Privacy Policy

1. About the Service & Scope

This Privacy Policy governs Flowers of Quran: the website flowersofquran.com, the learner portal and the Flowers of Quran Android application (Package ID: com.flowersofquran.app, coming soon to the Google Play Store). The service offers Quran-based reading, short quizzes, a garden of flowers that grows with progress, digital completion certificates and the Flowers of Quran Competition for children.

2. Information We Collect and Why

We believe in strict data minimization. We only collect the personal data needed to sign you in, keep each learner's progress, issue completion certificates and run the competition.

3. Family and Class Accounts

One mobile number can hold one learner (a personal account), a parent's children (a family account) or a teacher's class (a class account).

• Each learner has their own profile. Their name, age, progress, garden, quiz results, certificate and competition entry belong to them. Brothers and sisters never share progress, and one learner cannot see another learner's competition entry.
• The account holder looks after it. The parent, guardian or teacher who registered can add, change and remove learners, and can see each learner's progress on the account.
• Classes. A teacher who adds students confirms that their families agree. A learner with their own account can join a teacher's class with a class code; the teacher then sees that learner's progress in the class.

4. Sign-in Codes and Messages

• Sign-in codes. When we switch on sign-in codes, a short one-time code is sent to your mobile number by WhatsApp or SMS (and to your email address if we ask you to confirm it). The code only proves the number or email is yours. It expires within minutes and is not kept after it is used.
• WhatsApp messages. We may send helpful messages to the registered number — for example a reminder that a new level is waiting, that a certificate is ready, or news about the competition. A family or class receives one message per mobile number, not one per learner. Reply STOP at any time and we stop sending them; we keep your number on our opt-out list so the STOP keeps working.

5. Anonymous Visit Statistics

To understand which pages help families and where our visitors come from (for example a WhatsApp link, Instagram or the QR code in the printed book), our website counts visits in an anonymous, cookie-free way:

• We record the page viewed, how far down it was read, the time spent on it, where the visit came from, the type of device, browser and operating system, and the country and city.
• A visit is identified only by a random number kept in your browser. We never record names, phone numbers or email addresses with it, and we do not use cookies for it.
• The city is worked out from the connection when the visit arrives; the IP address itself is not stored.
• If your browser sends a “Do Not Track” signal, we do not count your visits at all.

6. Third-Party Service Providers (Data Processors)

We work only with reputable, enterprise-grade cloud service providers that adhere to rigorous international data security standards:

• Database & Authentication Provider: We use Supabase Inc. to store accounts, learner profiles and learning progress, and to manage authentication securely. Supabase complies with SOC 2 Type II, ISO 27001, and GDPR standards. All data transmission is encrypted using modern TLS 1.3 encryption, and data at rest is secured using AES-256 encryption with Row-Level Security (RLS) enforcement.
• Messaging Providers: Sign-in codes and WhatsApp messages are delivered through a WhatsApp Business messaging provider (with SMS as a fallback), and email codes through an email delivery service. They receive only the number or email address and the message itself.
• No Advertising SDKs: Flowers of Quran contains NO third-party advertising SDKs, NO ad networks, and NO targeted behavioral trackers.
• No Data Selling: We do not sell, rent, or trade your personal information to third parties, data brokers, or advertisers under any circumstance.

7. Children’s Privacy and Parental Consent

8. Separate from Our Sister Programmes

Flowers of Quran is one of several Quran-learning programmes by CharacterBee. Each programme is a separate service with its own accounts. Your Flowers of Quran account and every learner on it are used by Flowers of Quran only:

• The same mobile number registered with another programme is a different account there, with its own learners, progress and certificates. Signing in or registering here never creates or changes anything in another programme.
• No other programme, and none of its team, can see your Flowers of Quran account, and we never tell anyone whether a number is registered with another programme.
• Deleting your Flowers of Quran account removes it from Flowers of Quran only.

9. Data Retention Policy

We retain personal information and learning progress only for as long as your account remains active and as needed to provide our educational service. If you choose to delete your account, the account and every learner on it — profiles, progress, quiz results, certificates and class memberships — will be permanently removed from our active databases within 30 calendar days of receiving your verified request. A few things are kept on purpose: a removed certificate number stays reserved (without any name) so that it is never given to anyone else; a number that replied STOP stays on our opt-out list; and competition entries, which are sent separately on the competition form, stay with the competition's records — ask us if you would like an entry removed as well.

10. Your Rights and How to Delete Your Account

You can download everything we hold for your mobile number at any time: sign in, open Me → Account & learners and choose Download my data. A family or class account can also remove a single learner there. In full accordance with Google Play's Account Deletion Policy, there are several easy ways to permanently delete the whole account:

1. 1
   Inside the learner portal: sign in, open Me → Account & learners and choose Delete account. This removes every learner on that mobile number.
2. 2
   Via the Public Web Deletion Resource: visit our dedicated Account Deletion Page and submit your request without signing in.
3. 3
   Via Email Request: Send an email to ask@characterbee.com with the subject line “Account Deletion Request”, including your registered phone number and participant name.

A deletion removes the account from Flowers of Quran only (see section 8).

11. Security Safeguards

We implement robust technical and organizational security measures, including:

• HTTPS/TLS 1.3 encryption for all data exchanged between your device and our servers.
• Database Row-Level Security (RLS) ensuring each account can access only its own data, and each programme only its own records.
• Encrypted authentication tokens, and optional one-time sign-in codes.
• Our team signs in with individual accounts, roles that limit what each member can see or change, optional 2-step sign-in, and a log of every change they make.

12. International Data Transfers

Our educational services are accessed by participants globally. If you use our service from outside the jurisdiction where our cloud servers are located, your information may be processed and stored in servers managed by our cloud infrastructure provider (Supabase) in compliance with recognized international data transfer frameworks.

13. Policy Updates

We may update this Privacy Policy periodically to reflect enhancements in our service, legal obligations, or Google Play policy updates. When changes are made, we will update the “Last Updated” date at the top of this document. Continued use of the service following the posting of changes constitutes acceptance of the revised terms.