Iqra ScrollDraft — pending legal review. Company details, contact address, retention periods and legal bases must be confirmed before publication.
Privacy Policy
Last updated: 8 November 2026
This policy explains what data the Iqra Scroll iPhone app ("Iqra Scroll", "the app") and this website process, why, and what rights you have. In short: there is no account, your location is used on your phone and never sent to us, and your reading progress and prayer log stay on your phone. To measure our ads we use the Meta SDK and AppsFlyer, which can use your advertising identifier only if you allow tracking. Purchases go through Apple and RevenueCat.
1. Who is responsible
The data controller is Il Punto Media Srl, Via Europa 50, 24060 Bolgare (BG), VAT IT04709330163, Italy ("we", "us"). Contact: support@iqrascroll.com.
2. Data that stays on your phone
The following is stored only on your device. We can't see it, and it is deleted when you delete the app:
- Reading progress, khatm counter, streak, reading plan, daily goal and saved verses.
- Your prayer log (the prayers you tick off), kept for the last 60 days.
- Your settings: translation, tafsir, reciter, prayer calculation method, notifications.
- Your approximate location for prayer times and the Qibla (coordinates rounded to about 100 m) and the name of your city.
- The "Ayah of the Day" shown by the home-screen widget.
Notifications (prayer times and the reminder before your free trial ends) are scheduled on your phone; no server sends them.
3. Location
Iqra Scroll asks for your location only when you ask for prayer times or the Qibla direction, and only while you're using the app ("While Using"), at low accuracy. Prayer times and the Qibla direction are calculated on your phone. To show your city's name, the app asks Apple's geocoding service in iOS to convert a point rounded to about 1 km into a place name; that request is handled by Apple under Apple's privacy policy. Your location is never sent to us, to our content server, or to our advertising and analytics partners. You can turn location off in iOS Settings › Privacy & Security › Location Services and still use the rest of the app.
4. Data that leaves your phone
| What | Why | Who receives it | Legal basis (GDPR) |
|---|---|---|---|
| Content requests: which translation, tafsir or recitation you open, plus your IP address as part of the internet connection. No identifier, account or location is sent. | Deliver the translations, tafsir and audio you ask for. | Our content server, run on Cloudflare Workers (Cloudflare, Inc.), which fetches the content from Quran.Foundation on our behalf, so Quran.Foundation doesn't receive your IP for these requests. Recitation audio files are streamed directly from Quran.Foundation's audio servers, which receive your IP address. | Performance of a contract (Art. 6(1)(b)). |
| Purchase data: an anonymous app user ID, the product, price and currency, trial and renewal status, transaction identifiers, storefront country. | Unlock and restore your subscription, handle billing questions. | Apple (payment) and RevenueCat, Inc. (subscription management). We never see your card details. | Performance of a contract (Art. 6(1)(b)). |
| Advertising measurement: install and app open, onboarding completed, subscription screen viewed, trial started or subscription bought; device model, OS version, IP address; the Meta and AppsFlyer IDs; and, only if you allow tracking, your Advertising Identifier (IDFA). Trial conversions and renewals are reported by RevenueCat to Meta and AppsFlyer from its servers. | Measure which of our ads (mainly on Facebook and Instagram) led to an install or a subscription, and improve those campaigns. | Meta Platforms Ireland Ltd. (Meta SDK, Conversions API) and AppsFlyer Ltd., via RevenueCat for subscription events. | Consent (Art. 6(1)(a)) for tracking with the IDFA; legitimate interest (Art. 6(1)(f)) for aggregated, non-identifying measurement such as Apple's SKAdNetwork. [Lawyer to confirm: whether EU users need an additional consent screen under the ePrivacy Directive] |
| Support emails: your email address and what you write to us. | Answer you. | Us and our email provider Google (Google Workspace). | Legitimate interest / contract. |
Usage events sent to Meta and AppsFlyer never include your location, city, prayer times, prayer log or the verses you read.
What we don't collect
- No account, name, phone number, contacts or photos.
- No payment card details: payments are handled entirely by Apple.
- No precise or background location.
This website
This website uses no cookies, no analytics and no third-party fonts or scripts. Our hosting provider Cloudflare keeps standard server logs (IP address, page requested, time) for security for up to 30 days.
5. Tracking and your choice
Before the subscription screen, iOS may ask whether Iqra Scroll can track your activity. If you choose "Ask App Not to Track", the Meta SDK and AppsFlyer don't receive your IDFA and only aggregated, privacy-preserving measurement is used. The app works exactly the same either way. You can change your choice anytime in iOS Settings › Privacy & Security › Tracking.
6. Sharing and international transfers
We share data only with the providers listed above. They act as our processors or, for Apple and Meta in some cases, as independent controllers under their own terms. We do not sell your personal data for money. Some providers are in the United States; transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
7. How long we keep data
- On-device data: until you delete the app (the prayer log keeps only the last 60 days).
- Content server logs at Cloudflare: up to 7 days, for debugging and abuse prevention.
- Attribution data: as set in our Meta and AppsFlyer accounts, up to [24] months.
- Purchase records: while your subscription is active and then as long as tax and accounting law requires (in Italy, generally 10 years).
- Support emails: up to 24 months after the conversation ends.
8. Your rights (EEA, UK and Switzerland)
Under the GDPR you can access your data, correct it, have it erased, restrict or object to its processing (including processing based on legitimate interest), receive it in a portable format, and withdraw consent at any time without affecting earlier processing. Because we don't know who you are, we may ask for information that lets us find your data, such as the Apple order ID of your purchase (you can find it at reportaproblem.apple.com). You can also complain to a supervisory authority: in Italy the Garante per la protezione dei dati personali, or the authority where you live.
9. California and other US states
If you live in California (CCPA/CPRA) or another US state with a similar law, you can ask what personal information we collect, access it, delete it, correct it, and opt out of its "sale" or "sharing". We don't sell personal information for money. Sending app events and device identifiers to Meta and AppsFlyer to measure ads may count as "sharing" for cross-context behavioural advertising: you can opt out by choosing "Ask App Not to Track" (section 5) or by emailing us with the subject "Do Not Sell or Share". In the last 12 months we collected these categories: identifiers, internet or app activity, commercial information (purchases) and approximate location by country (from the App Store and IP address). We won't discriminate against you for using these rights.
10. Children
Iqra Scroll is suitable for all ages but is not directed at children under 13 (under 16 in the EEA), and we don't knowingly collect their personal data. If you believe a child has given us data, contact us and we'll delete it.
11. Changes and contact
If we change this policy we'll update the date above and, for significant changes, tell you in the app. Contact: support@iqrascroll.com, or Il Punto Media Srl, Via Europa 50, 24060 Bolgare (BG), Italy.