Privacy Policy
Last updated: 16 September 2026
HiraLabs ("we", "us") develops the mobile application Noorly — Daily Quran & Prayer Times ("the App") and operates this website ("the Site"). This policy covers both, and explains what information each one handles.
We have written it in plain language rather than legal boilerplate, because a privacy policy you cannot read is not much of a policy.
Part one — the App
1. Summary
The App does not require an account. It does not ask for your name, email address, or phone number. We do not sell data, and we do not run advertising networks inside the App. We operate no servers, so none of your information is sent to us.
2. Location data
Noorly asks for your location to calculate prayer times and the direction of the qibla. Both calculations are performed entirely on your device. Your coordinates are not transmitted for either purpose, and no service of ours receives them.
There is one exception, and it affects only the city name shown on screen. To turn your coordinates into a readable place name, Noorly asks your device to do the conversion using the geocoding service built into your operating system — provided by Google on Android and by Apple on iOS. How that service handles the request is governed by that provider's own privacy policy, and whether it resolves offline or over the network depends on your device, your operating system version, and its configuration. We cannot control or guarantee that behaviour, so we are telling you plainly that it exists. It affects the displayed name only, never the prayer times themselves.
Granting location access is optional. You can decline it and set your city manually instead. When you do, Noorly does not request your device location at all.
3. Data stored on your device
The App saves the following locally on your device, using your device's standard app storage:
- your settings and preferences — language, theme, calculation method, Hijri date adjustment, notification and adhan sound choices
- your bookmarks and last-read position
- your reading history and daily practice records
- your saved or manually entered city
- a cached copy of today's prayer schedule, stored against your approximate coordinates rounded to roughly eleven kilometres. The rounding is used only as a key, so the App knows whether the cache is still valid for where you are. It is never transmitted anywhere
- if you add a Noorly home screen widget, a copy of what the widget displays — the next prayer time, your city name, and the verse or hadith of the day — so the widget can draw itself without opening the App
The complete text of the Qur'an is included in the App itself and does not need to be downloaded: all 114 surahs in Arabic, with the Indonesian translation published by the Ministry of Religious Affairs of the Republic of Indonesia.
This information stays on your device. It is not uploaded to us. Deleting the App, or clearing its data through your device settings, removes it permanently. We cannot recover it for you, because we never had a copy.
4. Notifications
If you enable prayer time reminders, the App schedules them locally on your device. No notification content passes through any server of ours.
For these reminders to work, the App requests two permissions: permission to schedule exact alarms, so a reminder arrives at the correct prayer time rather than being delayed by battery optimisation, and permission to run after your device restarts, so your reminders survive a reboot.
5. Third-party services used by the App
Noorly loads some content from the services below. None of them receive your location. As with any internet request, each of them can see standard technical information such as your IP address.
- Islamic Network CDN (cdn.islamic.network) — murottal recitation audio. Receives only the recitation you play. This service does not publish a privacy policy that we could find.
- Al Quran Cloud API (alquran.cloud) — audio metadata. Receives only the surah or verse number you open. This service does not publish a privacy policy that we could find.
- Hadith API, hosted on jsDelivr (cdn.jsdelivr.net) — the daily hadith. Receives no information about you. — jsdelivr.com/terms/privacy-policy
- Unsplash (images.unsplash.com) — background photographs shown behind the daily verse. Receives no information about you. — unsplash.com/privacy
Islamic Network operates both cdn.islamic.network and alquran.cloud. At the time of writing they do not publish a privacy policy, so we cannot link to one. We have stated above exactly what each of them receives.
Part two — the website and waitlist
6. What the waitlist collects
If you choose to join our launch waitlist, we collect:
- your email address — required
- which platform you intend to use — optional
- your written answer about what you would like improved — optional
Only the email address is required. The optional questions can be left blank and the form will still submit.
7. What we do with it
If you only joined the waitlist, your email address is used for one purpose: to send you a single message on the day Noorly launches.
If you also indicated that you are willing to test an early version, see section 8 below.
We will not send you newsletters, promotions, or unrelated messages. We will not sell or rent your address, and we will not transfer it to anyone except as described in section 8.
8. If you volunteer as a tester
Before Noorly can be published, Google requires us to run a closed test with a group of testers. If you told us you were willing to take part, and we invite you, then the following applies.
We will add your email address to the tester list in Google Play Console. Google needs it to grant you access to the test build, which means your address is shared with Google for that purpose. You will receive more than one email from us: an invitation, and occasional messages during the test period. You can leave the test at any time, through the Play Store or by writing to us, and you do not need to give a reason.
If you did not volunteer, none of this applies to you and your address is never added to any tester list.
9. Where it is stored, and for how long
The waitlist is run through Google Forms, and responses are stored in Google Sheets under our account. Google acts as our data processor for this, and Google's own privacy policy applies to how they handle it: policies.google.com/privacy
After the launch announcement has been sent, we delete the response spreadsheet and close the form. Tester email addresses are removed from the Play Console tester list at the same time. Your address is not retained beyond that point.
10. Removing yourself before launch
Write to us at hello@hiralabs.net and ask to be removed. We will delete your entry and confirm that we have done so. You do not need to give a reason.
11. The website itself
This site is hosted on GitHub Pages. We have not added analytics, advertising, or tracking scripts of our own. GitHub may keep standard server logs, such as IP addresses, as part of operating the service.
Part three — general
12. Children's privacy
Noorly is suitable for general audiences. We do not knowingly collect personal information from anyone, including children. If you believe a child has provided us with personal information, contact us and we will remove it.
13. Your rights
For the App: there is no account for us to export or delete, because we hold nothing. All data stays on your device and you control it there.
For the waitlist: you may ask us at any time what we hold about you, ask for a copy, or ask us to delete it. Write to the address below and we will act on it.
14. Changes to this policy
We may update this policy as Noorly changes. When we do, we will revise the date at the top of this page. If a change materially affects how your information is handled, we will also announce it inside the App.
15. Contact
HiraLabs
Sungguminasa, Indonesia
