Privacy policy

IsNoor (“we”) is a daily web app for learning Islam. If you have a question about this policy or your data, write to us through the contact page.

You don’t need an account to use IsNoor: anyone can read everything on the site. An account is only needed to save your progress, reflections and saved insights. If you browse without one, we store nothing about you beyond the browsing preferences described under “Cookies and local storage”.

If you create an account, we collect four kinds of information.

• Your account (only if you create one): first name, an optional last name, your email address, and your password. The password is stored only as a bcrypt hash, so we cannot read it.
• Your preferences: interface language, learner level, pace, time zone (so we know what “today” is for you), Arabic text size, whether the reflection prompt is on, and your answers to the sign-up questions (where you are with Islam, and your reasons for joining).
• Your activity: which days you opened the daily reading, insights you saved, reflections you write (private, shown only to you), and your progress through Seerah moments, Companions and Family moments, Basics steps and Tracks.
• Password resets: when you ask to reset your password we create a one-time token. It is stored only as a hash and expires after one hour.

If you use the contact form, your name, email address and message are emailed to our team. They are not stored in our database.

• To create your account and let you sign in.
• To show the daily reading in your language, at your level and pace, on the right day for your time zone.
• To save your insights, reflections and progress so you can pick up where you left off.
• To send the emails you ask for, such as a password reset, and to answer your messages.
• To keep the service secure.

We do not run advertising, we do not sell or rent your data, and we do not use third-party analytics, tracking scripts or social-media pixels.

Your data is stored on servers run by our hosting provider, Amazon Web Services (AWS). We send email through AWS Simple Email Service. These providers handle data only to run the service for us.

Fonts are included in the app itself at build time, so your browser does not contact a font service when you visit. We do not share your information with anyone else.

If you have an account, we set one essential cookie: the session cookie that keeps you signed in. If you browse without an account, we set small cookies that remember your reading preferences (language, learner level and who the explanations are written for) so pages show the way you chose. We use no advertising or analytics cookies.

Your browser’s local storage keeps a few settings on your own device: your theme (light or dark), your preferred language before you sign up, your recent searches, and your Seerah view preferences. These are never sent to us. You can clear them in your browser at any time.

Passwords are hashed, connections use HTTPS, and sign-in attempts are rate-limited to make guessing harder. No system is perfectly secure, but we take care to keep yours safe.

We keep your account data for as long as your account exists. You can delete your account yourself at any time in Settings, under Account: it is deleted immediately, together with everything linked to it (saved insights, reflections, progress and preferences). Server logs and backups roll off within 30 days.

You can ask us to:

• show you the information we hold about you (access);
• fix anything that is wrong (correction);
• give you a copy of your data (export);
• delete your account and everything linked to it (deletion) — you can also do this yourself, straight away, in Settings.

Make any of these requests through the contact page. We will respond within 30 days.

IsNoor is for learners of every age. Anyone can read it without an account. Children and young people under 18 need a parent’s or guardian’s consent to create an account, and a parent can ask us to delete their child’s account through the contact page.

If we change what we collect or how we use it, we will update this page and its effective date. The current version is effective from 15 October 2026.