Privacy Policy

Welcome to the Quran Vocabulary Championship ("QVC"), a programme operated by Qurantology ("we", "us", or "our"). We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains what information we collect when you visit our website at QuranSpelling.com, register for the QVC, use our study tools, or participate in any competition — and what we do with that information.

By accessing or using our platform, you agree to the terms described in this policy. If you do not agree, please do not use our services.

We collect information you provide directly to us, information generated through your use of the platform, and — in limited cases — information from third parties.

We do not knowingly collect sensitive personal data such as biometric information, racial or ethnic origin, political opinions, or health data.

We use the information we collect for the following purposes:

• To provide and operate the platform — account creation, course enrolment, competition registration, leaderboard display, and issuing certificates.
• To personalise your experience — tracking your learning progress, recommending the next course, adjusting difficulty based on your performance.
• To communicate with you — sending transactional emails (account confirmations, competition schedules, results), and platform announcements. You may opt out of non-essential communications at any time.
• To ensure platform safety — detecting and preventing fraud, abuse, or unauthorised access.
• To improve our services — analysing aggregate, anonymised usage patterns to understand how learners interact with our tools and competition arenas.
• To comply with legal obligations — retaining records as required by applicable law.

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Service Providers — trusted vendors who assist us in operating the platform (cloud hosting, email delivery, payment processing). They are contractually bound to protect your data and may not use it for their own purposes.
• Competition Partners — if a Regional or National Final is co-hosted with an institution, limited participant data (name, competition score, country) may be shared with that institution for organisational purposes. You will be notified in advance.
• Institutional Admins — if you are enrolled through a madrasa or school, your academic progress data is visible to the institution's designated administrator.
• Legal Requirements — we may disclose data where required by law, court order, or to protect the rights, safety, or property of Qurantology, our users, or the public.
• Business Transfers — in the unlikely event of a merger or acquisition, user data may be transferred as part of the transaction, subject to this policy continuing to apply.

Public leaderboards display your username (not your real name or email) and your competition rank. You may choose a pseudonymous username during registration.

We use cookies and similar technologies to operate the platform and understand usage patterns. A cookie is a small text file stored on your device.

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will affect platform functionality.

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

• Active accounts — data is retained for the duration of your account and for 3 years after the last active session.
• Competition records — scores, certificates, and rankings are retained indefinitely as part of the historical championship record, but can be anonymised upon request.
• Support communications — retained for 2 years from date of correspondence.
• Financial records — retained for 7 years as required by applicable accounting law.

When data is no longer required, it is securely deleted or irreversibly anonymised.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access — request a copy of the personal data we hold about you.
• Right to Rectification — request correction of inaccurate or incomplete data.
• Right to Erasure — request deletion of your account and associated data ("right to be forgotten"), subject to legal retention obligations.
• Right to Restrict Processing — request that we limit how we use your data in certain circumstances.
• Right to Data Portability — receive your data in a structured, machine-readable format.
• Right to Object — object to processing based on our legitimate interests.
• Right to Withdraw Consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@qurantology.com. We will respond within 30 days. We may need to verify your identity before fulfilling any request.

The QVC platform welcomes learners of all ages, including students enrolled through educational institutions. We take additional care when processing data relating to minors (persons under 18).

• Students enrolled through a madrasa or school are registered by their institution's admin. The institution takes responsibility for obtaining appropriate parental consent.
• Individual registration by persons under 13 requires verifiable parental consent. If we discover we have collected data from a child under 13 without such consent, we will delete it promptly.
• We do not display the real names of minors on public leaderboards without explicit institutional consent.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at privacy@qurantology.com.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• TLS encryption for all data in transit
• Encrypted storage for passwords (bcrypt hashing)
• Role-based access controls limiting internal access to personal data
• Regular security assessments and penetration testing
• Secure data centres with physical access controls

No system is perfectly secure. If you become aware of any security vulnerability or breach, please notify us immediately at security@qurantology.com. In the event of a personal data breach affecting your rights, we will notify you as required by applicable law.

Qurantology serves a global community. Your data may be processed in countries other than your own, including countries that may not have the same data protection laws as your jurisdiction.

Where we transfer personal data from the European Economic Area (EEA) or the United Kingdom to countries without an adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

By using our platform, you acknowledge that your data may be transferred internationally in accordance with this policy and applicable law.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Send an email notification to registered users
• Display a notice on the platform dashboard

Your continued use of the platform after any such update constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out through any of the channels below.