Back to the app

Privacy Policy

Last updated: June 3, 2026

Quran Meaning Ladder ("the app") is provided by Light and Reason ("we", "us"). This policy explains what information we collect, why, and what choices you have.

Children and parent consent

Children under 13 may use the app only after a parent or legal guardian gives permission by email. If a learner says they are under 13, we ask only for a parent email address. We use that address only to send the permission request and related child-mode notices.

If the parent approves, the learner’s device enters child mode. If the parent does not approve, the request expires after 7 days.

Child mode

In child mode:

  • Anonymous usage analytics are disabled.
  • No persistent analytics identifier is created.
  • Learning progress is stored for the learner’s own use.
  • A parent may optionally sign in with their own Google account to save the child’s progress and continue on other devices. The child uses the parent’s account. We do not collect or store the child’s name, email, or any other profile information.
  • Guest progress stays on the learner’s device unless a parent later asks us for help.

We do not show ads, run behavioral advertising, sell child data, or let children post public profile information in the app.

Parent rights

Parents may ask to review, download, delete, or stop future use of their child’s information through the contact form. Please write "child account" in the message.

Retention

We keep personal data only as long as needed. Automated weekly cleanup removes expired records:

  • Pending parent permission requests — deleted after 7 days.
  • Approved child-mode records — deleted after 12 months of inactivity unless a parent asks sooner.
  • Contact form messages — deleted after 2 years.
  • Anonymous usage events (adults only) — deleted after 1 year.
  • Account reset, verification, and password-reset tokens — deleted after 7 days.
  • Deleted accounts — data removed immediately upon deletion.

Adults and guest use

Adults and learners 13 or older may use the app as guests. In guest mode, progress is stored in the browser’s local storage on that device. If browser data is cleared or the learner switches devices, guest progress may be lost.

Google sign-in

For users who are not in child mode, signing in with Google is optional. It lets the app save and sync progress across devices. We keep only a Google account identifier and learning progress. We do not store your Google name, email address, or password.

Email and password sign-in

You may also create an account with an email address and password. When you do, we store: your email (lowercased), a one-way bcrypt hash of your password (we cannot recover the password itself), and your learning progress. We use the email only to send account messages: verifying the address, password reset links, and replies you ask for. We do not send marketing email, and we do not share your email with third parties other than our hosting and email-delivery providers.

You can delete the account — including the stored email, the password hash, and the progress — at any time from the dashboard, or by writing to us through the contact form.

Analytics

After an adult or 13-or-older learner confirms their age, the app may create a random local analytics identifier to count basic usage events like app opened, lesson started, lesson completed, and test completed. This does not run in child mode, and you can turn it off below.

Loading your choice…

Contact form and email

If you use the contact form, we store your message on our server and send it through our email delivery tools. If you include your name or email, we use it only to understand or reply to your message. Parent permission emails and confirmation emails are sent using Resend when email is configured.

What we do not do

  • We do not sell your information.
  • We do not show ads.
  • We do not run third-party advertising or behavioral trackers.
  • We do not share your information except with service providers needed to operate the app, such as hosting, database, and email providers, or if required by law.

California residents

If you are a California resident, you may have rights under the CCPA/CPRA, including the right to know what personal information we collect, to request deletion, and to opt out of the sale or sharing of personal information.

We collect the following categories of personal information:

  • Identifiers — email address (if you create an account or use the contact form), Google account identifier (if you sign in with Google).
  • Internet or electronic activity — learning progress and lesson completion data.
  • Geolocation data — we do not collect precise location.

We do not sell or share personal information as defined by the CCPA. We do not use personal information for targeted advertising, profiling, or automated decisions that produce legal effects. To exercise your CCPA rights, use the contact form and write "CCPA request" in the message.

Data export

You may request a copy of your learning progress and account data by writing to us through the contact form with "data export" in the message. We will provide your data in a readable format within 30 days. You may also delete your account and all associated data at any time from your dashboard, or by asking us through the contact form to do it for you.

EU and UK users

If you are in the EU or UK, you may have rights under the GDPR to access, rectify, erase, restrict processing, data portability, and to object to processing. Our legal basis for processing personal data is your consent and our legitimate interest in providing the learning service.

Digital consent ages vary by country. Where parent consent is required, child mode requires parent approval before use. You have the right to lodge a complaint with your local data protection supervisory authority. For privacy questions, contact us through the contact form.

Contact

For privacy questions, deletion requests, or child account requests, please use our contact form.