Privacy Policy

1. Who we are

Verse Widget ("the app") is developed and published on Google Play by VELOX APP LTD ("we", "us"), a company registered in England and Wales under company number 17186614, with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom. We are the controller of the analytics data described in section 4.

This policy covers the Verse Widget Android app only. Our company privacy policy covers this website and emails you send us. For any privacy question, or to use your rights, email [email protected].

2. Summary

• There is no account or sign-in.
• The app shows no ads of any kind. It contains no advertising software and does not use or ask for your advertising ID.
• The Quran text is bundled in the app. Showing verses needs no internet connection, and no verse you read is ever sent to us.
• Your reading position and widget settings stay on your device. We never receive them.
• The app uses Google Firebase (Analytics, Crashlytics and Remote Config) to count how features are used, to fix crashes and to read a few settings. In the EU, EEA, UK and Switzerland this is off until you tap Allow; everywhere, you can switch it off in Settings. See section 4 for exactly what is sent.
• The optional one-time unlock is handled by Google Play.
• The app does not use your location, contacts, microphone or camera.

3. What stays on your device

Your reading position, the verse each widget shows, the widgets' look (style, font, script, colours, refresh choice) and whether the unlock is active are stored in the app's private storage on your phone. They are not included in analytics or crash reports. Uninstalling the app or clearing its data deletes them. Android Auto Backup is switched off for this app, so no copy of the app's data goes to a cloud backup.

4. Analytics, crash reports and consent (Google Firebase)

The release version of the app is built with Google Firebase. Google provides Firebase Analytics, Firebase Crashlytics and Firebase Remote Config to us as a service provider (processor): Google processes this data on our behalf and on our instructions (Firebase privacy information). Builds made for development send none of this. When the statistics are on, this is what is sent, why, and how long it is kept:

• App interactions with fixed values only, for example that a widget was added or removed, which layout, style, font or refresh option was chosen, that the reader was opened, that the unlock screen was shown or a locked style was previewed, that a purchase started, completed, was cancelled or failed, that a contact button was tapped, and a daily summary of how many times the widgets refreshed and how long drawing took. They never contain the verse you read, your reading position or any text you typed. Used to decide what to improve and to check that widgets refresh reliably. Kept 2 months (our Google Analytics retention setting).
• Crash reports: stack trace, app state and device details at the time of a crash (device model, Android version, app version), and a random crash-reporting ID. Used to find and fix crashes. Kept 90 days.
• Automatic data and device properties: a random app-instance ID (not your advertising ID), country derived by Google from a shortened IP address, device model, Android and app version, language, whether the unlock has been bought, the app language, and one property, device_kind, that says whether the app runs on a real phone, an emulator, a test lab or a test robot (so test devices do not distort our numbers). In-app purchase events (product and price) are recorded too. Used to count users and sessions and for purchase statistics. Kept 2 months.
• Remote Config: the app asks Firebase for a few settings (our support contact details and which unlock product to offer). This request carries the Firebase installation ID and the usual device information. It is made only while the statistics are on.

We have switched off Google signals, ads personalisation and advertising-ID collection in Google Analytics, and we do not link it to any advertising product. We never set a user ID, and we cannot identify you from this data. We do not sell it or share it with anyone other than Google as our processor.

Your choice. If your phone’s language region or SIM country is in the EU, Iceland, Liechtenstein, Norway, the UK or Switzerland (EU, EEA, UK and Switzerland), the app shows a small bar at the bottom of the home screen, once, with three buttons: Allow, No thanks and More (this page). Nothing is collected by Firebase, and Remote Config is not contacted, until you tap Allow; No thanks keeps it off, and the bar is not shown again. Everywhere else the statistics are on by default and there is no bar. In every region you can change your choice at any time, and it applies at once, with the switch Settings > Privacy > Share anonymous usage stats and crash reports. Your choice is stored only on your phone, not in any event. Even with the statistics off, Firebase may create a random installation ID when the app starts; no event or crash data is sent with it.

Legal basis: your consent in the EU, EEA, UK and Switzerland (you can withdraw it at any time in Settings; withdrawing does not affect what was collected before); elsewhere our legitimate interest in keeping the app working and improving it, with an opt-out in Settings. To object, or if you have other questions, email [email protected].

5. No ads

The app has no advertisements, no ad networks and no ad measurement. The advertising-ID permission is removed from the app, and ad personalisation, ad user data and ad storage are switched off in Firebase. Nothing in the app is paid for by advertisers, and no data is shared with advertisers.

6. Purchases

The app is free, with an optional one-time unlock. Payments are processed by Google Play. We receive only purchase information from Google (such as order status, product, country and date) and never your card or payment details. The app asks Google Play whether the unlock was bought and keeps that answer on your device. See the Google Privacy Policy. Refunds: request within 48 hours through your Google Play order history; afterwards email us and we refund if the unlock does not work as described. Your statutory rights for faulty digital content, including under the Consumer Rights Act 2015, are not affected.

7. Sharing a verse and reporting a mistake

When you share a verse as an image, the app draws the image on your phone and hands it to the Android share sheet. It goes only to the app you pick. We do not receive it, and the file is kept in the app's temporary cache. The contact and Report a text error buttons open your own mail or WhatsApp app with a prepared message (app name and version, phone model, Android version and, for a text error, the surah and verse number and the script). Nothing is sent until you press Send.

8. Quran text and fonts

The Arabic text is from the Tanzil Project (tanzil.net) and is shown unmodified, under the Tanzil terms. The Arabic fonts (Amiri Quran, Noto Naskh Arabic, Scheherazade New and Amiri) are used under the SIL Open Font License 1.1. We show verses in full and exactly as provided; if you find an error, email [email protected] or use Report a text error in the app, and we will check it against the source. The app is a reading aid and does not replace a printed Mushaf or a qualified teacher.

9. Support emails

If you email us, we keep your message and address only to answer you. We delete them on request.

10. Retention and deleting your data

• On your device: uninstall the app or clear its data in Android settings. It exists nowhere else.
• Analytics and crash data: deleted automatically after 2 months (analytics) and 90 days (crash reports). Because there are no accounts and no identifier is shown to you, we cannot find this data by your name or email; if you tell us your phone model and the dates you used the app we will try, and we will tell you if we cannot.
• Purchase records: Google keeps them under its own policies; we keep order information only as long as needed for accounts and tax.

11. International transfers

Google processes data in the United States and other countries. It uses safeguards recognised by UK and EU law for such transfers, such as standard contractual clauses and, where applicable, the EU-US Data Privacy Framework and its UK extension.

12. Children

The app is not directed at children under 13, and we do not knowingly collect information from children under 13.

13. Your rights

Depending on where you live, you may have rights under the UK GDPR and EU GDPR to access, correct, delete or restrict the use of your personal data, to object to it and to data portability. Email [email protected]; we reply within 30 days. You may also complain to your local data protection authority; in the UK, that is the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

14. Changes to this policy

If the app's data handling changes (for example a new kind of analytics data or a change to the consent choice), we will update this page and its effective date before the new version is released.

15. Contact

VELOX APP LTD
128 City Road, London, EC1V 2NX, United Kingdom
Email: [email protected]