Al Noor Quran App — Privacy Policy

Last updated 12 August 2026

About this policy

Al Noor Quran App is a Qur'an memorisation and school-management app used by a single girls' Qur'an school. It is operated by the school together with Tecwa Labs. This policy explains exactly what the app stores, why, and who can see it. The same document is in the app itself, at Settings › Privacy policy.

The short version. Al Noor Quran App holds the school's own records — who each girl is, and how her memorisation is going. There is no advertising, no tracking and nothing sold to anybody; no photograph of a child is collected at all; and the brief sent for AI analysis carries only codes and numbers.

What the app stores

Her school record: her full name, her class or group, her age if the family gave one, a favourite colour, and the note the office took at her interview.
Her memorisation record: pages and juz, test results, attendance, behaviour notes, streaks, points and badges — the same things a paper mark book would hold.
A school code for her, such as SBQ-0142. It stands in for her name in exports, in the workbook and in any AI analysis.
Family details: her parent's name, email address, phone number and an emergency contact number.
Accounts: a username for each admin, teacher and parent. Her password is created by the school and given to her in person. It is never emailed and never put in a message. In the school's cloud records it is kept only as a cryptographic hash — never as readable text, and never in our activity logs.
One exception to that, and it is deliberate, because the office has to be able to tell you your password: the admin's own device keeps a readable copy of the passwords it has issued, until the office clears that list. It stays on that one device, is never uploaded to the school's records, and is left out of device backups. You can change your password in the app whenever you like, and if you forget it the office will issue a new one when you next come in.
Messages between the school office and a teacher or parent.

Who can see what

The school decided, deliberately, that a girl is celebrated by name. Her memorisation record is a different matter, and stays between her family and her teachers.

The leaderboards in the app and the TV board inside the school show her full name, the character avatar she chose and her points, to the school community — the celebration a wall chart would give her.
Her memorisation record — tests, pages, attendance, behaviour, reports — is for her own parent and the school's staff. A parent sees her own daughters only; another family's row on the leaderboard stays a row and does not open.
Teachers see the girls they teach; an admin may widen that. The admin sees the whole school.
The TV board is read-only and reachable only through a private link the admin generates, and it signs in as a read-only account before it reads anything.

AI analysis — a code, never a name

The school office can ask Al Noor for written insight into how the school is going, which is answered by an AI service (Anthropic's Claude). What leaves the device is the school's numbers and each girl's code — no names, no class names, no contact details, no photographs.

The office's own question is sent with it, and before it leaves the app replaces every name it holds — every girl whatever her status, every teacher and every parent — with that person's code. A name the app does not hold cannot be recognised, so the screen tells the office to use the school's own names.

The answer comes back in codes, and the app turns them back into names on the admin's own phone. So she reads a real name while the AI service only ever saw a code. Briefs are not used to train anybody's model.

Photographs of children — none

Al Noor does not take, ask for, upload or keep a photograph of a child. There is nowhere in the app to add one.

Her avatar is one of a set of drawn characters she picks herself, on the background colour she chooses — so there is no photograph to protect in the first place.

An earlier version of the app planned to turn a photo into a cartoon. That is not part of this release, and any photograph a school device was still holding from it has been deleted.

Notifications

If she allows it, Al Noor can send a notification to her phone when the school sends her a message. Android asks her permission the first time, and saying no is a normal answer — the app works the same, she just checks the inbox herself. She can also turn them off later in her phone's own settings.

To deliver one, her phone is given an identifier by Google's messaging service. It is stored on her account record and removed when she signs out, so a shared school phone never keeps sending one family's notifications to another.

The notification itself deliberately says almost nothing: that there is a new message, and nothing more. No girl's name, no school code, and no part of the message. A notification is drawn on a locked screen that anyone holding the phone can read, so it is the last place her details should appear.

Where the data lives

Al Noor works fully offline: everything is written to the device first and synchronised to Google Firebase (Firestore and Authentication) when a connection is available, over an encrypted connection. The school's data is hosted in Google's Australian region (Sydney). Notifications are delivered through Google's messaging service, which is what carries them to her phone.

What we do not do

No advertising, and no advertising identifiers.
No tracking across other apps or websites.
No selling or sharing of personal information.
No analytics profiles built on individual children.

Keeping and deleting data

Records are kept while a girl is enrolled, and afterwards for as long as the school needs them as an academic record. A parent can ask for deletion inside the app (Settings › Request account deletion) or by contacting the office; the office confirms with her, actions it, and the change is recorded in the school's audit log.

Children's privacy

Children do not hold accounts in Al Noor. A parent or the school holds the account, the school decides what is recorded, and the app is used by adults on the school's behalf. If you believe something about your daughter was recorded in error, tell the office and it will be corrected or removed.

Your rights

You may ask to see, correct or delete the information held about your family. Contact the school office, or email the address below, and we will respond within a reasonable period.

Changes

If this policy changes materially, the school will tell families through the app's notice board and update the date above.

Contact

Questions about this policy or your family's data: speak to the school office, or email women.masjidalnoor@gmail.com.

For technical questions about the app itself: info@tecwalabs.com