Last updated 27 August 2026 · Version 2.4.
NoorPaths is an independent, owner-run Islamic learning service and is responsible for the personal information in this policy. Contact privacy@noorpaths.com for privacy questions and rights requests.
Core learning does not require Premium. Guest information mainly stays on the device. Member information is used to sync learning and preferences. Android subscriptions are processed by Google Play. NoorPaths does not sell personal information, use it for targeted advertising or receive full payment-card details from Google Play.
Information is used to create and secure accounts; provide learning, progress, reminders and preferences; calculate prayer times when requested; verify paid or complimentary Premium; respond to messages and rights requests; prevent abuse and errors; improve aggregate product use; and keep transaction, security, tax, accounting or legal records where required. Depending on the activity and law, the basis may be providing the requested service, legitimate interests, legal obligation or consent. Consent can be withdrawn where it is the basis, without affecting earlier lawful processing.
Google Play processes Android Premium payments. NoorPaths receives limited purchase and subscription information needed to verify a purchase, link it to the correct NoorPaths account and keep access accurate. Google may notify NoorPaths of purchase, renewal, cancellation, payment issue, recovery, revocation or expiry. NoorPaths does not receive your full card or bank-account details from Google Play. Manage or cancel through Google Play.
Guest progress and many preferences stay on the device and can be lost when app data is cleared. If the offered account-upgrade flow follows a guest's first real lesson, the same anonymous service identity may be upgraded so that verified result is retained once; other guest history is not bulk-copied. Device location is optional and used through NoorPaths' secure backend for prayer-time calculation, not advertising or background tracking. Nothing here is used for advertising, profiling or background tracking, and location is never collected while the app is closed.
You never have to give NoorPaths your device location. You can pick your city from a list of world cities that is built into the app, or simply type a city and country. Picking from the list attaches that city's published coordinates — the coordinates of the place, which are the same for everyone who lives there and say nothing about where you are within it. NoorPaths sends those to the prayer-time provider instead of the name, because two cities can share a name and the provider does not say which one it chose; sending the coordinates is what makes the times right for the city you actually meant. The list is part of the app and is never contacted over the network, so choosing a city tells its publisher nothing about you.
Friends features are optional and require a member account: a guest cannot add friends, be found by other people, send or receive requests, or set a username, and does not appear in username search or through a friend code. Your email address is never shown to other users. As a member, other people can find you by username or by an opaque friend code or QR link you choose to share, and they see in-app profile information only — username or display name, avatar and equipped cosmetics, and in-app standing such as Ajr. They do not see your email address, sign-in method, location or prayer settings, feedback, or subscription and payment details.
Sharing milestones with friends is controlled by a master switch that is off by default. Milestones such as completing a lesson, unit or unit test are still recorded for your own progress, but while that switch is off they are not shown to friends. When it is on you can control which categories are shared. If you have friends, your current weekly Ajr may appear in the Friends leaderboard, which is informational and does not change league grouping, promotion, demotion or Hall of Fame.
You can decline or cancel friend requests, remove a friend, or block an account. Blocking prevents further contact and hides the relevant content in both directions. NoorPaths provides no direct messages, chat, comments, freeform posts or media uploads between users, and does not upload your device contact book. The one thing a friend can send you is a du'a: a single fixed acknowledgement of a milestone, which carries no text or media and cannot be customised. NoorPaths shows you how many du'as have been made for you, on the Friends tab. Whether your name reaches the person you sent one to is your own choice, off by default; while it is off, your du'a arrives without a name. Friend connections, requests, blocks, your friend code, shared activity and any invite-attribution record are deleted with your account.
Service-provider categories include cloud hosting, content delivery, database, authentication, email routing, security, payment verification and prayer-time calculation. Google receives information if Google sign-in is chosen, and Google Play processes Android subscriptions. A Qur'an content provider receives requested references and ordinary web connection information. Where you choose to use Friends features, other users of NoorPaths also receive the limited profile and in-app information described above; your email address is not disclosed to them. Providers may process information outside Ireland or the EEA using an appropriate transfer mechanism where required. Information may also be disclosed where legally required or needed to protect rights or safety. NoorPaths does not sell personal information or share it for targeted advertising.
Account, learning, preference, Premium and purchase-verification records are generally kept while the account or entitlement is active and as needed for the service. Transaction and security records may be kept longer for accounting, tax, fraud, dispute or legal needs. Allowlisted usage events are kept 90 days; feedback up to 12 months; superseded usernames 12 months; abuse-prevention counters 30 days. A completed email deletion request keeps its contact email up to 90 days, then removes it. A minimal deletion audit with no name or email is kept 24 months. Daily controls enforce these periods.
Deleting your account removes your profile, learning progress, preferences, friends, requests, blocks, friend code, shared activity, username history and entitlement records. Three categories are deliberately kept in a form no longer linked to you rather than erased: usage events are detached so aggregate statistics stay consistent; feedback is detached and your name removed so support history remains answerable, and its free text can be redacted on request; and the minimal deletion audit survives, because a record proving a deletion happened cannot be erased by that deletion.
NoorPaths uses encrypted connections, account-scoped access controls, server validation, restricted administration and data minimisation. No service can guarantee absolute security. Depending on law and circumstances, you may have rights to access, correct, delete, restrict or object, receive portable information, withdraw consent, and complain to the Irish Data Protection Commission. You can decline optional location or notifications, change preferences, or use the account deletion page.
Deleting a NoorPaths account does not cancel a Google Play subscription. Cancel it separately in Google Play to prevent future renewals.
NoorPaths is not currently presented as specifically designed for children. Core guest learning is available without a member account. A parent or guardian should be involved where a younger user cannot validly manage an account, authorise a purchase or make privacy choices. Where law requires parental authorisation for processing based on a child's consent, NoorPaths must obtain it before relying on that consent.
The date and version identify this notice. Material changes may be communicated in the app. Privacy questions: privacy@noorpaths.com. Support: support@noorpaths.com.