Privacy Policy
NoorQuran takes the privacy of families and scholars seriously. This page explains, in plain English, what data we collect, why we collect it, how long we keep it, and your rights under UK GDPR.
What we collect
From parents: name, email, phone number, country, timezone, billing details (handled by Stripe — we never see card numbers), child’s first name and age, programme choice, class history.
From children: first name only, age at enrolment, programme, class attendance, progress notes from scholars. We do not collect a child’s date of birth, school, address, or photo.
From scholars: name, qualifications, references, recitation samples, teaching availability, class history, ratings, payout details (handled by Stripe Connect or Wise).
Why we collect it
- To match families with scholars and schedule classes
- To send class reminders and progress reports
- To process payments to scholars and from parents
- To monitor safeguarding (every message is screened for safeguarding keywords)
- To improve quality (anonymised aggregate analytics only)
How long we keep it
- Active accounts: while your account is open, plus 12 months for billing record-keeping
- Closed accounts: anonymised within 30 days, financial records retained 6 years (HMRC requirement)
- Class voice notes: 90 days (used for AI report generation, then deleted)
- Safeguarding-flagged messages: 7 years (regulatory requirement)
Who we share with
- Stripe — for payments (parents) and payouts (scholars)
- Twilio — for WhatsApp messaging via our automated assistant
- Anthropic and OpenAI — for AI-polished class reports (the “scholar concern” field is never sent to AI)
- Resend — for transactional and lifecycle email delivery
- Cal.com — for scheduling integrations
- Supabase — our database and authentication provider, hosted in the EU
- Vercel — our application hosting
We never sell data. We never share with marketing third parties.
Your rights under UK GDPR
You can: request a copy of your data, correct any inaccuracy, ask us to delete your data, object to processing, restrict processing, or port your data elsewhere. Email contact@thenoorquran.com with “GDPR REQUEST” in the subject line. We respond within 30 days.
Children
NoorQuran is designed for children, but every account is held by a parent or guardian. Children under 13 do not interact with the platform directly — only their guardian’s account holds their data.
Cookies
We use functional cookies (session, language preference) and a Meta Pixel for advertising attribution. You can disable cookies in your browser without breaking the platform.