Privacy Policy
This policy explains what information the Harmain app (package com.harmain.plus) and this website collect, how we use it, who we share it with, and the choices you have. Harmain is published by Tabrez Pasha N, India ("we", "us"). If you have any question, write to info.easy24x7@gmail.com.
1. Who can use Harmain
- The worship tools (Quran, prayer times, Qibla, Tasbih, dhikr, Hijri calendar, Hajj and Umrah guides) can be used by everyone without an account.
- Creating an account and joining classes is for people who are 18 or older, or under 18 with the consent and supervision of a parent or guardian. If you are a parent or guardian and believe a child has created an account without your consent, write to us and we will delete it.
2. Information we collect
| Information | When | Why |
|---|---|---|
| Name, email address and sign-in identity (email and password, or Google Sign-In). Passwords are handled by Firebase Authentication; we never see them. | You create an account or sign in. | To create and secure your account. |
| Optional profile details such as phone number and profile photo. | You add them. | To show your profile and let scholars and students recognise each other. |
| Scholar application: bio, qualifications, experience, teaching formats and verification documents. | You apply to become a scholar. | So our team can verify scholars before they teach. |
| Classes: offerings you create or enrol in, sessions, attendance, reviews and notifications. | You use classes. | To run classes, show your schedule and keep a record of attendance. |
| Google Calendar connection (scholars only): see section 4. | A scholar chooses to connect Google. | To create Google Meet links for their classes. |
| Device location (approximate or precise). | You open prayer times or Qibla and allow the permission. | To calculate prayer times and the Qibla direction. It is processed on your phone and is not sent to our servers. |
| Settings and saved items (for example bookmarks, last read position, prayer reminder settings). | You use the app. | Stored on your phone. |
| Technical data such as your IP address, which any internet request reveals to the servers it reaches. | The app contacts our servers or the Quran text and audio sources. | To deliver content and keep the service secure. |
We do not collect payment information (classes are currently free), we do not show ads, and we do not record class audio or video. Classes are held on Google Meet, which is operated by Google under its own terms and privacy policy.
3. How we use information
- To provide the app: accounts, scholar verification, enrolments, class schedules, attendance and notifications.
- To keep the service secure, prevent abuse and fix problems.
- To respond to your requests and comply with the law.
We do not sell your personal information and we do not use it for advertising.
4. Google user data (Google Calendar and Google Meet)
Scholars can connect their Google account so that Harmain can create class events with Google Meet links.
- What we ask for: one permission,
https://www.googleapis.com/auth/calendar.events.owned(see, create, change and delete events on Google calendars you own). - What we do with it: when a scholar's class session has an enrolled student, Harmain creates one event for that session in the scholar's own Google Calendar, with a Google Meet link, and may update or remove that event if the session changes. We only use events that Harmain itself created. We do not read, list, copy or change any other event in your calendar.
- What we store: the access and refresh tokens Google gives us, the permission scope, the identifier and link of the events and Meet links we create, and when the connection was made. These are stored on our servers and can only be used by our backend; they are never sent to the app or to other users. Students receive only the Meet link of the class they are enrolled in, and only shortly before the class starts.
- Who sees it: our systems use the data only to provide this feature. It is not shared with anyone else except as needed to provide the feature (Google itself), to comply with the law, or with your consent.
- Disconnect any time: use Disconnect Google Account on the Google Account screen in the app, or remove Harmain at myaccount.google.com/permissions. When you disconnect or delete your account we delete the stored tokens and ask Google to revoke them.
Limited Use disclosure. Harmain's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In line with those requirements, we use Google user data only to provide and improve the user-facing Meet-link feature described above; we do not transfer it to others except as needed to provide that feature, to comply with the law, or as part of a merger or sale with notice to you; we do not use it for advertising or to train AI or machine-learning models; and no person reads it except where you ask us to, where needed for security or abuse investigations, or where the law requires.
5. Who processes information for us
| Service | What it does for Harmain |
|---|---|
| Google Firebase (Authentication, Hosting) | Sign-in and this website. |
| Supabase | Our database and server functions (project region: Singapore). |
| Google (Calendar, Meet, Google Sign-In) | Calendar events, Meet links and optional Google sign-in. |
| Public Quran text and audio sources | Content for the Quran reader. They see the request for the content (such as your IP address), not your account. |
These providers process information on our behalf under their own terms. Your information may be processed in countries other than India.
6. How long we keep information
We keep your account information while your account exists. Everyone, students and scholars, asks to delete their account in the app (or by email) and we complete the request within 30 days. Before deleting we cancel the sessions and enrolments that depend on the account and tell the people affected in the app (see Delete your account). We then delete or anonymise your personal information, as described on that page. Some records, such as security and audit records, and (if we introduce paid classes) payment, refund and dispute records required by law, may be kept for as long as the law requires, with your identity removed where possible. Information on your phone stays there until you clear the app's data or uninstall the app. Copies in backups are removed as the backups are replaced in the normal cycle.
7. Your choices and rights
- You can see and correct your profile in the app.
- You can ask us to delete your account in the app or by writing to us; we complete every request within 30 days.
- You can withdraw location permission and notification permission in your phone's settings; the worship tools that need them will then ask again.
- You can disconnect Google at any time (section 4).
- Under the Digital Personal Data Protection Act, 2023 and other applicable law, you may ask us to access, correct or erase your personal data, or to raise a grievance. Write to info.easy24x7@gmail.com. Grievance contact: Tabrez Pasha N.
8. Security
We use encrypted connections (HTTPS), sign-in through Firebase Authentication, and server-side checks so that you can only see your own account data and the class information you are entitled to. No system is perfectly secure, so please keep your sign-in details private.
9. Changes
If we change how we handle information, for example by adding crash reporting or push notifications, we will update this page and the date above, and tell you in the app where the change is significant.
10. Contact
Tabrez Pasha N, India. info.easy24x7@gmail.com