Privacy Policy
Last updated: October 2026
Child Safety & Data
We collect no sensitive data from children. For each child profile we store a first name or nickname, gender, an avatar, an optional age and the practice progress (which surahs and ayat, and the days practiced). Parents can add a private note. Children do not have their own accounts. If a child records their voice to listen back, the recording stays in the browser and is never uploaded.
Your Account
We store your email address, how you sign in (email and password, or Google), your language, your subscription status, and a record of the choices you made at signup. This is held in our database at Supabase.
Activity Log
We keep a log of actions you take in Naml, such as adding a child or completing an ayah, tied to your account. We use it to see which features are used and to compare versions of a feature. It contains no names or email addresses, and it is deleted with your account.
AI Disclosure
We use Gemini AI to translate the app and to write the short note in the weekly parent email. The note is written from general counts of practice activity only, never a child's name. No personal data is used to train AI models.
Emails & Your Choices
We send essential emails about your account and billing; these are not optional. We also send optional emails: a weekly summary of your child's practice if you turn it on in settings, and occasional guidance, news and requests for feedback. At signup the box for optional emails is already ticked and you can untick it. You can change your choice any time in settings or with the unsubscribe link in each optional email. Accounts created before we asked may receive occasional optional emails until their owner makes a choice. We keep a record of your choices: what you agreed to, the wording you saw, when, and whether a box was pre-ticked. Emails are sent through Resend.
Analytics & Cookies
We use essential cookies to keep you logged in and remember your language. We use PostHog analytics to understand how Naml is used, such as pages visited, taps and errors. For visitors who are not signed in, PostHog keeps an anonymous identifier in your browser's storage so visits can be grouped, and sessions are recorded as screen replays in which everything typed into fields is hidden. For signed-in parents, usage is analysed with an anonymous account id (never your email or name), and sessions are recorded as screen replays in which everything typed into fields is hidden and children's names are masked; nothing is stored on your device for analytics. With your permission (the banner on first visit) we load the Crisp live chat so you can message us; if you decline, it stays off. We also use Vercel Analytics for anonymous page-view counts.
Service Providers
We rely on these providers to run Naml: Supabase (database, sign-in and avatar storage), Vercel (hosting and page-view counts), Paddle (payments, as our Merchant of Record, so we share payment-related data with them and never see your card details), Resend (emails), Google (Gemini AI and optional Google sign-in), PostHog (analytics) and Crisp (live chat, only with your permission).
Your Rights
You can ask us to show, correct or delete the data we hold about you or your children by writing to support@naml-app.com.
Contact
If you have any questions, please contact us at support@naml-app.com.