legal bases we rely on: your consent for the optional account and for backing your data up to it — consent you give by signing in after the clear one-time notice that signing in backs up your prayer log, and which you can withdraw by signing out or deleting your account; our legitimate interest in preventing abuse of the free AI services (the guest rate limit and aggregate count above) and in reporting crashes so the app can be fixed; performing the service you request when you run a photo scan or ask a question; and, for advertising, your consent for personalized ads and any tracking identifier (on iPhone, granted or refused through Apple's App Tracking Transparency prompt and Google's consent form, and withdrawable at any time in iOS Settings; on Android, through Google's consent form where the law requires one, and withdrawable at any time in your phone's ads settings), with non-personalized ads shown on the basis of our legitimate interest in funding the free tier. You can also remove ads entirely with Noor Plus.

Sensitive data: your prayer logs and your other worship progress (Quran, adhkar, khatmah and Hifz) reflect religious practice. We treat them as sensitive and process them only for a signed-in account, solely to back up and restore them, on the basis of the consent you give by signing in after a clear one-time notice that this backup happens. As a guest they are not backed up and stay on your device. You can withdraw at any time by signing out (which stops further backup) or deleting your account (which erases the backup from our servers).

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, for users in the EU/EEA and UK, the GDPR, you have the right to:

To exercise any of these rights, email noorislamicapplication@gmail.com. Because guest use involves no account, most rights apply only once you have signed in and there is data linked to you.

Hifz recitation recordings (optional)

If you choose "Yes, help improve" in Hifz, each recitation you record there is uploaded to Noor's servers and linked to your Noor account. We use your recordings for two things: to check your recitation word by word and send you the result, and to train and improve Noor's recitation model. They are kept in private, encrypted storage that only Noor's systems can reach. Service providers that host or process them for us may do so only on our instructions. Your recordings are never sold, never used for advertising, and never made public. You can stop at any time in Settings → Hifz. When you do, we delete every recording you shared, and they are not used in any training after that. Deleting your account deletes them too. Stopping cannot undo improvements already made to a model trained before you stopped. If you choose "Not now", or do not sign in, your recordings stay on your device and are never uploaded. Noor does not knowingly collect recordings from children under 13 without a parent's permission. If you believe we have, contact us and we will delete them.

تسجيلات التلاوة في قسم الحفظ (اختياري). إذا اخترتَ «نعم، أريد المساعدة» في قسم الحفظ، تُرفَع كل تلاوة تسجّلها هناك إلى خوادم نور وترتبط بحسابك في نور. نستخدم تسجيلاتك لأمرين: مراجعة تلاوتك كلمةً كلمة وإرسال النتيجة إليك، وتدريب نموذج التلاوة في نور وتحسينه. تُحفَظ في مخزن خاص ومشفّر لا تصل إليه إلا أنظمة نور، ولا يعالجها مزوّدو الخدمة الذين يستضيفونها أو يعالجونها لصالحنا إلا بتعليماتنا. لا تُباع تسجيلاتك أبدًا، ولا تُستخدم للإعلانات، ولا تُنشَر. يمكنك الإيقاف في أي وقت من الإعدادات ← الحفظ؛ وعندها نحذف كل تسجيل شاركته، ولا يُستخدم في أي تدريب بعد ذلك، كما يحذفها حذفُ حسابك. لا يُلغي الإيقافُ تحسيناتٍ طرأت على نموذجٍ دُرِّب قبل إيقافك. إذا اخترتَ «ليس الآن» أو لم تسجّل الدخول، تبقى تسجيلاتك على جهازك ولا تُرفَع أبدًا. لا يجمع نور عن علمٍ تسجيلاتِ أطفالٍ دون ١٣ عامًا من غير إذن أحد الوالدين؛ وإن اعتقدتَ أن ذلك حدث، فتواصل معنا وسنحذفها.

Children

Noor does not knowingly collect personal information from children. No account or personal data is required to use it.

Changes

We may update this policy; material changes will be reflected on this page with a new date.

Contact

Questions? Email noorislamicapplication@gmail.com.

Noor · The app · FAQ · Terms · Support