Privacy Policy
We write this policy in plain words: what we collect from our website and apps (the parent app and the teacher app), what we don't collect, and where students' data is kept. Last updated: 31 October 2026.
What do we collect from this website?
- We don't ask you to create an account, and we don't collect your name, email or phone number when you browse the site.
- When you press a download button, we record only the file type (Windows, Linux or APK), the country the request came from and its time, so we know which versions are used most. We don't store your IP address or any device identifier.
- We use no visitor analytics and no tracking or advertising cookies. The site is hosted on Cloudflare, which processes your IP address at the moment of your visit only to serve the page.
- Your browser saves only two preferences on your device: the theme (light or dark) and your boys or girls choice in the system demo. They never leave your device.
When you contact us
- You can reach us by email at support@halqat.app or through the consultation form on the home page.
- The consultation form sends what you type in it (the mosque name, city, number of students, what you need, your email and your message) to our email through Cloudflare's email service. The site does not save it in any database.
- We keep your message and email only to reply and help you, and we don't share them with anyone else. We will delete them whenever you ask.
Students' data inside the mosque (local version)
- Students' data, attendance, recitations and exams are saved in a database on the mosque's computer, and do not leave it unless the mosque turns on the cloud services.
- The party responsible for the students' data, especially children's data, is the mosque or association that runs the system.
- Your mosque's data belongs to you. You can download a full copy of the database at any time from the admin dashboard.
- The honor board shown on the mosque screen needs no sign-in, so any device on the mosque network can see the students' names, numbers and progress on it. Protect your Wi-Fi network with a password.
Cloud services (optional, turned on by the mosque)
- Managed cloud version: each mosque gets its own isolated environment, with its own container and database that no other mosque shares.
- Local version with backup (hybrid mode): the server stays on the mosque's computer. Once it is linked to the central server (api.halqat.app), its copy is saved in a central database, where every record is tagged with its mosque's code and is never shown to another mosque.
- In hybrid mode the central server receives the students' basic data: name, circle number and circle name, plus attendance, recitation, page rating, exam result and revision records. Parents' and students' phone numbers are not sent in this sync.
- A full backup of the mosque's database is also sent. Before the upload we remove sign-in sessions, the mosque key and the WhatsApp gateway token. Apart from that it is a copy of the mosque's database as it is, so it includes everything the mosque recorded: students' and parents' phone numbers, parents' names, addresses, health and family status, teacher accounts (with sign-in codes stored as a hash that does not reveal the original code) and support requests. It is sent over an encrypted connection (HTTPS). The central server stores it as a compressed file with no extra file-level encryption, and does not read its contents or show it in any dashboard.
- We keep one backup for each of the last 30 days and one for each of the last 12 months, always with the latest one, plus an extra nightly copy of the central database for 30 days. Everything else is deleted.
- The central server may ask a linked mosque server to send the last 200 lines of its error and warning logs, with the system type, Node version and memory. This happens on the next sync, without the admin pressing a button, and only to diagnose faults.
- The connection to the central server is encrypted (HTTPS). We do not sell this data or share it with anyone else.
- To delete your mosque's data from the central server, email us at support@halqat.app.
Parent app and parent portal
- There is no search for students by name or phone number, and no parent account. The mosque sends the parent a private link for each student, which the parent opens in a browser or pastes into the app.
- The link carries the mosque code, the student code and a secret code for that student, and the report opens only with the right code. So share it only with the parent, and if it reaches the wrong person, tell the mosque administration.
- In the report the server sends: the student's name, circle number and mosque name, the last 30 attendance records, the memorized pages and their ratings, and the juz' exam results. From these the app shows today's attendance, the last 15 pages, memorization statistics and exam results.
- The secret code is part of the link's address, so it may appear in the logs of servers the request passes through, and one student's link cannot currently be revoked on its own.
- The web report page loads fonts from Google and styling tools from cdn.tailwindcss.com, so your browser connects to these two sites when you open it. The Android app does not.
- The server limits the number of requests from each address (30 per minute) to prevent guessing.
- The app saves on your phone only: the server address, the mosque and student codes and the secret code, the student's name, and the last report. The sign-out button clears the student data, the secret code and the last report, and keeps the server address you chose. This data is not included in Android backups. Older versions saved a phone number and a list of siblings; this version clears them on sign-in or sign-out.
- The app asks only for the internet and network state permissions. It does not ask for location, contacts or the camera, and it has no ads or analytics tools.
- When an error happens in the app, the phone keeps a technical record (up to 50 records): the error text, the device model and Android version, and, when fetching the report fails, the mosque and student codes too. It is sent to the server the app connects to (the central server by default) when a report is opened, and is cleared from the phone once sent. The sign-out button does not clear it before it is sent. We keep only the last 500 records for the parent app overall, and use them only to fix errors.
- To correct or delete a student's data, contact the mosque administration, which is responsible for it, or email us at support@halqat.app.
Teacher and Quran tutor app (Halqat for Android)
- The app has no ads, collects no data for promotional or advertising purposes, and uses no third-party tracking tools.
- Camera permission: the camera is requested for one purpose only, to scan a QR code that signs the teacher in and connects quickly to the mosque server. The app takes no photos or videos, and does not store or share any.
- Network and internet permission: used to connect to the local mosque server over the internal network, or to the encrypted cloud server, to send and sync recitation, attendance and exam records.
- The teacher's session and sign-in data are saved securely on the device, and are fully cleared on sign-out.
Account and data deletion
- The Halqat app lets teachers delete their own account directly in the app: open the menu (⋮) on the home screen and choose “Delete Account”.
- Once you confirm, the teacher account is disabled at once, and all of its sign-in keys and sessions are revoked, which signs it out of the system.
- Because the app serves the teaching and record-keeping of associations and mosques, the students' past recitation, attendance and exam records stay in the mosque's database, to document the students' learning path and keep the mosque's administrative records intact.
- A teacher or the mosque administration can also ask us to delete the account, or to remove the mosque's data for good, by emailing us at support@halqat.app.
Children's privacy
- The Halqat system and apps are built to serve Quran circles and memorization centers that include children and minors. We take children's privacy very seriously.
- We do not collect or use children's data for any commercial or advertising purpose, and their data is never sold or shared with outside parties.
- The mosque or Quran center administration is the official party authorized to collect and manage students' names, circles and memorization records, under its own rules.
External links
- Download files are served from the GitHub releases page, and visiting it is subject to GitHub's policy.
Questions about your data?
Email us, and we will answer you, or delete what you sent us if you ask.
support@halqat.app