Privacy Policy

Last updated: November 8, 2026

Aqra is made by Thought Garden Labs LLC. Aqra has no account and no sign-in. The app does not show ads or use advertising trackers. RevenueCat processes subscription information as described below. We don't sell personal information. The sections below say what stays on the device and what is sent when you use a feature.

What stays on your device

• Progress, preferences, reflections, and saved topics. These are stored on your iPhone or iPad. Reflections and the other personal learning records are encrypted on the device. The key is kept in the Keychain for this device only, and that store is excluded from this app's iCloud backup. This app does not send those records to Aqra's servers.
• Microphone. Aqra uses the microphone only when you choose one of three optional features. Word recordings: when you record yourself saying a term, the recording is saved on your device so you can play it back, is excluded from iCloud backup, and is erased when you delete it or erase your data in Aqra. Question dictation: preparing voice downloads a speech model onto this device. When you dictate, the audio is transcribed on your device and the temporary recording is deleted right after. The recording is not part of the model download. The text goes into Ask only if you choose to send it. Hear-and-recite coaching: when you practice reciting, Apple's on-device speech recognition listens while you recite, and only if that on-device recognition is available. The audio is not written to a file and is not sent to Aqra or to the Ask model provider.
• Prayer place and location. If you allow it, Aqra uses your location while the app is in use, at about a kilometer of accuracy, to fill a prayer place. Prayer times are calculated on this device from the place you save. That saved place stays on the device and is not sent to Aqra. Looking up a city you type sends that name to Apple. Searching for nearby mosques sends the search to Apple Maps. On a mosque-visit checklist, selections clear when you leave that screen or switch away. The app does not save a visit history.
• Prayer reminders. If you turn them on, Aqra schedules local notifications on this iPhone. A paired Apple Watch can show the same reminder when the phone is locked. There is no separate Watch app, and the reminder is not sent to Aqra.

What leaves your device

• Ask. When you send a question in Ask (typed or dictated), the question text goes to the Ask service. The default address is https://aqra-ask.vercel.app/api/ask. Settings has an Ask service URL; if you set one, the question goes there instead. The request can include up to four lesson snippets already in the app: a lesson id, title, excerpt, and citations. Those snippets are Aqra's lesson text, not your notes. The request can also say whether a lesson matched and whether the question was treated as a personal case. It includes a random install id created on this device, and an Apple App Attest check or a DeviceCheck token when this device can make that proof. It does not include your name, notes, saved place, or learner profile. The service passes the question, and any snippets, to the one model provider configured for Ask. The service is written to call OpenAI, Gemini, or Groq. This page does not say which of those is switched on.
• Ask records. The service's own miss line is the time the question was asked, not the question. An upstream error line names the provider, the HTTP status, and an error code, not the question. That describes those log lines. It does not describe the model provider's own retention, or the hosting platform's logs. The install id is the daily-limit bucket when the server accepts the request by the app's build token or by DeviceCheck. When a durable counter store is configured, that bucket expires after two days. When it is not, the counter stays in the memory of that server instance, which has no time limit in this code. When the server accepts an App Attest proof, the daily bucket is the attestation key id, and the server keeps that key id, the public key, and a signature counter. With the durable store, that record expires after 180 days. Without it, the record stays in instance memory. A DeviceCheck token is sent to Apple for a check and is not stored by the Ask function. The network address of the request is an hourly abuse counter. With the durable store, that counter expires after two hours. Without it, it stays in instance memory. The function does not turn that address into a location. These identifiers can distinguish your installation or device and are treated as device-linked data, even though they are not your name or email.
• Aqra Plus. If you subscribe, Apple charges your Apple ID. The app sends RevenueCat, the subscription service, an anonymous app user id created on this device and the purchase receipt, so Aqra can tell whether Aqra Plus is active and so Restore purchases works. That id is not your name, email, or learner profile. RevenueCat uses anonymous purchase history to manage subscription access, restore purchases, and provide subscription analytics; we do not use it for cross-app advertising tracking. Deleting the app does not cancel the subscription; cancel it in your Apple ID subscription settings. Questions about that record: dre@morishill.com.
• Lesson updates. While Aqra is open it may download a signed lesson file from https://aqra-content.vercel.app/latest.json. That request does not include your learning history, recordings, or an account. If the download fails, the lessons built into the app stay.
• Links you open. Some screens link to outside sites, including quran.com, sunnah.com, tanzil.net, clearquran.com, maps.apple.com, Apple's subscription page, and Apple's standard license. A mosque website opens only if you tap a link Apple Maps returned. Those sites have their own privacy policies. If you export a reflection, that copy follows the destination you choose.

Children

Aqra is not directed to children under 13. The app does not ask for a name, an email address, or an age. We don't knowingly collect personal information from children under 13.

Deleting your data

Settings includes Erase personal learning data. That removes the preferences, saved topics, progress, reflections, and word recordings stored by this app on this device. It does not cancel Aqra Plus, and it does not remove the Ask install id or the subscription record. Deleting the app removes the app's files on this device. Aqra has no account to delete. Apple and RevenueCat keep the subscription record so a reinstall can restore Aqra Plus. Cancel the subscription in your Apple ID settings if you don't want it to renew. A reflection you already exported is outside the app.

Changes and contact

If this policy changes, we'll update this page and the date above. Questions? Email dre@morishill.com.