Tabsira exists to help you understand the Quran. That work needs very little of your data, and this policy explains — in plain language — the little we collect, why, how long we keep it, and the choices you have.
Tabsira ("we", "us", "our") is operated by BCT Consultants Ltd. We are the data controller for personal data processed through the Tabsira mobile application and this website (together, the "Service"). Questions about this policy go to support@tabsira.app — a real person answers.
This policy covers people who use the Tabsira app — with an account or without one. Tabsira works fully without an account: your reading progress then lives only on your device and never reaches our servers. An account is optional and exists solely to keep your progress across devices.
We collect as little as possible. The complete list:
| Category | Examples | Source |
|---|---|---|
| Account basics | Name, email address, password hash (email sign-up), or the identity confirmation from Apple / Google when you use their sign-in. | Sign-up. |
| Reading progress | Hasanat earned, verses understood, daily streak, reading sessions (surah, verses read, date), chosen scholar and daily pace. | Your reading activity in the app. |
| Category | Examples | Source |
|---|---|---|
| Technical basics | Standard web-server request logs (IP address, timestamp, endpoint) when the app talks to our servers, kept briefly for security and debugging. | Our servers. |
What we never collect: your location, your contacts, advertising identifiers, behavioural analytics profiles, or anything about what the Quran means to you personally. What you read and reflect on is between you and Allah.
We do not sell personal data. We do not use it for advertising. We do not train AI models on it.
| Purpose | Legal basis |
|---|---|
| Providing accounts and progress sync | Performance of a contract (Art. 6(1)(b)) |
| Security, abuse prevention, server logs | Legitimate interests (Art. 6(1)(f)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
Quran text, translations and tafsir come from public content services (AlQuran.cloud and the jsDelivr CDN). When the app fetches a surah, those services see a standard web request from your device (IP address, requested chapter) — the same as opening any website. We send them nothing about you, and your reading history is not shared with them. Fetched content is cached on your device so repeat reading works offline.
Depending on where you live (GDPR, UK GDPR, CCPA/CPRA and similar laws), you can ask us to:
Email support@tabsira.app; we respond within 30 days. We never discriminate against you for exercising a right.
Tabsira's content is suitable for all ages (rated 4+), but accounts are not intended for children under 13 (or the equivalent minimum age in your jurisdiction) without a parent or guardian's consent. If you believe a child has created an account without consent, contact us and we will delete it.
All traffic between the app and our servers uses TLS. Passwords are stored only as salted hashes (never in plain text). Access to production systems is restricted and audited. No system is perfectly secure; if a breach affects your data we will notify you and the relevant authorities as the law requires.
The app contains no advertising SDKs, no third-party analytics and no tracking. This website sets no cookies beyond what is strictly necessary to serve it. Nothing here or in the app tracks you across other companies' apps or websites.
If we change this policy materially we will update the date at the top and, for significant changes affecting account holders, notify you in the app or by email before the change takes effect.
BCT Consultants Ltd · support@tabsira.app