سياسة الخصوصية لتطبيق ختمة

Who we are

Khatma is an app to read, listen to and recite the Holy Quran, with prayer times, azkar and khatma plans. It is developed and operated by Project Egy. Contact: info@project-eg.com.

This policy explains what data the app handles, why, who it is shared with, and how you can control or delete it. Most features work without an account. Last updated: 5 October 2026.

In short

• No ads, no selling of data, no advertising ID, no advertising trackers or third-party analytics SDKs.
• An account is optional and you can delete it in the app at any time.
• Recordings sent for recitation correction are not stored: they are analysed and deleted immediately.
• All traffic between the app and our servers is encrypted (HTTPS).

Data we handle and why

1) Account (optional)

Display name, email and password (stored only as a one-way hash). With Sign in with Google we receive your name and email from Google. You may add a profile picture. We use these to sign you in and to save and sync your progress.

2) Installation ID and app information

The app creates a random ID per installation, not tied to your identity, and sends it with the app version and platform when it loads its configuration. We use it to run the app and to know which versions are in use; it is linked to your account only when you are signed in.

3) Location

• Prayer times: your coordinates are sent to our server to calculate prayer times and are not stored.
• Qibla: calculated on your device.
• Home-screen weather: approximate coordinates (to about 11 km) are sent to Open-Meteo.

Location is used only while the app is open. You can decline the permission and pick your city manually.

4) Microphone and audio

• Recitation correction (optional, with your consent): the recording of the ayah you recite is sent to our correction server, analysed in memory and deleted immediately. We keep audio-free statistics (ayah, duration, result) linked to a hashed installation ID for 90 days to improve accuracy, and your "I said it right" feedback.
• Voice search and "Rattil" mode: use your device's speech recognition service (usually Google's), which is governed by that provider's privacy policy.

5) Your progress and activity (signed-in users)

Memorisation and revision plans, wird, habits and azkar logs, recitation session results (numbers only, no audio), khatma plans and competition activity. In group khatmas: the khatma title, dedication and the name other participants see. Used to save, show and sync your progress.

6) Problem reports (optional)

The report text, the screen you were on, a screenshot of the app (you can remove it before sending), the error log if any, device model, OS and app version, and the notification token so we can reply. Crash logs are only sent with your consent.

7) Notifications

We use Google's Firebase Cloud Messaging, which creates a token for your device. We register that token with the random installation ID (also without an account) to send notifications from the Khatma team, and the app tells us whether such a notification was delivered or opened. You can turn team notifications off in Settings: Notifications → "Notifications from the Khatma team".

8) Search

Hadith and dua search text is sent to our server to return results. Quran search runs on your device.

9) Daily usage record

For each device, under a random ID not tied to your identity, we record the days the app was opened, the minutes it was on screen and how many times each section was opened, with a few numbers of the same kind: minutes of recitation played per reciter, whether the adhan alert is on, and the number of recitation (tasmee) sessions. These are numbers only, with no content (we do not know what you read or search for) and no location. We use them for usage statistics and to send Khatma team notifications only to those who need them. You can turn this record off in Settings ("Usage statistics"), turn team notifications off in Settings too, and the daily details are deleted after 6 months.

Data kept only on your device

Settings, bookmarks, notes, last reading position, tasbih counter, and downloaded recitations and Mushaf editions. They are removed when you uninstall the app or clear its data.

The same goes for the daily reminders: their times and content are worked out and scheduled on your device, and our server does not know when they reached you or what you read in them.

Sharing

We do not sell your data or share it for advertising. We rely only on service providers to run the app:

• Google: notifications (Firebase Cloud Messaging), Sign in with Google, and on-device speech recognition.
• Open-Meteo: weather, with approximate coordinates.
• Hosting providers running our servers.
• Content sources: recitations, images and content are fetched from sites such as everyayah.com and audio.qurancdn.com, which receive only your IP address, as with any web request.

We may disclose data when required by law.

Security, retention and deletion

• Encrypted connections (HTTPS), one-way hashed passwords and restricted access to our servers.
• We keep account data while the account exists, and delete the daily usage details after 6 months.
• Deleting your account: in the app, Profile → Delete account, or email info@project-eg.com from the account's address. See the account deletion page.
• On deletion we erase sign-in data, the profile picture, progress, activity, preferences and notification data, and the account record becomes anonymous, with no name or email. Competition results, security logs and reports you sent remain, linked to the anonymous record.

Children

The app is not directed to children under 13 and we do not knowingly collect their personal data. If you are a parent and believe your child created an account, contact us and we will delete it.

Your rights and changes

You can ask for a copy of your data, its correction or its deletion by emailing us. If we change this policy we will post the new version here with its date, and tell you in the app if the change is significant.

Contact: info@project-eg.com