Privacy Policy

Last updated November 8, 2026

QuranStudio ("we", "us") turns a Qur'an recitation into a subtitled video. This page explains what we collect to do that, why, how long we keep it, and what choices you have. We wrote it to describe what the product actually does, not a generic template.

What we collect

Your email address. Used to sign you in (a one-time code sent to your inbox, or "Sign in with Google") and to reach you about your account.
A password, if you created your account before passwordless sign-in existed. We never see or store it in plain text — only a salted hash. New accounts sign in with a one-time code or Google and never set one.
Your IP address, briefly, to stop abuse: it is checked against short-lived rate limits on sign-in and submission and is attached to a sign-in code's record for that purpose. It is never stored in our product-analytics data (see below).
The recitation you submit — a link you paste, or a file you upload — and the video we render from it.
Basic usage events — things like which step of the wizard you reached or that a video finished rendering — to understand how the product is used, in aggregate. These events never include your email address, your IP address, or any filename or link you submitted.
A device fingerprint, used only to recognise "have we seen a sign-in from this device before?" so we can email you if a new one appears. It is a one-way hash of your browser and a coarse network identifier — never the raw values, and never usable to identify the device outside that one check.
Without an account, when the site is open to everyone: the first video you create gives your browser an anonymous guest profile, kept by its session cookie, so you can come back to your video. No email or name is attached to it. To keep the free daily limit fair, each video you create is counted against your IP address and a one-way hash of your browser's characteristics (not the raw values), and both appear in our short-lived security logs for that purpose only.

How long we keep it

Uploaded recitations and rendered videos are deleted automatically 24 hours after your video finishes. Not archived, not backed up for later — gone. This is a genuinely strong position and we want you to know about it here, not only in this policy: nothing of yours sits on our servers beyond a day. Download your video within that window; the exact expiry time is shown when your video is ready, on the download page, and in the completion email.

We keep a record that a job happened — when, how long it took, which language — for our own analytics and to show you your history. That record never contains the recitation itself, the file, or a link to it once the 24 hours pass.

Usage events are kept in identifiable form for 90 days, then reduced to daily aggregate counts with no per-visit or per-account detail, kept indefinitely for product statistics.

Your account record is kept for as long as your account is active. See Your rights below for what happens when you delete it.

Who we share it with

We use a small number of services to run QuranStudio. None of them may use your data for their own purposes.

Resend — sends the emails we send you (sign-in codes, account notices). Resend receives the recipient address and the message content needed to deliver it.
Groq — transcribes the recitation audio you submit, so we can locate and time it against the Qur'an to build your subtitles. Groq receives the audio and returns text; it is not used for anything else.
Cloudflare — sits in front of the site and, where enabled, verifies you are a person rather than a bot before you sign in or submit a job (Turnstile). We chose Turnstile specifically because, unlike some alternatives, it does not use your activity for advertising. Cloudflare can also receive your recitation audio, as a fallback transcriber used only when Groq is unavailable.
Google — if you choose "Sign in with Google", Google handles that sign-in and shares back your email address and a Google account identifier. We never see your Google password.

Cookies

We use only cookies the site needs to function: a signed session cookie (keeps you signed in and protects the site's forms), and, if Cloudflare Turnstile is enabled, a cookie it sets to complete its check. The same session cookie carries a random, non-identifying id we use to connect the handful of events in one visit — we do not set a separate tracking cookie for this. We do not use advertising cookies and no third-party analytics script runs on this site.

Your rights

Access & export

You can request a copy of your account information and job history as a JSON file.

Deletion

You can delete your account yourself, from Settings — we do not require you to email us to ask. Deleting your account:

permanently deletes your videos and uploads, your support messages, and your quota records;
removes your account id from your past usage events, so only the anonymous aggregate counts remain;
clears your password and any linked Google sign-in from the account record, so you can no longer sign in to it.

Your email address is not deleted. We keep it on a locked record that can never be signed into, specifically so that address — and any alias of it (for example, the same address with a "+tag" added) — can never be used to open another account. This is a deliberate, permanent measure against abuse: deleting your account is not a way to start over with the same address.

See Account access and recovery in the Terms of Service for what this means if you want to come back.

Children's privacy

QuranStudio is not directed at children and we do not knowingly collect information from anyone under 13 (or the minimum age in your country). If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If we change what we collect or how we use it, we will update this page and change the date above. We will not make a material change apply retroactively without telling you.

Contact

Questions about this policy, or a request to exercise any of the rights above: see the Contact page.