Privacy Policy

✦

Effective Date: 06.05.2026•Last Reviewed: 06.05.2026

Table of Contents▼

Preamble

This Privacy Policy is a legally binding document that governs the relationship between you — as a user of the Awliyah platform — and Awliyah (referred to herein as "Awliyah", "we", "us" or "our"). It sets out, in clear and transparent terms, how we collect, use, store, disclose and protect your personal information when you access or use our website and mobile application at www.awliyah.app.

Awliyah is a dedicated Islamic educational platform built to facilitate one-on-one Quranic recitation sessions between community members. The platform connects individuals who wish to recite the Holy Quran with partners who can listen, engage and participate — all within a safe, structured and faith-centred digital environment.

We are committed to processing your personal information lawfully, fairly and transparently, in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the principles enshrined in internationally recognised frameworks including the General Data Protection Regulation (GDPR). By accessing or using Awliyah, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, you should discontinue use of the platform.

1. Introduction and Scope

This Privacy Policy applies to all personal information that Awliyah collects and processes through its website and any associated digital services. It governs every interaction you may have with the platform — whether you are browsing as a visitor, creating an account, setting up a profile, hosting or joining a Quranic recitation session, or contacting us with a query.

The purposes for which we collect your information are specific and limited. Awliyah does not operate as a general social media network, does not engage in targeted advertising, and does not sell personal information under any circumstances. Every piece of information we hold about you is collected for a clearly identified, community-oriented purpose connected to the facilitation of Quranic education.

This Policy also governs the limited circumstances in which we may share your information with third-party service providers who support the technical operation of the platform. Such sharing is carried out only where necessary, with appropriate safeguards and contractual protections in place.

2. Definitions

For clarity and consistency, the following terms carry the meanings set out below wherever they appear in this Privacy Policy:

“Personal Information” means any information about an identifiable individual — that is, information that alone, or in combination with other information, can reasonably be used to identify a specific person. This includes, but is not limited to, your name, email address, age group, gender, voice recording, user-defined location and session activity.
“Platform” refers collectively to the Awliyah website (www.awliyah.app) and all related digital services operated by Awliyah for the purpose of facilitating Quranic recitation sessions.
“User” or “you” means any individual who accesses, registers on or interacts with the Awliyah Platform, including registered members, session hosts, recitation partners and general visitors.
“Session” refers to a live, one-on-one Quranic recitation session conducted between two registered users through the Platform's integrated audio/video calling feature, powered by Stream (getstream.io).
“Processing” means any operation performed on personal information, including its collection, storage, use, disclosure, transmission, retention or deletion.
“Third-Party Service Provider” means an independent organisation engaged by Awliyah to provide specific technical services necessary for the functioning of the Platform, including Supabase (database and authentication) and Stream (real-time audio/video calling).

3. Information We Collect

Awliyah is built on the principle of minimal data collection. We collect only the information that is reasonably necessary to operate the Platform safely and effectively. The categories of personal information we collect, and the manner in which each is collected, are described below.

3.1 Information You Provide Directly

When you create an account and complete your profile on Awliyah, you provide us with the following:

✦Your first name, as you choose to display it on the Platform;
✦Your gender;
✦Your age group, selected from the following ranges: 13–17, 18–64, or 65+;
✦Your email address, used for account verification and communications;
✦Your user-defined location, being a city or region that you voluntarily enter — we do not collect your precise home address, street-level location or GPS coordinates;
✦An optional profile bio and any profile tags or titles you choose to add to describe your role or background in Quranic learning; and
✦A short voice recording of a Quranic recitation, which you submit voluntarily before hosting a session on the Platform.

3.2 Information Collected via Google Sign-In

If you choose to create an account or log in using Google Sign-In (Google OAuth), Awliyah receives your full name and email address from Google at the point of authentication. Your Google-provided name is immediately overwritten by the first name you choose for your Awliyah profile and is not retained or displayed in its original form. Your email address is retained for account management purposes.

3.3 Session and Activity Data

When you participate in or host a Quranic recitation session on the Platform, the following information is automatically generated and recorded:

✦The start and end timestamps of the session, as well as any scheduled time associated with it;
✦The identity of the session creator;
✦A record of the most recent participant in the session;
✦The duration of the session; and
✦A user-submitted rating for the session, where provided.

Live audio and video sessions conducted through the Platform are not recorded or stored on Awliyah's servers. Sessions are transmitted in real time using the Stream platform. We do not retain any audio or video content from these sessions. A feature allowing users to record sessions for their own personal use is currently under development; if implemented, such recordings will be saved locally to the user's own device only — Awliyah will not store them on its servers.

3.4 Technical and Authentication Data

Certain technical data is automatically generated when you access the Platform, including authentication tokens, session identifiers and login events. This data is managed through Supabase, our authentication and database provider, and is used solely to ensure secure, authenticated access to your account.

3.5 What We Do Not Collect

Awliyah is deliberate in what it does not collect. We do not collect:

✦Your precise GPS location, home address or street-level location data;
✦Any government-issued identification documents;
✦Financial or payment information;
✦Audio or video content from live sessions; and
✦Behavioural tracking data through third-party analytics tools such as Google Analytics, Hotjar or similar services.

4. How We Process Your Information

The table below provides a structured and transparent overview of each category of personal information that Awliyah collects, along with the method of collection, the purpose for which it is processed, the parties with whom it may be shared, and the applicable retention period.

Category	Data Collected	How Collected	Purpose	Shared With	Retention
Account & Identity	First name, gender, age group (13–17, 18–64, 65+), email address	Directly entered by user at registration	Account creation, profile display, age-appropriate access, email verification	Supabase Auth (authentication only)	Retained while account is active; deleted upon account closure
Google Sign-In Data	Name and email address (name overwritten by user's chosen first name)	Received from Google OAuth at login	Streamline account creation and secure authentication	Supabase Auth	Name overwritten immediately; email retained while account is active
Location Information	User-defined city or region - no GPS or precise address collected	Self-entered by user; optional auto-fill at profile completion stage	Displayed on map to facilitate session discovery and partner matching	Visible to all users on the public map	Retained while account is active
Recitation Voice Recording	A short Quranic recitation audio clip submitted voluntarily before hosting a session	Recorded and uploaded by the user within the platform	Allows prospective session partners to assess recitation style prior to joining; not processed by any automated system	Audible to other registered users browsing sessions	Retained while account is active; deleted upon account closure
Session Records	Session timestamps (start/end/scheduled), session creator, most recent participant, duration, user-submitted rating	Auto-generated by the platform at the time of each session	Community safety, accountability, quality assurance, platform integrity	Internal authorised personnel only; session creator details linked to profile	Retained indefinitely for accountability; anonymised if the associated account is deleted
Technical & Auth	Encrypted authentication tokens, session identifiers, login events	Automatically generated by Supabase Auth upon login	Secure authentication, fraud prevention, platform security	Supabase (East US – Ohio)	Managed per Supabase standard security lifecycle

5. Purpose and Legal Basis for Processing

Awliyah processes personal information only for lawful, specific and clearly identified purposes. Under PIPEDA, we rely on your meaningful consent as the primary legal basis for collection and use. For certain processing activities, we also rely on our legitimate interest in operating a safe and functional platform, provided that such interests do not override your right to privacy.

The principal purposes for which we process personal information are as follows:

To create and maintain your user account and enable you to access the Platform's features;
To verify your account via email confirmation;
To display your profile — including your first name, gender, age group, user-defined location, and recitation voice recording — to other registered users, so that meaningful session partnerships may be formed;
To facilitate and record the occurrence of live Quranic recitation sessions between users, including logging session timestamps, duration and ratings;
To maintain community safety, accountability and platform integrity through the retention of session records;
To authenticate your identity securely when you log in; and
To communicate with you regarding your account, any changes to this Policy, or any matter relevant to your use of the Platform.

Awliyah does not process personal information for marketing, targeted advertising, profiling for commercial gain or any purpose unrelated to the facilitation of Quranic education. We do not engage in automated decision-making that produces legal or significant effects on users.

6. Consent

6.1 How We Obtain Consent

By creating an account on Awliyah, you provide meaningful consent for the collection, use and disclosure of your personal information as described in this Privacy Policy. Before completing your registration, you are presented with a clear reference to this Policy and are asked to confirm your understanding. We do not collect information before this consent is given.

Where a specific feature — such as the submission of a voice recording — involves a distinct category of information, you are asked to take a clear affirmative action (recording and submitting the audio) before it is collected. This is not mandatory for general platform use; you may not host a session without a recording, but you may join sessions as a participant without one.

6.2 Withdrawal of Consent

You may withdraw your consent at any time by closing your account through the Platform. Upon account closure, your personal profile data — including your name, email address, profile details and voice recording — will be permanently deleted from our systems. Session records in which you participated as a guest will be retained in anonymised form so as not to disrupt the session history of other users.

Please note that withdrawal of consent will result in the loss of access to all Platform features. Awliyah does not discriminate against users who choose to withdraw consent — the decision is yours to make freely and without penalty.

6.3 Consent of Minors

The minimum age to use the Awliyah Platform is thirteen (13) years. Awliyah verifies age through self-declaration at the point of registration. Users who select the 13–17 age group are considered minors, and it is the responsibility of their parent or legal guardian to supervise their use of the Platform and ensure that they understand this Privacy Policy. We encourage parents and guardians to actively monitor their child's activity on the Platform. If we become aware that a minor's personal information has been collected without appropriate parental awareness, we will take reasonable steps to remove such information.

7. Information Visible to Other Users

The Awliyah Platform is, by its nature, a community platform. Certain elements of your profile are visible to other registered users in order to facilitate the discovery and formation of recitation partnerships. Understanding what is visible — and to whom — is an important part of making an informed decision about what you share.

The following information is visible to any registered user browsing the Platform's public session map:

✦Your first name;
✦Your gender;
✦Your user-defined location (city or region only); and
✦Your recitation voice recording, if you have submitted one and are hosting a session.

Profile tags, titles and any optional bio information you choose to add may also be visible to users browsing your profile. No other personal information — including your email address, age group or technical data — is displayed publicly or shared with other users.

You are solely responsible for the information you choose to include in your bio, profile tags and any optional fields. Awliyah advises users to exercise care and to avoid including sensitive personal information in publicly visible profile fields.

8. Data Sharing and Third-Party Disclosure

Awliyah does not sell, trade or commercially exploit your personal information in any manner. We share your information only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

8.1 Supabase — Authentication and Database

Your account data — including authentication credentials, profile information and session records — is stored on servers managed by Supabase, located in the East US (Ohio) region. Supabase acts as a data processor on our behalf, processing your information solely in accordance with our instructions and for the purposes described in this Policy. Supabase employs industry-standard security measures including SSL encryption, AES-256 encryption at rest and Row Level Security to protect your data.

8.2 Stream — Integrated Audio/Video Calling

Live recitation sessions are powered by Stream (getstream.io), a third-party real-time communication provider. Stream processes the technical data necessary to establish and maintain audio and video calls between users. As stated above, sessions are not recorded or retained by Awliyah. Stream's data handling is governed by its own privacy policy and applicable data-protection standards.

8.3 Disclosure Required by Law

Awliyah may disclose personal information where required to do so by applicable law, court order, regulatory directive or the lawful request of a government authority. Any such disclosure will be carried out only to the extent required and will, where legally permissible, be communicated to you.

8.4 No Other Sharing

Beyond the service providers listed above, Awliyah does not share your personal information with any other third party. We do not use third-party analytics platforms, advertising networks, data brokers or behavioural tracking tools. Your profile information visible on the Platform is accessible to other registered users as described in Clause 7; it is not transmitted to any external system beyond Supabase for storage.

9. Cross-Border Transfer of Data

Awliyah is committed to complying with PIPEDA's requirements for the transfer of personal information across borders. Your data is stored by Supabase in servers located in the United States (East US — Ohio region). By using the Platform, you acknowledge that your personal information may be transferred to and processed in a jurisdiction outside Canada.

Awliyah takes appropriate steps to ensure that cross-border transfers are carried out with adequate protections in place. Supabase maintains contractual commitments to data security and confidentiality, and is subject to applicable data-protection obligations consistent with those required under PIPEDA and aligned with GDPR standards. We do not transfer your data to jurisdictions that do not offer adequate protection, and we do not authorise overseas recipients to use your information for any purpose other than the one for which it was transferred.

10. Data Retention and Deletion

10.1 Active Accounts

Personal information associated with your account — including your name, email, profile details, voice recording and location — is retained for as long as your account remains active on the Platform. We do not impose an inactivity-based deletion period; your data is retained unless you take active steps to close your account.

10.2 Account Deletion

When you delete your account, Awliyah permanently removes your personal profile data, including your name, email address, gender, age group, location, profile bio and voice recording. Sessions that you created as a host are also deleted. Sessions in which you participated as a partner are retained in anonymised form — your participation is disassociated from any identifying information — so that the session history of other users is not disrupted.

10.3 Session Records

Anonymised session records — such as timestamps, duration and ratings — are retained indefinitely for the purposes of community safety, accountability and platform integrity. These records, once anonymised, can no longer be linked to any identifiable individual.

10.4 Requesting a Copy of Your Data

You may request a copy of all personal information that Awliyah holds about you by contacting our Privacy Officer at the details provided in Clause 14 of this Policy. We will respond to such requests within a reasonable timeframe and in accordance with our obligations under PIPEDA.

11. Security Safeguards

Awliyah takes the security of your personal information seriously and has implemented a combination of technical and administrative safeguards appropriate to the nature and sensitivity of the data we hold.

Our security measures include the following:

SSL/TLS encryption for all data transmitted between your device and our servers, ensuring that information in transit cannot be intercepted;
AES-256 encryption for data stored at rest within Supabase, providing a high standard of protection for stored personal information;
Row Level Security (RLS) within the Supabase database, ensuring that users can only access the data they are authorised to view;
Two-factor authentication (2FA), available to users who wish to add an additional layer of security to their account login; and
Minimal data collection practices, which reduce the amount of information held at any given time and thereby limit exposure in the event of a security incident.

We do not collect precise location data, government identification or financial information, which significantly reduces the risk profile of the data we hold. While Awliyah implements rigorous safeguards, no digital system is entirely immune to risk. In the event of a security incident affecting your personal information, Awliyah will take prompt steps to contain the incident, assess its scope and notify affected users and relevant authorities in accordance with applicable legal obligations.

12. Your Rights

12.1 Right to Access

You have the right to request access to the personal information that Awliyah holds about you. This includes your profile data, account details and session records associated with your account. Upon request, we will provide you with a summary or copy of this information in a reasonable format.

12.2 Right to Correction

If any of the personal information we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Many profile details — such as your first name, location and profile bio — can be updated directly through the Platform. For information that cannot be self-edited, you may contact us using the details in Section 14.

12.3 Right to Deletion

You have the right to request the deletion of your personal information. The most effective way to exercise this right is to close your account through the Platform, which will trigger the deletion of your profile data as described in Section 10. For any data-deletion request that cannot be fulfilled through self-service, please contact our Privacy Officer.

12.4 Right to Withdraw Consent

As described in Clause 6.2, you may withdraw your consent to our processing of your personal information at any time by closing your account. You may also contact us directly if you wish to withdraw consent for a specific processing activity without closing your account, and we will advise you of the available options.

12.5 Right to Data Portability

Where technically feasible and legally applicable, you may request that certain personal information you have provided to us be delivered to you in a structured, machine-readable format. This right applies to data that you have directly provided and that is processed on the basis of your consent.

12.6 How to Exercise Your Rights

To exercise any of the rights described above, please contact Awliyah's Privacy Officer using the contact details set out in Clause 14 of this Policy. We will acknowledge your request promptly and will endeavour to respond within thirty (30) days. Where a request requires additional verification to confirm your identity, we will inform you of the information required before proceeding.

13. Changes to This Privacy Policy

Awliyah may update or revise this Privacy Policy from time to time to reflect changes in our services, applicable law, regulatory requirements or operational practices. When a material change is made, we will update the "Effective Date" at the top of this document and will notify registered users by email or through a prominent notice on the Platform.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms, except in circumstances where applicable law requires your explicit consent for specific changes. If you do not agree with a revised Policy, you may close your account and discontinue use of the Platform. We encourage you to review this Policy periodically to remain informed about how we handle your information.

14. Contact and Privacy Inquiries

Awliyah is committed to addressing privacy-related concerns promptly and in good faith. If you have any questions, concerns or complaints regarding this Privacy Policy or the way in which your personal information is handled, or if you wish to exercise any of the rights described in Clause 12, please contact our designated Privacy Officer:

Privacy Officer:Sohaib Ahmed

Email:awliyahdev@gmail.com

Platform:www.awliyah.app

We will acknowledge all privacy inquiries within a reasonable period and will make every effort to resolve your concern within thirty (30) days of receipt. Where a matter requires further investigation, we will keep you informed of its status and anticipated resolution timeline.

15. Effective Date

This Privacy Policy becomes effective on 06.05.2026 and supersedes all previous privacy notices or statements published by Awliyah. It remains in force until amended or replaced in accordance with the procedure described in Clause 13 of this Privacy Policy.