Privacy Notice

Last updated: May 27, 2026

1. Who we are

HifzVerse ("we", "us") operates hifzverse.com (the "Service") — a Quran learning and memorization software tool. For the personal data described below, HifzVerse acts as the data controller.

2. Data we collect

  • Account data: name, email, password (hashed), profile preferences.
  • Usage data: pages visited, features used, listening and memorization progress, favorites, quiz results.
  • Device & technical data: IP address, browser type, device identifiers, approximate location derived from IP.
  • Support messages: any content you send us via email or in-app messages.
  • Payment-related data: collected by Paddle on our behalf when you subscribe to a Premium plan. We do not store full card details.

3. Why we use your data and our legal basis

  • To create and operate your account and provide the Service — performance of a contract.
  • To process Premium subscriptions — performance of a contract.
  • To improve the Service, prevent fraud and abuse, and keep it secure — legitimate interests.
  • To respond to support requests — legitimate interests.
  • To send service-related emails (e.g. receipts, account notices) — performance of a contract.
  • For marketing communications, where used — your consent, which you can withdraw at any time.
  • To comply with our legal obligations — legal obligation.

4. Who we share data with

  • Paddle — our Merchant of Record. Paddle processes payments, handles billing, tax compliance, invoicing, refunds, and subscription management on our behalf. See paddle.com/legal/privacy.
  • Hosting and infrastructure providers processing data on our behalf (e.g. cloud hosting, database, analytics, error monitoring).
  • Professional advisers (e.g. legal, accounting) where necessary.
  • Authorities when required by law, court order, or to protect rights and safety.

We do not sell your personal data.

5. International transfers

Our service providers may be located outside your country, including outside the UK / EEA. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data retention

We keep personal data only as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed it is deleted or anonymised. Payment records are retained as required by tax and accounting laws.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent. If you are in the UK / EEA, you also have the right to lodge a complaint with your local supervisory authority. We aim to respond to requests within one month.

To exercise any of these rights, email support@hifzverse.com.

8. Security

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls, and regular review of our security practices. No method of transmission or storage is 100% secure.

9. Cookies

We use a small number of cookies and similar technologies. Essential cookies are required for the Service to work (e.g. keeping you signed in). We may use analytics cookies to understand how the Service is used. You can manage cookies in your browser settings.

10. Children

The Service is intended for general audiences. If you believe a child has provided us personal data without parental consent, contact us and we will delete it.

11. Changes to this notice

We may update this notice from time to time. Material changes will be communicated through the Service.

12. Contact

For privacy questions or requests, email support@hifzverse.com.