Noor

Privacy Policy

Last updated: 28 April 2026

Why your privacy matters to us

Noor serves children and adults with special needs. These users deserve the highest level of protection. We collect the minimum data possible, never sell it, and never share it with third parties for advertising.

What we collect

  • Parent account: email, name, language, hashed password (bcrypt). We never store passwords in plain text.
  • Learner profiles: name, optional date of birth, sensory + accessibility settings, audience type (adult/kids/care).
  • Learning progress: memorised verses, letters learned, custom AAC symbols, visual schedules. Stays on our servers only.
  • Technical logs: IP address and HTTP requests for 30 days, for security and abuse detection. Auto-purged after.

What we DO NOT collect

  • Advertising tracking data
  • Ad identifiers (IDFA, GAID)
  • Browser fingerprints
  • Health or medical data
  • Contacts or address books
  • Photos or videos stored with third parties

Children (under 13)

We treat Noor with extra care for children:

  • Children cannot register independently. A parent or guardian creates the account and adds the child profile.
  • We never collect children's email addresses and never contact them outside the platform.
  • If we discover a child has registered independently, we delete the account immediately upon notice.
  • Compliant with US COPPA, EU GDPR-K, and UK PECR.

Cookies

We use only three cookies, all strictly necessary for the platform to work:

  • noor_token: encrypted session token (JWT). Expires after 30 days.
  • noor-active-profile: ID of the currently-active learner profile.
  • noor-lang: selected language (Arabic/English).

We use no advertising or third-party tracking cookies, which is why we do not show a consent banner; strictly-necessary cookies do not require consent under GDPR.

Where your data is stored

Noor servers run in Germany (Hetzner, Nuremberg). All data is governed by EU GDPR and UK GDPR. We do not use services outside the EEA or the UK without appropriate contractual safeguards.

Your rights

  • Access your data
  • Correct inaccurate data
  • Delete your account and all data
  • Export your data (portability)
  • File a complaint with your supervisory authority (ICO in the UK)

All of this is available from the Your data page after signing in.

Contact us

For privacy questions: privacy@noor.app