Privacy policy

Effective 27 September 2026 · applies to the Tilawa app on Android and iOS.

The short version

• There is no account: no email address, phone number or password is ever asked for.
• A circle's khatms and dhikr goals are shared only with the people who joined it with its code.
• Tilawa never uses your location, microphone, camera or contacts.
• The app is free and shows ads from Google AdMob, which uses your device's advertising identifier.
• Anonymous usage statistics show which features help; they never include names, intentions or anything else you type.
• You can leave a circle, or delete all your data, at any time in the app.

What a circle stores

Tilawa keeps each circle in Google Firebase (Google LLC), on Google Cloud servers in the European Union, so that everyone in the circle sees the same thing. It stores:

• a random, anonymous user identifier created by Firebase Authentication for each phone;
• the circle's name, its six-letter code and time zone, who its organizers are, and the name each member chooses to show the circle;
• for each khatm: its intention, its last day, its round, and for each part who is reading it (a member, or a name typed for someone without the app), who took it, whether it is read, and when;
• for each dhikr goal: its title, what is recited, the goal, its last day, and how much each member added in all.

This data is visible only to the members of the circle. When someone leaves, their name is removed from the members and the parts they read stay on the boards. When the last person leaves, or deletes their data, the circle and everything in it is deleted.

Reminders and the widget

The reading reminder is scheduled on your phone, and the home-screen widget reads your part from the app on your phone; no push notification token is collected.

Advertising

Tilawa shows banner and occasional full-screen ads through Google AdMob, limited to ads rated for general audiences. To serve and measure ads, Google collects your device's advertising identifier (Android Advertising ID; on iOS the identifier for vendors — Tilawa does not ask for permission to track you across other companies' apps), your IP address for approximate location, and how you interact with ads. In the European Economic Area, the UK and Switzerland you are asked for consent before personalised ads are shown, and you can change your choice in More → Ad choices. You can also reset or limit your advertising identifier in your phone's settings. Google's use of this data is described at policies.google.com/technologies/partner-sites.

Usage statistics

Tilawa uses Google Analytics for Firebase (Google LLC) to count how the app is used — for example how many circles are started, how many people join, and how many parts are read. These events carry a random app-instance identifier, your device model, operating system and app version, and an approximate location (country or region) derived from your IP address. They never include names, intentions or anything else you type. In the European Economic Area, the UK and Switzerland they are used only as far as you allow in the privacy message. Google keeps this event data for a limited time (at most 14 months).

Crash reports

If the app crashes, Firebase Crashlytics sends a technical report: the error, the device model, the operating system and app versions, and a random installation identifier. Reports are used only to fix bugs.

Children

Tilawa is made for adults who organize and take part in khatms and dhikr. It is not directed to children under 13, and we do not knowingly collect personal data from them.

Quran data

Surah names and where each juz and hizb starts come from Tanzil.net (Creative Commons Attribution 3.0) and are part of the app; no Quran text is downloaded.

Your rights

You can see everything in your circles in the app itself, and delete your data with Delete my data (see how deletion works). For any question or request — including access, correction or deletion under the GDPR, the Turkish KVKK, the CCPA or other privacy laws — write to clgmsedev@gmail.com. The legal bases we rely on are performing the service you ask for (the shared circle), our legitimate interest in fixing crashes, and your consent where the law requires it for advertising and usage statistics.

Changes

If this policy changes, the new version will be posted here with a new effective date.