Privacy Policy - The Final Human

Server Life ("we", "us", or "our") operates The Final Human mobile application (the "Application"). This Privacy Policy explains what information is processed when you use the Application, how it is used and shared, how long it is retained, and the choices and rights available to you.

1. Using the Application Without an Account

You can read the Holy Qur'an, listen to recitations, and use most features without creating an account. In guest mode, we do not collect an email address or other account information from you. Technical information described below, including crash, configuration, installation, and network information, may still be processed.

2. Information We Process

• Account Information: If you register or sign in with email, Firebase Authentication processes your email address, a unique user ID, authentication information, and related security information. Your password is handled by Firebase Authentication; we do not receive or store your password in readable form.
• Third-Party Sign-In Information: If you use Sign in with Google, the Application requests only the email and profile scopes and receives your Google account identifier, email address, and name. To provide, secure, and measure the sign-in service, Google may process your Google account identifier, phone number where associated with your Google account, approximate location, device identifiers, usage information, and other technical information for application functionality and analytics, as described in Google's Privacy Policy: https://policies.google.com/privacy. The Google Sign-In SDK declares that it does not use this information for tracking. If you use Sign in with Apple, we receive an Apple provider identifier, your email address, and your name if Apple makes them available. If you use Apple's Hide My Email feature, we receive Apple's relay email address instead of your personal email address.
• Synchronized Content and Progress: If you are signed in, your Khatm (completion) plans and progress, bookmarks and their colors or descriptions, verse notes, and favorites may be stored on our servers and linked to your account so they can be synchronized across your devices.
• Voice Data and Search Queries: The microphone is used only after you start the Voice Verse Search feature. A temporary audio file is created on your device and sent over an encrypted connection to our server for transcription. The server processes the audio only to produce the transcription and does not retain the audio recording after processing. The resulting text and any verse-search text you type are sent to our server to return matching verses. Voice and search requests are not added to your account profile or reading history. As with ordinary internet communications, our server may receive technical request information such as an IP address and request time for security and operation of the service.
• Feedback and Support Information: If you choose to send feedback, the Application opens your email application with your message, Application version, device model, operating-system version, and an encrypted diagnostic log attached. The email account you use may disclose your email address to us. Diagnostic logs contain recent technical events and may include account information such as your email address. You control whether the email is sent.
• Crash and Diagnostic Information: Firebase Crashlytics processes crash and error details, timestamps, Application version and bundle identifier, device model and technical characteristics, operating-system information, Firebase installation identifiers, Crashlytics installation and session identifiers, and diagnostic logs. When you are signed in, we associate Crashlytics reports with your unique user ID. Diagnostic information may also contain information included in an error message or custom Application log.
• Remote Configuration Information: Firebase Remote Config processes a Firebase installation ID and information such as country code, device language, time zone, platform and operating-system version, Application version, Firebase App ID, and bundle or package name to provide the appropriate Application configuration. Country may be inferred from the IP address used for the request.
• Google SDK Service Measurement: Firebase Authentication, Firebase Installations, Firebase Remote Config, related Google data-transport components, and Sign in with Google may process installation identifiers, diagnostic data, account identifiers, device identifiers, approximate location, and usage or technical information to provide, secure, operate, and measure their services. In Apple's App Store privacy terminology, some of this processing is classified as Analytics. The Application does not include Google Analytics for Firebase.
• Information Stored on Your Device: Application preferences such as theme and font size, downloaded recitation files, local reading history or last-reading information, temporary files, and other local settings are stored on your device. Some Khatm, bookmark, note, and favorite information may also have a local copy and, if you are signed in, may be synchronized as described above.

We do not request access to your contacts or the contents of your photo library. We do not intentionally collect precise location information. We do not show third-party advertising, sell or rent personal data, or track you across other companies' applications or websites.

3. Why We Process Information

We process information to:

• provide Qur'an reading, recitation, download, search, and related Application features;
• create and secure accounts and synchronize content and progress;
• transcribe voice searches and return matching verses;
• respond to feedback and support requests;
• provide and manage Application configuration;
• understand basic Application operation and usage;
• detect, investigate, and fix crashes, errors, abuse, and security problems; and
• comply with legal obligations and enforce our rights.

Where applicable law requires a legal basis, we rely on performance of our agreement with you, our legitimate interests in operating and securing the Application, compliance with legal obligations, and your consent for optional features or processing where consent is required. You can withdraw consent for an optional device permission at any time through your device settings. Withdrawal does not affect processing that was lawful before withdrawal.

4. Device Permissions

• Microphone: Microphone access is requested only when you use Voice Verse Search. Recording begins only after your action and is not used for passive or background listening. You can deny or later disable microphone access in your device settings; ordinary reading and typed search remain available.

The Application creates verse-card images locally and presents the system share sheet when you choose to share them. The Application does not request access to read the contents of your photo library.

5. Sharing and Service Providers

We do not sell or rent personal data. Information is processed by the following providers only as needed to operate the Application:

• Google LLC: Firebase Authentication, Firebase Crashlytics, Firebase Remote Config, and Sign in with Google.
• Apple Inc.: Sign in with Apple and Apple platform services.
• Server Life infrastructure and hosting providers: account synchronization, voice transcription, verse search, content delivery, security, and operation of our servers.
• Your chosen email provider: only when you decide to send feedback or a support email.

These providers process information under their applicable contractual, privacy, and security obligations. We require providers that process personal data on our behalf to provide the same or an equivalent level of protection described in this Privacy Policy. We may also disclose information when required by law, to protect users or the service, or in connection with a lawful business transfer.

6. Security and Retention

Information sent between the Application and our servers is transmitted using encrypted HTTPS connections. We use reasonable administrative and technical safeguards designed to protect information from unauthorized access, alteration, loss, or misuse. No method of transmission or storage can be guaranteed to be completely secure.

We retain information as follows:

• Voice recordings are not retained on our server after transcription. A temporary recording is created in device storage and is subject to the Application's and operating system's temporary-file management.
• Account information and synchronized content are retained while your account remains active. When you delete your account, we initiate deletion of the Firebase account and account-linked data on our servers, except information that must be retained for a limited period to meet legal obligations, prevent fraud or abuse, resolve disputes, or complete deletion from backups.
• Firebase Authentication may retain logged IP addresses for a few weeks. After deletion of a Firebase user is initiated, Google states that associated authentication information is removed from live and backup systems within up to 180 days.
• Firebase Crashlytics retains crash stack traces, associated identifiers, and related crash information for 90 days before beginning removal from live and backup systems.
• Firebase installation IDs used by services such as Remote Config are retained by Firebase until deletion of the relevant installation ID is requested. Google states that removal from live and backup systems may take up to 180 days after that request.
• Feedback emails and their attachments are retained only for as long as reasonably necessary to respond to the request, maintain support records, protect the service, and comply with legal obligations, after which they are deleted or anonymized where reasonably possible.
• Security and network logs are retained only for the limited period reasonably necessary to operate, secure, and troubleshoot the service and to meet legal obligations.

7. International Transfers

Google, Apple, and our infrastructure providers may process information outside your country, including in the United States and other countries where they or their service providers operate. Where required, transfers are protected through applicable legal safeguards.

8. Your Choices, Rights, and Account Deletion

Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, or portability of your personal data, and to object to certain processing or withdraw consent. You may also have the right to complain to your local data-protection authority. If you are in Turkey, you have the rights described in our Clarification Text under Law No. 6698 on the Protection of Personal Data (KVKK).

To delete your account, open My Account > Delete My Account in the Application. You may also contact us at [email protected]. Account deletion removes your authentication account and initiates deletion of information linked to that account from our servers, subject to the limited exceptions and provider deletion periods described above.

Information stored only on your device is not necessarily removed when you delete your account. You can remove local Application data by using your device's storage settings or by deleting the Application. Deleting the Application does not, by itself, delete an account; use the in-Application deletion option or contact us.

You can disable microphone access through device settings. For other privacy requests or questions, contact us using the details below. We may need to verify your identity before fulfilling a request.

9. Children

The Application is intended for a general audience and is not specifically directed to children under 13. We do not knowingly collect personal data from a child under 13 without any consent required by applicable law. If you believe a child has provided personal data to us, contact us and we will take appropriate steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Application, our practices, or legal requirements. We will publish the updated version and change the "Last Updated" date. Where appropriate, we will also provide notice within the Application.

11. Contact