Privacy Policy for Maktab ZQ

Effective Date: December 11, 2025

Maktab-e-Ziyaul Quran (MZQ) ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how our mobile application, Maktab ZQ, collects, uses, and safeguards your information.

1. Scope of Use

Maktab ZQ is designed for the students, parents, and teachers of Maktab-e-Ziyaul Quran.

• Primary Users: Enrolled students and their guardians use Maktab ZQ to track Class progress, attendance, and fees.

• Guest Users: Non-enrolled users can access Maktab ZQ in "Guest Mode" to view features without providing personal data.

2. Information We Collect

We collect only the data necessary to provide educational services.

A. Personal & Educational Data

This data is provided directly by the educational institution:

• Student Information: Full Name, Address, DOB, Class/Batch details.

• Contact Information: Registered Phone Number (used for secure login).

Administrative & Academic Records: We maintain digital records of student activities solely for administrative purposes. This includes:

• Attendance History: To track student presence in the class.

• Voluntary Contribution Records: We store the status of voluntary contributions (Hadiya/Fees) to maintain a transparent ledger for parents and administration. This is strictly a record-keeping feature and involves no online financial processing or debt collection.

B. Location Data (Optional)

• Purpose: Maktab ZQ includes a Prayer Times feature. We request access to your device's precise or approximate location (city-level) solely to calculate accurate Prayer Times (Salah timings) based on your geographical position.

• Usage: This data is processed locally on your device to fetch timings from the AlAdhan API. We do not track, store, or upload your location to our servers.

• Control & Default Setting: You can deny this permission at any time. If permission is denied or not granted, Maktab ZQ will automatically use the default location (Osmanabad / Dharashiv) to display prayer times.

C. What We Do Not Collect

We do not collect:

• Device IDs or Advertising IDs.

• Photos, videos, or audio recordings.

• Contacts or calendar data.

• Web browsing history.

• Financial payment information (credit cards, bank accounts).

• Messages or emails.

3. Authentication & Account Access

We use a secure authentication system to verify identity.

Student & Parent Login

• Method: Login requires the registered Phone Number and a secure PIN.

• PIN: The PIN is provided directly by the Maktab Administration to the parent/guardian.

• Multi-Student Support: If multiple students are registered under the same phone number, entering the valid PIN will grant access to an Account Selection screen.

Teacher Login

• Method: Teachers authenticate using a registered Email Address and a Password.

• Password Security: All passwords are securely hashed and encrypted via Firebase Authentication.

4. How We Use Your Information

We use your data for the following purposes:

• Academic Management: To display attendance, fees, and class records.

• Authentication: To securely verify your identity via Firebase Authentication.

• Class Scheduling: To organize and display your specific batch timings and holidays.

• Religious Services: To provide accurate prayer times based on your location.

• Quranic Resources: To stream Quran audio and display text via the Quran Player feature.

• Notifications: To send local reminders for upcoming class times.

We do not use your data for:

• Advertising or marketing.

• Selling to third parties.

• Analytics or user tracking.

5. Notifications

Maktab ZQ uses Notifications to keep you informed about your academic schedule.

• Class Reminders: remind you about upcoming class times.

• How They Work: Notifications are scheduled locally on your device and are not sent from our servers.

• Control: You have full control to enable or disable these notifications via your device settings.

6. Data Storage and Security

• Data Storage: All personal and educational data is securely stored on Google Firebase.

• Encryption: Data is transmitted using industry-standard SSL/TLS encryption. Firebase automatically encrypts all stored data at rest.

• Randomized Security Identifiers: To prevent unauthorized data scraping or guessing, Maktab ZQ uses randomly generated, non-sequential unique identifiers (UIDs) for all student records.

• Access Control: We implement strict Firestore Security Rules enforcing authenticated access. Database queries are rate-limited to prevent unauthorized bulk data access.

• Role-Based Permissions: Teachers have full administrative access. Students/Parents have strictly read-only access limited only to their specific assigned profile.

7. Data Retention and Deletion

Attendance Records (Monthly Cleanup)

• Action: At the start of a new month, the authorized teacher manually deletes past attendance records.

• Retention: Only the current month's data and the records of the preceding two months are retained.

Fees Data (Yearly Reset)

• Action: Upon the commencement of a new academic year (or calendar year), the administration manually deletes old fee records.

• Retention: The administration retains fees data only for the current academic year and the immediate previous year.

Account Deletion

You have the right to request the permanent deletion of your account.

1. In-App: Profile > Account > Delete Account > Request Deletion via Email.

2. Email Request: Send an email to an.devsconnect@gmail.com with the subject "Account Deletion Request".

Once received, we will verify your identity and permanently delete your account and data within 30 days. 

• Note: Once processed, all your academic records, attendance history, and fee data will be erased permanently.

8. Third-Party Services

We do not sell or rent your personal information. We use:

• Google Firebase: For secure authentication and database storage.

• Aladhan API: To fetch prayer timing data.

• Al Quran Cloud API: To fetch Quranic text and audio.

We do not use Google Analytics, Facebook SDK, or Advertising networks.

9. Age Limitation & Children's Privacy

Target Audience: This Application is intended for general audiences and educational use by individuals aged 13 years or older.

• For Students Under 13: If the student is under the age of 13, the Application must be accessed, managed, and controlled strictly by a Parent or Legal Guardian.

• Parental Responsibility: We assume that any device accessing the App is owned and operated by a parent or a student aged 13+.

• No Direct Data Collection: We do not knowingly solicit data from or market to children under the age of 13. All student data is entered into the system by the Maktab Administration with parental consent during the physical admission process, not by the child through the App.

10. Your Rights

You have the right to access your data, request corrections, request deletion, and deny permissions. To exercise these rights, contact: an.devsconnect@gmail.com

11. Limitation of Liability

This App is provided on an "As Is" basis. If the App is down for some time due to any technical reason, or if any old record is accidentally deleted, the administration will not be held responsible. We strive for data accuracy but do not guarantee uninterrupted service.

12. Contact Us

If you have any questions about this Privacy Policy, please contact the administration:

Maktab-e-Ziyaul Quran Administration

• Email: an.devsconnect@gmail.com

Final Note: By logging into the App, you acknowledge that you have read and agreed to this Privacy Policy.