Privacy Policy

Effective: • Minimal data; no ad trackers; simple choices.

1) Overview & Who We Are

IlmQuest is a web-based learning and quiz platform for Islamic studies and Hifz practice. We focus on speed, clarity, and privacy-by-design. This policy explains what we collect, why, how we protect it, and the choices you have. We do not sell personal data and we avoid invasive tracking.

2) Summary (What/Why)
Data
Why we use it
Email (if you sign in)
Authenticate via one-time codes, keep your progress.
Scores, titles, mode history
Operate gameplay, show your progress, improve balance/difficulty.
Technical logs
Security, abuse prevention, availability, debugging.
Support emails
Answer questions and fix issues you report.

We don’t collect: precise geolocation, contact lists, device sensors, microphone, or background activity unrelated to gameplay.

  • Contract — to provide the Service you request (quizzes, multiplayer, account).
  • Legitimate interests — to keep the Service secure, fight cheating/abuse, and improve content.
  • Consent — where required (e.g., email verification, optional communications).
  • Legal obligations — when we must keep or share data to comply with law.
4) What We Collect
  • Account basics: email address, verification state, basic metadata (created/updated time).
  • Gameplay data: scores, titles, modes played, question stats, lobby codes, timestamps.
  • Technical data: IP address, device/browser type/version, language, coarse region, diagnostic logs, and basic crash/error reports.
  • Support: messages you send us and the address you used to contact us.
  • We intentionally do not collect special-category data (e.g., health, biometrics) and we do not profile for advertising.
5) How We Use Data
  • Operate the Service (authentication, quizzes, multiplayer, rankings).
  • Prevent abuse/cheating and protect the integrity of turn timers and results.
  • Improve performance, content quality, difficulty calibration, and UX.
  • Communicate about support requests or important changes.
6) Cookies, Local Storage & PWA

We use small cookies and storage APIs such as localStorage or indexedDB to keep sessions, preferences, and offline/PWA data. You can clear these in your browser. Blocking them may prevent login or proper gameplay.

If analytics is enabled via gtag.js, it is used in a privacy-respecting way (no ad personalization). You can enable “Do Not Track” or use analytics opt-out tools to limit collection.

7) Sharing & Sub-processors
  • No sale of personal data.
  • Service providers (hosting, email delivery, error monitoring) may process limited data under contracts that restrict their use to operating the Service.
  • Legal/Safety: we may disclose data if required by law or to protect users, our rights, or the Service.
8) Security

Traffic is HTTPS-only. Access to systems is limited and audited. While we use reasonable safeguards, no online service is perfectly secure; keep your device and email account protected.

9) Retention
  • Account & gameplay data: retained while your account is active and for a reasonable period afterward for security and audit.
  • Logs: typically short retention to diagnose abuse and reliability issues.
  • Support emails: retained as long as needed to resolve your request and for audit/compliance where applicable.

You may request deletion of your account data; we’ll delete or anonymize unless we must keep certain records by law or for security.

10) Children

Where required by local law, minors should use the Service only with parent/guardian permission. If we learn we collected data from a child without appropriate consent, we will remove it.

11) Your Rights
  • Access, correction, deletion, restriction, and portability of your personal data, where applicable.
  • Right to object to certain processing based on legitimate interests.
  • Right to withdraw consent (it won’t affect prior processing).
  • Right to lodge a complaint with your local supervisory authority.

California residents may exercise CCPA rights (access, deletion, know, non-discrimination). We do not sell personal information.

12) International Transfers

We may process data in countries different from yours. We use reasonable safeguards consistent with this Policy and applicable law to protect transferred data.

13) Changes to This Policy

We may update this Policy from time to time. The “Effective” date will change. Continued use of the Service after an update means you accept the revised Policy.

14) Contact

Email: support@ilmquest.app


Reminder IlmQuest is a study aid. Mistakes may occur in quizzes and references. Always verify with trusted sources or teachers.