Mushafy Türkçe

Privacy Policy

Last updated: 30 October 2026

Mushafy (“the app”) is published by Enes Kirca (“we”, “us”). This policy explains what information the app and the website mushafy.app handle, why, and the choices you have. If you have a question, write to [email protected].

In short

  • There is no account. We never ask for your name, email address or phone number.
  • Your bookmarks, notes, favorites, reading plans and settings stay on your device.
  • The app shows no ads, and we do not sell your personal information.
  • A random install ID lets subscriptions and issue reports work without us knowing who you are.
  • Advertising measurement that tracks you across apps only happens if you allow it in Apple’s tracking prompt.

1. Information that stays on your device

Bookmarks, personal notes, favorites, reading plan progress, streaks, your reading position, settings, downloaded recitation audio and the ayah shown in the widget are stored only on your device. We cannot see them. They are part of your device backups like other app data, and deleting the app deletes them.

The Ayah of the Day and trial reminders are notifications that the app schedules on your device; we do not use push notification tokens. When you save an ayah image, the app asks for permission to add it to your photo library. It does not read your photos.

2. Information we process

Install ID

On first launch the app creates a random identifier for this installation. It is not your name or your Apple ID, and we do not link it to either. It is used as your customer ID for subscriptions, attached to issue reports, and used for usage statistics when those are enabled.

Subscriptions

Purchases are made through Apple. We never receive your payment card details or your Apple ID. We use RevenueCat to check purchases and keep track of whether your subscription is active. RevenueCat receives the install ID, your App Store transaction and subscription details, technical information about your device and the app (such as model, iOS version, app version, language and country or region), your IP address and Apple’s identifier for vendors. If you allow tracking, it also receives your device’s advertising identifier.

Issue reports

When you use “Report an issue”, we receive the ayah, the kind of issue, the text you write, the app and content version, and the install ID. Reports are stored on our servers in the European Union and are used only to review and correct the content. Please do not include personal information in a report. We keep reports only as long as we need them for that purpose.

Content updates and recitation audio

The app downloads content updates and settings from our servers (api.mushafy.app), recitation audio from our audio server (audio.mushafy.app) or, if that is not available, from everyayah.com, and app updates from Expo, the company that provides the app’s update service. Like any web server, these receive your IP address and basic request details. We use the IP address on our servers only to deliver files and to limit abuse; we do not store it with your reports or use it to build a profile. Our server logs are kept only briefly, for security and troubleshooting.

Usage statistics

When usage statistics are enabled in your version of the app, it sends a small, fixed set of events to PostHog, our analytics provider: for example that an onboarding step or the subscription screen was viewed, a study section was opened, an ayah was shared or a recitation started (with the ayah number), or a reading plan day was completed. Each event carries the install ID and basic technical information about the device and the app. RevenueCat also passes subscription events (such as a trial start) to PostHog. We use these statistics to understand, in aggregate, which features help people. They are not used for advertising.

Advertising measurement

We advertise Mushafy on Meta’s platforms (Facebook and Instagram). To learn which of our ads lead to installs and subscriptions, the app can include Meta’s software development kit, which sends app events such as installs and app opens to Meta, and RevenueCat passes subscription events such as trial starts and purchases to Meta.

The app asks for your permission with Apple’s App Tracking Transparency prompt. If you allow tracking, these events can be linked to your device’s advertising identifier so Meta can match them to our ads. If you choose “Ask App Not to Track”, we tell Meta’s software that tracking is not allowed, and the app does not give your advertising identifier to anyone. You can change your choice at any time in iOS Settings › Privacy & Security › Tracking.

The website

mushafy.app uses no cookies, no analytics and no third-party scripts. It is delivered through Cloudflare, which processes visitors’ IP addresses to serve the site and protect it from attacks.

3. Who processes your information

We use these service providers, each only for the purpose described above:

We do not sell your personal information. We do not share it with anyone else unless the law requires us to.

4. Legal bases

Where data protection laws such as the GDPR, the UK GDPR or Türkiye’s Law No. 6698 on the Protection of Personal Data (KVKK) apply, we rely on these legal bases:

5. International transfers

Some of our providers process information outside your country, including in the United States. Where the law requires it, these transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

6. How long we keep information

Information on your device stays until you delete it or the app. Issue reports are kept until we have reviewed and acted on them. Server logs are kept only briefly. Subscription records are kept by RevenueCat for as long as needed to provide your subscription and to meet legal and accounting obligations.

7. Your rights

Depending on where you live, you may have the right to access, correct or delete your personal information, to object to or restrict its use, to receive it in a portable format, and to withdraw consent. To use these rights, write to [email protected]. Because there is no account, please tell us what helps us find your information, for example the approximate date of an issue report or the order ID from your Apple purchase receipt. You also have the right to complain to your data protection authority; in Türkiye that is the Personal Data Protection Authority (KVKK).

8. Children

Mushafy is made for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children.

9. Security

All connections between the app and our servers are encrypted. We limit what we collect, and only we can access our servers.

10. Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change is significant, we will also tell you in the app.

11. Contact

Enes Kirca
[email protected]