Privacy Policy

Tibyan · nextday.tibyan.app · Last updated: 25 August 2026

Tibyan works without an account and without internet. Most of it — the Mushaf, search, adhkar, prayer times and qibla — runs entirely on your device, requires no sign-up, and sends nothing to our servers.

What we never collect

• Your location never leaves your device. We request location permission to compute prayer times and the qibla direction; that computation happens entirely on the phone. We do not transmit or store your coordinates.
• No third-party tracking or analytics. No Google Analytics, Firebase Analytics, Crashlytics, Sentry, or ad networks. No advertising ID, no device fingerprinting.
• We do not sell or share your data with anyone for marketing purposes.
• Your reading is not monitored. The Quran text ships inside the app and is never fetched from the network, so we hold no record of what you read.

What we do collect — and only what is necessary

On first launch (no account):

• device_uid — a random identifier we generate and store on your device. It is not a system device ID, does not identify you, and is not shared across apps. It exists so your data can return to you if you later create an account.
• Operating system (android or ios), app version, timezone, and interface language — to serve correct content and times.

If you create an account (optional):

• Your name, email address, and a hashed password we cannot read.
• What you choose to sync: bookmarks, notes, reflections, collections, khatmah progress, and memorization progress. This is your data; we store it so it reaches your devices.

Automatically with each request: your IP address in server logs — technically required for any internet service, used for security and abuse prevention.

Moving from guest to account

When you create an account after using Tibyan as a guest, your local data is merged, never replaced. Nothing is lost and you do not start over.

Sharing with others

We use no third-party service to analyse your behaviour. Quran audio recitations are fetched from audio hosting servers when you play them, so that server sees your IP address as with any download. We send it neither your identity nor your data.

Your rights

• Delete your account from inside the app — everything of yours on our servers is permanently deleted with it.
• Use the app without an account indefinitely.
• Request a copy of your data or object to its processing via the email below.

Children

The app is suitable for all ages and we collect no data for targeting anyone. We request no personal data beyond what is listed above.

Security

All communication with our servers uses HTTPS. Your session token is kept in the operating system's secure storage (Keychain on iOS, Keystore on Android), not in ordinary files.

Changes to this policy

If it changes, we update the date above and notify you in the app when the change is material.

Contact

For any question about your privacy: ahmedbadereldin@gmail.com