Privacy Policy

NUR ("we", "us", "our") builds the NUR mobile app and this website ("NUR", the "Service") — a companion for prayer, Qur'an and Islamic learning. This policy explains what information we collect, how we use it, and the choices you have. We collect only what we need, and we never sell your personal data.

1. Information we collect

Information you provide

• Account details — your email address (and, if you choose, your name) when you create an account. Authentication is handled by Amazon Cognito.
• Content you enter — such as notes, lesson progress, and questions you ask the in-app AI assistant.

Information collected automatically

• Location — used only on your device and to calculate accurate prayer times and the Qibla direction. You can deny or revoke location access in your device settings; some features then require you to set a location manually.
• Basic app/usage and diagnostic data — such as app version and error logs, to keep the app reliable.

2. How we use your information

• Create and secure your account, and sign you in.
• Send transactional emails you request or that are required for your account — email verification codes at sign-up and password-reset codes. We do not send marketing or promotional email.
• Provide core features: prayer times, Qibla, lessons, the Qur'an reader and the AI assistant.
• Maintain, troubleshoot and improve the Service.

3. Email and communications

Account emails are sent from support@nurcompanion.com using Amazon Simple Email Service (SES). These messages are strictly transactional and tied to actions you take in the app. If you contact that address, we use your message only to respond to you.

4. How your information is shared

We do not sell your personal data. We share information only with service providers who help us operate the Service, under agreements that limit their use of it:

• Amazon Web Services (AWS) — authentication (Cognito), email delivery (SES), data storage, and the AI assistant (Amazon Bedrock). Data is processed in the AWS us-east-1 region.

We may also disclose information if required by law, or to protect the rights, safety and security of our users and the Service.

5. Data retention

We keep your account information for as long as your account is active. If you delete your account, we delete or anonymise your personal data, except where we must retain it to comply with legal obligations.

6. Security

We use industry-standard measures to protect your data, including encrypted transport (TLS), managed authentication, and access controls. No method of transmission or storage is completely secure, but we work to protect your information.

7. Your choices and rights

• Access, update or delete your account information from within the app or by contacting us.
• Control device permissions such as location and notifications at any time in your device settings.
• Request deletion of your account and associated data by emailing us (see below).

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. We honour applicable requests.

8. Children's privacy

NUR is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will remove it.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, notified in the app.