← Back to M3 Strategies

Privacy Policy for Noor – Quran Companion

Last updated: 31 October 2026

This policy explains what personal information the Noor – Quran Companion app (“Noor”) collects, why, who we share it with, how long we keep it, and your rights. It applies to Noor on iOS and Android.

We follow UK data protection law, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

1. Who We Are

The controller responsible for your personal information is:

M3 Strategies Limited
Unit 82a James Carter Road
Mildenhall
Bury St Edmunds
IP28 7DE
United Kingdom

Company number: 16338593 (registered in England and Wales)

Email: admin@m3strategies.co.uk

We are not required to appoint a Data Protection Officer. For any privacy question or request, email us at the address above.

2. Information We Collect

2.1 App ID

Noor does not ask for your email address or a password. When you install Noor, our subscription provider RevenueCat gives your install an anonymous app user ID. Your Noor account is linked to that ID and to your subscription.

2.2 Profile

Your display name, username, character and avatar choices, and app language.

2.3 Activity in the app

• Lesson (“Journey”) progress;
• Quiz and trivia answers and stats;
• Streaks;
• Whether you completed the daily ayah, daily hadith and daily quiz;
• Prayer-tracker ticks;
• Match results;
• In Reflect: which cards you have seen, saved or shared, and your progress through stories.

2.4 AI chat

Your chat questions and the answers are stored in your chat history so you can see them again. Your questions are sent to OpenAI to generate answers and to translate them into your language. Display names are also checked by OpenAI for offensive words.

2.5 Friends

Other Noor users can search for your username. If you become friends with someone, they can see your display name, avatar, daily progress summary, streak and match results. We store your friend connections and friend requests.

2.6 Push notifications

If you allow notifications, we store your device’s push token so we can send you notifications (for example, prayer reminders). Notifications are delivered through Expo’s push service, which passes them to Apple or Google for delivery to your device.

2.7 Location

If you give permission, Noor uses your device location to calculate prayer times. The calculation happens inside the app on your device. Your location is never saved, and it is never sent to our servers or to anyone else. You can turn location access off at any time in your device settings.

2.8 Subscription

From RevenueCat we receive your subscription status, which product you bought and when it expires. We also keep records of subscription events (such as starts, renewals, cancellations and expiries). We do not receive your payment-card details; Apple and Google handle payment.

2.9 Install attribution

Noor itself shows no ads. We do advertise Noor on other platforms, and we use AppsFlyer to measure which ads and campaigns lead people to install Noor and subscribe. AppsFlyer collects attribution data only: for example your device type, operating system, IP address, when the app was installed and opened, which campaign led to the install, and subscription events, which RevenueCat passes to AppsFlyer. To link these up, RevenueCat also receives device identifiers such as your iOS vendor identifier (IDFV) and IP address.

On iOS, Apple’s App Tracking Transparency prompt asks whether you allow tracking. We only access your advertising identifier (IDFA) if you tap Allow. If you don’t, installs and subscriptions are still measured, but without your IDFA.

On Android, AppsFlyer collects your device’s advertising ID. You can reset or delete it at any time in your device settings (usually Settings → Privacy → Ads).

2.10 Technical information

Our hosting providers keep server logs when the app connects to our servers. These include your IP address, request times and technical details about the request.

2.11 When you contact us

If you email us, we receive your email address and whatever you include in your message.

3. Sensitive Information

Some information is treated as “special category data” under UK GDPR and needs extra protection.

• Religious belief: using an Islamic app, and in particular using the prayer tracker, may reveal your religious beliefs.
• Chat questions: the questions you ask may include information about your health, relationships or other sensitive topics.

We handle this information as follows:

• We use it only to provide the features you choose to use. We do not use it for advertising or to profile you, and we do not sell it.
• Where processing reveals your religious beliefs, we rely on your explicit consent. You give it when you start your subscription: the subscription screen asks you to agree to our Terms of Service and this Privacy Policy, including this section. We need this information to provide Noor’s features. You can withdraw your consent at any time by deleting your account (and cancelling your subscription with Apple or Google).
• Chat messages are visible only to you in the app. They are not shown to your friends.
• Access to stored data is limited to people who need it to run and support Noor.

4. How We Use Your Information and Our Lawful Bases

UK GDPR requires us to have a lawful basis for each use of your information.

“Contract” means we need the information to provide the app and subscription you asked for under our Terms of Service. Where we rely on legitimate interests, we have balanced our interests against your rights. You can ask us for more detail.

Where we rely on consent, you can withdraw it at any time, for example by turning off location or notifications in your device settings, without affecting what we did before.

Automated decisions

We do not make decisions about you based only on automated processing that have legal or similarly significant effects. Automatic display-name checks may stop you using a particular name; if you think a name was wrongly rejected, contact us.

5. Who We Share Your Information With

We use the following service providers. They process your information on our behalf and only as we instruct, unless stated otherwise.

OpenAI: under OpenAI’s API data-usage terms, data sent through its API is not used to train or improve OpenAI’s models unless the customer opts in, and we have not opted in. OpenAI keeps API data for up to 30 days to monitor for abuse, then deletes it, unless the law requires it to be kept longer.

Apple and Google also act as independent controllers when they process your purchases and app-store account. Their own privacy policies apply.

Other users: as explained in section 2.5, other users can find your username, and friends can see your display name, avatar, daily progress summary, streak and match results.

Other disclosures: we may share information if the law requires it, to respond to a valid request from a court or public authority, to protect the safety of users or the public, or to protect our legal rights. If our business, or Noor, is sold or restructured, your information may be transferred to the new owner, who must continue to protect it in line with this policy.

6. International Transfers

Our main database is hosted in the European Union. UK law recognises the EU as giving personal information an adequate level of protection.

Some of our providers are based outside the UK, including in the USA, and may process or access your information there. When your information is transferred outside the UK, it is protected by one of these safeguards:

• The UK Addendum to the EU Standard Contractual Clauses (approved by the UK Information Commissioner), included in the provider’s data processing terms. This is the safeguard in the data processing terms of Supabase and RevenueCat, and the one we rely on for our other US providers;
• UK adequacy regulations, where the information goes to a country the UK recognises as having adequate data protection laws; or
• The UK Extension to the EU–US Data Privacy Framework (the “UK–US data bridge”), where a US provider is certified under it.

You can ask us for more information about these safeguards, or for a copy of them, by emailing admin@m3strategies.co.uk.

7. How Long We Keep Your Information

8. Deleting Your Account

You can delete your account at any time:

• In the app (quickest): go to Settings → Delete account. Deletion happens immediately.
• On the web: follow the steps at m3strategies.co.uk/delete-account if you no longer have the app.

Deleting your account permanently deletes everything we hold about you on our servers, including your profile, progress, streaks, prayer-tracker ticks, Reflect activity, chat history, friends, matches, push token and subscription event records. If you open the app again afterwards, a new, empty account is created.

Copies in backups are overwritten within 7 days. Your anonymous app ID stays on your device so that an active subscription keeps working. Purchase records held by RevenueCat, Apple and Google are kept under their own policies.

9. Your Rights

Under UK data protection law, you have the right to:

• Access – ask for a copy of your personal information;
• Rectification – ask us to correct inaccurate or incomplete information;
• Erasure – ask us to delete your information;
• Restriction – ask us to limit how we use your information;
• Objection – object to our use of your information where we rely on legitimate interests;
• Data portability – ask for information you gave us in a commonly used, machine-readable format, or for it to be sent to another organisation;
• Withdraw consent – where we rely on consent, at any time.

Some rights only apply in certain situations. To make a request, email admin@m3strategies.co.uk with your username and display name so we can find your account. Because Noor has no login, we may ask for further information to check the account is yours.

We will respond within one month. If your request is complex, we may extend this by up to two further months and will tell you why. We do not usually charge a fee.

10. Complaints

If you are unhappy with how we have handled your information, please contact us first at admin@m3strategies.co.uk. We will acknowledge your complaint within 30 days and let you know the outcome.

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO):

• Website: ico.org.uk/make-a-complaint
• Phone: 0303 123 1113

11. Children

Noor is not for children under 13, and we do not knowingly collect information from anyone under 13. If you are under 18, you must have permission from your parent or guardian to use Noor, as set out in our Terms of Service.

If you are a parent or guardian and think a child under 13 is using Noor, contact us and we will delete the account.

12. Security

We use reasonable technical and organisational measures to protect your information, including encrypted connections between the app and our servers, limiting access to people who need it, and using established providers. No method of storing or sending information is completely secure, so we cannot guarantee absolute security.

Because Noor has no login, anyone who can use your device and open the app can see your account. Please keep your device secure.

13. Changes to This Policy

We may update this policy from time to time. We will change the “Last updated” date at the top. If we make a significant change, we will tell you in the app before it takes effect and, where the law requires, ask for your consent.

14. Contact Us

For questions or requests about this policy or your information, contact:

M3 Strategies Limited
Unit 82a James Carter Road
Mildenhall
Bury St Edmunds
IP28 7DE
United Kingdom

Email: admin@m3strategies.co.uk

---

See also: Noor Terms of Service · Delete your account