Dawrah
Privacy at Dawrah
Last updated 1 September 2026 · Applies to the Dawrah iOS beta
The short version
- We do not record or keep your voice. Audio is transcribed live as you speak and then discarded. No recording is written to your phone or stored on our servers, ever.
- We do not train any AI model on your recitation.
- There is no advertising, and nothing that follows you to other apps or websites.
- We do not sell or share your data for anyone else's purposes.
- We keep text, not audio. For ayahs you got wrong, we store which words differed so revision can be planned around them.
I Who is responsible for your data
The data controller for Dawrah is Nuha Mohamed, based in the United States.
For any privacy question, correction, or deletion request, contact team@dawrah.ai.
II Your voice, specifically
When you begin reciting, Dawrah opens a live connection to a speech-to-text provider and streams your microphone audio in small pieces. The provider returns the words it hears in real time so the app can follow along with you.
The audio exists only for the moment it takes to transcribe. It is not saved to your device, not uploaded to our servers, and not retained by us in any form. The provider receives no name, no account identifier, and nothing else that identifies you. It does not keep the audio after transcribing it, and does not use it to train its models.
What we retain is text, and only for ayahs you recited incorrectly: which ayah, which words differed, and what the transcription heard. If you recite an ayah correctly, nothing about it is stored beyond the fact that you completed it.
On biometric data. Voice recordings can constitute biometric data under the GDPR, but only where they are processed for the purpose of uniquely identifying a person. Dawrah never does this. Your audio is used solely to convert speech to text and is never used to identify, authenticate, or distinguish you. It is therefore not special category data under Article 9.
III What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account identifier | A random ID created on first launch so your progress can be saved and retrieved. Not linked to an email address or Apple ID in the beta. | Art. 6(1)(b)Performance of a contract |
| Age | Asked once, before anything else, to confirm you are 13 or over. Anyone younger is refused and nothing about them is stored. Your age is kept so you are not asked again. | Art. 6(1)(c)Legal obligation |
| First name | So the app can greet you. You choose it and it can be anything. | Art. 6(1)(b)Performance of a contract |
| What you have memorized | The juz, surahs and ayah ranges you selected, so revision can be planned around them. | Art. 6(1)(b)Performance of a contract |
| Live audio | Transcribed to text in real time so the app can follow your recitation. Discarded immediately. | Art. 6(1)(b)Performance of a contract |
| Recitation mistakes | Which ayah, which words, and the transcribed text. This is the core of how revision is scheduled. | Art. 6(1)(b)Performance of a contract |
| Session history | Dates, portions covered, and progress through each juz. | Art. 6(1)(b)Performance of a contract |
| Settings | Preferred session length and reminder time. | Art. 6(1)(b)Performance of a contract |
| How fast you recite | An average time per page, measured from your own sessions, so the daily portion is sized to you rather than to an assumed pace. | Art. 6(1)(b)Performance of a contract |
| Crash reports and app performance | When the app fails, a report of what it was doing at the time. We also sample a fifth of sessions for timing information, which records which screens were opened and how long steps took. Neither carries your name, your recitation, or your IP address. | Art. 6(1)(f)Legitimate interest in a working app |
| How you use the app | Which screens you open, which features you use, and how far you get through the things you start, so we can see what works and what does not. This is tied to your account, so that one person's pattern can be told apart from another's. It is not switched on yet. It is set out here in advance so you know before it begins, which will be during the beta. | Art. 6(1)(f)Legitimate interest in improving the app |
Dawrah does not collect advertising identifiers, contacts, location, or browsing history, and it shows no advertising.
IV Who else receives it
| Recipient | What they receive |
|---|---|
| Our speech-to-text provider | Your live audio during recitation, for transcription only. No identifying information accompanies it, it is not retained after transcription, and it is not used to train their models. |
| Our database and hosting provider | Database hosting for everything in section III, stored on our behalf. |
| Apple | TestFlight beta participation and crash reports, under Apple's own privacy policy. |
| Our crash reporting provider | Crash reports and the performance samples described above. Configured so that no personal identifiers are attached: no IP address, no account ID, and nothing you recited. |
| Our analytics provider | Which screens you open, which features you use, and how far you get, tied to your account identifier. Not your name, and nothing you recited. Applies once the row in section III is switched on. |
| The Qur'an text service | Nothing about you. The app requests the text of an ayah, the same as loading a page. |
Each processor is bound by a data processing agreement requiring them to protect your information and use it only for the purpose we specify. We do not share data with advertisers or data brokers.
We may disclose information where we are legally required to do so, or where it is necessary to investigate fraud, protect the security of the service, or protect the rights and safety of our users.
V Where your data is stored
Your account data is stored on servers in the United States. Crash and performance reports are processed in the United States too. Audio is transcribed on servers in the European Union and is not retained after transcription.
Where data is transferred out of the country you are in, that transfer is covered by Standard Contractual Clauses within our agreements with those providers.
VI How long we keep it
- While you use Dawrah, your data is kept so the app can function.
- On request, we delete everything associated with your account, ordinarily within 30 days.
- Dormant beta accounts with no activity for 12 months are deleted.
- At the end of the beta, accounts that have not been carried over to a full account are deleted.
- Audio is never retained, so there is nothing to delete.
VII How we protect it
All traffic between the app, our database and our providers is encrypted in transit. Access to your records is enforced at the database level, so one account cannot read another's data even if the app were modified. Audio is streamed over an encrypted connection and never written to storage.
No system can be guaranteed absolutely secure, and we cannot promise that a determined attack would never succeed. We would notify affected users and the relevant regulator of any breach that put your data at risk, within the time limits the law sets.
VIII Your rights
You have the right to:
- Be informed about how your data is used, which is what this page is for
- Access a copy of the data we hold about you
- Have inaccurate or incomplete data corrected
- Have your data erased
- Restrict how we process your data
- Receive your data in a portable format
- Object to processing carried out on the basis of legitimate interest
- Not be subject to solely automated decisions with legal or similarly significant effects
To exercise any of these, email team@dawrah.ai. Because beta accounts have no email attached, please include the account ID shown on the app's Settings screen so we can find the right records.
You also have the right to complain to your data protection authority, and you do not have to come to us first, though we would rather you did.
That is the supervisory authority for the country you live in. In the European Economic Area, the European Data Protection Board keeps the list of them.
Similar rights apply under other regimes, including the California Consumer Privacy Act. We honor these requests regardless of where you live.
Please do not send us sensitive information. Dawrah needs a first name, an age and what you have memorized and nothing else, so anything beyond that will be deleted rather than kept on file.
IX Children
Dawrah's beta is intended for people aged 13 and over, and we do not knowingly collect information from children under 13. If you believe a child has used the beta, email team@dawrah.ai with the subject line "Underage use" and we will delete the data.
X Two things to know about the beta
Your data lives on one phone
The beta has no sign-in. Your progress is tied to an identifier stored on the device you set it up on. If you delete Dawrah, or move to a new phone, that progress is gone permanently and cannot be recovered, because there is no password or email attached to it. Sign-in is planned and will carry your history over when it arrives.
Dawrah is not a teacher
Speech recognition is imperfect, particularly with Qur'anic Arabic. Dawrah will sometimes flag a correct recitation as wrong, and will sometimes miss a real mistake. It is a tool for structuring your own revision. It is not a substitute for a qualified teacher and confers no certification of any kind. Please do not treat its judgement as authoritative.
XI Changes to this policy
The date at the top shows when this policy last changed. Minor clarifications take effect immediately. If we change what we collect, why we collect it, or who receives it, we will notify beta testers directly and give 30 days' notice before the change takes effect, rather than quietly editing this page. By using Dawrah you accept the practices described here.
XII Contact
Questions, corrections, complaints, or a deletion request: team@dawrah.ai