Privacy policy

Last updated 28 September 2026

OneAayah ("we", "us") provides a Qur'an reading application at my.oneaayah.com. This policy explains what we collect, why, and the choices you have. We keep it short because we collect very little.

You can read without an account. If you never sign up, we hold nothing about you: your preferences and any bookmarks stay in your own browser.

Reading without an account

• Kept in your browser, not by us — your reading preferences, your place in the mushaf and any bookmarks you make are stored locally on your device. They are not sent to us, and clearing your browser data removes them. If you later create an account, bookmarks you saved as a guest are moved onto it so you do not lose them.
• A count of readers, not of people — so we can see how many people are reading or listening at any moment, your browser makes up a random identifier and sends it with its requests. It is not linked to you, your email or an account, we hold it only in memory for about two minutes, and it is never written to our database.
• Ordinary server logs — requests to our servers are logged with an IP address and browser type to keep the service running and to stop abuse, as on any website.

What we collect when you have an account

• Account details — your email address, display name and a securely hashed password. Your email is used to verify your account (one-time code) and to send password-reset links and security notices.
• Reading data — bookmarks, private notes, your last reading position and preferences (theme, translation on/off). These exist only so they can follow you between devices.
• Assistant questions — questions you ask the assistant and its answers are stored against your account so you can revisit them and so we can apply fair-use limits. Questions are processed by our AI provider (Anthropic) to generate answers; they are not used to train models.
• Security logs — sign-in events with IP address and browser type, kept to protect accounts from abuse.

What we do not do

• No advertising, no advertising identifiers, no sale or sharing of personal data.
• No third-party analytics or tracking scripts on this website or in the app.
• No profiling of your religious practice — your reading data is private to your account.

Cookies

The app sets one strictly necessary cookie to keep you signed in — guests are never given a cookie. Preferences and guest bookmarks use your browser's own storage instead, which stays on your device. This marketing website sets no cookies at all.

Where data is stored

Data is stored on servers we control, encrypted in transit (HTTPS) and with secrets encrypted at rest. Access is restricted to the people who run the service.

Your rights

You can update your name, change your password, sign out of all devices and delete bookmarks at any time from your account page. To request a copy of your data or deletion of your account, email privacy@oneaayah.com from the address on your account.

Children

OneAayah is not directed at children under 13, and we do not knowingly collect data from them.

Changes

If this policy changes materially we will note the new date here and, where appropriate, notify account holders by email.

Contact

privacy@oneaayah.com · Security reports: security@oneaayah.com