Last updated: September 29, 2026
Layl: Quran Memorization (“Layl,” “the app,” “we,” “us,” “our”) is developed and operated by Al Hidayah Apps, an individual developer operating as a sole proprietorship based in New York, United States (not a separately incorporated company). This policy explains what information Layl collects, why, how it’s stored, and the choices you have — including how to delete it yourself, directly in the app.
Reading, streaming recitation, and the free memorization courses are available without an account. A Layl account is required to purchase, restore, or use Premium and to sync your library and progress across devices. Apple processes subscriptions; verified purchases are linked to the Layl account used to subscribe. Basic operational analytics and network requests may occur even when you are signed out.
1. Information We Collect
Account information. If you choose to sign in, Supabase processes your email address, account identifier, and authentication information. Email accounts use an email address and password, with an email confirmation link to verify ownership. Apple or Google sign-in provides an account identifier, email address, and profile information such as your name when made available. Apple may provide a private relay email address. Apple and Google handle their own credentials; Layl does not receive your Apple or Google password. Google sign-in requests basic identity, email, and profile access, not access to your Gmail messages, Drive files, or contacts.
Content you create in the app. If you’re signed in, the following syncs to our servers so it’s available on your other devices:
- Bookmarks and bookmark collections
- Favorite surahs and favorite reciters
- Playlists
- Memorization progress and quiz results
- Listening session history (which surah, and how long you listened)
When you are signed out, your library and practice records are stored locally rather than synced to a Layl account. Basic operational events and network requests described below are separate from library syncing.
Subscription status. If you subscribe to Layl Premium, Apple processes the payment entirely. We never see your card number, billing address, or Apple ID password. The app checks verified purchase and entitlement information from Apple to unlock Premium. A purchase event may also include the product identifier in our operational analytics.
Device storage and reminders. Settings and downloaded audio are stored on your device. Device backups may be managed by Apple according to your settings. Optional listening and memorization reminders are scheduled locally using Apple’s notification system. The Apple Watch companion exchanges supported app information with your paired iPhone.
Operational information. We record a small set of events, such as app opens, sign-ups, paywall views, and completed purchases, to operate and improve Layl. Events include a random app-generated device identifier, an account identifier when signed in, the event time, and limited event details such as a product identifier. Our hosting and audio-delivery providers may process IP addresses and request logs when you connect, stream, or download audio. Support emails include the information you choose to send.
Information we do not collect. Layl contains no advertising and no third-party analytics or advertising SDKs. We do not access your camera, microphone, photos, contacts, or precise location, and we do not track you across other companies’ apps or websites.
2. How We Use Information
We use the information described above solely to:
- Sync your bookmarks, favorites, playlists, and progress across your own devices
- Let you resume where you left off
- Determine whether Layl Premium is active on your account
- Understand basic usage and purchase events, troubleshoot issues, and improve reliability
We do not sell, rent, or share your personal information with advertisers or data brokers, and we do not use your information for any purpose beyond operating and improving Layl.
3. Availability
Layl is currently offered only in the United States and is not available for download in the European Economic Area, the United Kingdom, or Switzerland. If you access Layl from outside the United States, you do so with the understanding that your information will be transferred to and processed in the United States as described below.
4. Where Information Is Stored and Security
Account and sync data is stored with Supabase, our backend infrastructure provider, on servers located in the United States (Oregon), using encrypted connections (HTTPS/TLS) for account and sync traffic. Database access rules restrict signed-in users to their own account data. Supabase, Postmark (for account confirmation and other authentication emails), Apple, Google (when you choose Google sign-in), and hosting or audio-delivery providers process information needed to provide their services. Authorized administrative access may be used to operate, secure, and support Layl.
No method of electronic storage or transmission is 100% secure. While we take reasonable, industry-standard measures to protect your information, we cannot guarantee absolute security.
5. Your Rights and Choices
You are always in control of your data:
- Use Layl without an account. Reading, listening, and free memorization courses are available signed out. Library and practice records remain local unless you sign in to sync; Premium restrictions still apply.
- Sign out at any time from Settings — this stops any further syncing.
- Delete your synced data yourself, in the app. Settings → Data privacy control → “Delete my data” erases bookmarks, favorites, playlists, and practice records on this device and, when signed in, from the server after confirmation. Your account and downloads are kept. Offline requests may remain pending until the server confirms deletion. This requires a two-step confirmation to prevent accidental deletion and cannot be undone.
- Delete your account yourself, in the app. Settings → Data privacy control → “Delete account” deletes your account along with its synced library and practice history from our servers. Data already on your device is kept. Neither action cancels an Apple subscription. This also requires a two-step confirmation and cannot be undone.
- Request, correct, or export your data by emailing us at the address below, if you’d prefer we handle a request directly rather than using the in-app tools.
If you are a resident of California, Virginia, Colorado, Connecticut, or another U.S. state with a comprehensive consumer privacy law, you have the right to know what personal information we collect and to request its deletion or correction. The in-app controls above provide data and account deletion. Contact us for other access or correction requests; we may need to verify account ownership. We do not sell or share personal information (as those terms are defined under the California Consumer Privacy Act and similar state laws), and we do not use or disclose sensitive personal information for purposes requiring an opt-out.
6. Data Retention
We retain account and synced library or lesson-progress data until you delete it or it is no longer needed to provide the service. The app maintains a rolling 90-day activity history; lesson completion and best practice stars are retained separately. Basic analytics events are scheduled for deletion after 90 days. Server data deletion requires a successful connection and confirmation; backup and operational-log retention may differ from live app data. We may retain information needed to meet legal obligations, prevent abuse, or resolve support issues, and aggregated statistics that no longer identify you.
7. Children’s Privacy
Layl is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us at the address below and we will delete it.
8. Changes to This Policy
If we make material changes to this policy, we will update the “Last updated” date at the top of this page. Continued use of Layl after a change becomes effective constitutes your acceptance of the revised policy.
9. Contact Us
Questions about this policy, or requests concerning your data, can be sent to:
Al Hidayah Apps is operated by an individual developer based in New York, United States.