Privacy Policy

Introduction

QuranPortal ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Quran learning platform at quranportal.io (the "Service").

Information We Collect

Personal Information

When you create an account, we collect:

• Name and email address
• Account information and preferences
• Authentication information

Educational Data

For students and educational purposes, we collect:

• Student profiles and progress information
• Assignment data and completion records
• Reading progress and memorization tracking
• Learning assessments and feedback
• Parent-student relationships and permissions
• Teacher assignments and grading information

Usage Information

We automatically collect:

• Device and browser information
• IP address and approximate location data
• Usage patterns and interactions with the Service, including visits to public pages before signing in
• Session data, preferences, referring pages, URLs, UTM parameters, and page paths
• Product analytics data collected via PostHog, including page views, feature usage, user actions, web vitals, frontend errors, heatmaps, and session replay data where enabled
• Event tracking data including model creation events, timestamps, and user roles

How We Use Your Information

We use your information to:

• Provide and maintain the QuranPortal service
• Create and manage user accounts and profiles
• Track learning progress and provide educational content
• Enable communication between teachers, students, and parents
• Send important notices and updates about your account
• Understand how visitors use public pages, signup flows, and unauthenticated parts of the Service
• Improve our Service and develop new features
• Monitor for technical issues and security threats
• Comply with legal obligations

Information Sharing and Disclosure

Within the Educational Environment

We share information as necessary for educational purposes:

• Teachers can access their students' progress and assignment data
• Parents can view their children's learning progress and assignments
• Account administrators can manage users within their organization

Service Providers

We share information with trusted service providers:

• Postmark: For email delivery
• Sentry: For error monitoring
• PostHog: For product analytics, web analytics, usage insights, frontend error diagnostics, heatmaps, and session replay. For visitors and signed-out users, we share anonymous identifiers, session identifiers, device and browser information, approximate location, page URLs and paths, referrers, UTM parameters, and interaction data. For signed-in users, we also share user identifiers (user ID, name, email), account information (account ID, name, type, user roles), and event data (page views, feature usage, timestamps). PostHog tracks production traffic, including unauthenticated visits, and tracking is disabled during admin impersonation.
• Cloud hosting providers: For infrastructure services

Legal Requirements

We may disclose information when required by law or to protect our rights, users, or the public.

Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure authentication and authorization systems
• Regular security monitoring and updates
• Limited access to personal information on a need-to-know basis

Children's Privacy

QuranPortal is designed for educational use by students of all ages. For users under 13, we require parental consent and limit data collection to what is necessary for educational purposes. Parents have the right to review, modify, or delete their child's information.

Your Rights and Choices

You have the right to:

• Access, update, or correct your personal information
• Delete your account and associated data
• Export your data in a portable format
• Opt out of non-essential communications
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at support@quranportal.io.

Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. Educational records may be retained longer to maintain academic continuity. You may request deletion of your data at any time.

Product analytics data may be retained according to our PostHog project settings. Session replay recordings are retained for a shorter period and are currently configured to expire after 30 days.

International Data Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

Contact Information