Privacy Policy
Last Updated: May 2026
1. Data Controller
Hafizly ("we", "us", "our") is responsible for processing your personal data. This Privacy Policy explains what data is collected, processed and stored when you use the Hafizly web application (hafizly.app). Contact: admin@hafizly.app
2. Data We Collect
a) Account Information When you create an account, your email address and name are collected through Clerk authentication. b) Voice Data (Biometric Data) The voice recording you make during voice cloning. This data is sent to Fish Audio's systems to create your AI voice model. As voice data qualifies as biometric data, it is handled with special care. c) Generated Content The surahs and verses you select, the generated audio files, and usage statistics. d) Technical Data IP address, browser type, device information, session durations. These are processed for security and service quality purposes. e) Payment Information For premium subscriptions, payment data is processed through Paddle's payment infrastructure. Card details are never stored on Hafizly's systems.
3. Purposes and Legal Basis for Processing
Your data is processed for the following purposes and legal bases: • Providing the voice cloning service → Performance of contract • Generating Quranic recitations → Performance of contract • Managing your account and security → Legitimate interests • Processing payments → Performance of contract • Improving service quality → Legitimate interests • Fulfilling legal obligations → Legal obligation For voice data (biometric data), explicit consent is obtained separately under applicable data protection law.
4. How We Protect Your Voice Data
Your voice supports a personal act of worship. With this in mind: • Your voice model is created as "private" on Fish Audio's systems — no other user can access it • Your voice model is linked exclusively to your account • Your voice data is never shared, sold, or used for any other purpose • When you delete your account, your voice model is permanently deleted from Fish Audio's systems • Raw voice recordings are not stored on our servers after processing is complete
5. Third-Party Service Providers
Hafizly works with the following trusted service providers. They access your data only to the extent necessary to provide the service: • Clerk (clerk.com) — Authentication and account management • Fish Audio (fish.audio) — Voice cloning model and audio synthesis • Vercel (vercel.com) — Application hosting, database, and file storage • Upstash (upstash.com) — Rate limiting and caching • Paddle (paddle.com) — Payment processing • Deepgram (deepgram.com) — Live speech recognition during recitation practice On the recitation practice page (/recite), audio from your microphone is streamed directly to Deepgram so the words you recite can be followed along. That audio is processed in real time; it is not stored by Hafizly and is not used to train your voice model. These providers process data under their own privacy policies. Your data may be transferred to servers hosted in the United States; such transfers are carried out with appropriate safeguards under applicable data protection law.
6. Data Retention
• Account information: For as long as your account is active • Voice model: For as long as your account is active (deleted immediately upon account deletion) • Generated audio files: Until you delete them or your account is closed • Payment records: 10 years as required by law • Technical log data: 90 days • Usage events (which steps you completed): For as long as your account is active; deleted along with your account • Consent records: Retained after account deletion A consent record is the only evidence that you permitted us to process your voice, and when you withdrew that permission, so it is kept after your account is deleted. It contains only your account identifier, the type of event, the version of the consent wording, and the date. It holds no voice data, no audio, no name and no email address.
7. Your Rights
Under applicable data protection law (including GDPR where applicable), you have the right to: • Know whether your personal data is being processed • Access your personal data • Correct inaccurate or incomplete data • Request deletion of your data ("right to be forgotten") • Restrict or object to processing • Data portability (receive your data in a machine-readable format) • Withdraw consent at any time (for processing based on consent) • Lodge a complaint with a supervisory authority To exercise these rights, contact us at admin@hafizly.app.
8. Cookies and Tracking
Hafizly uses the following cookies: • Essential cookies: Required for session management and security; cannot be disabled • Analytics cookies: Anonymous usage statistics via Vercel Analytics (no personal data) You can manage cookies through your browser settings. Disabling essential cookies may prevent some features from working.
9. Children's Privacy
You must be 18 or older to hold a Hafizly account. Under-18s cannot create an account in their own name. You may add your child's voice to your own account. When you do, the recording screen asks you to declare that the voice is not your own and that you consent on their behalf as their parent or guardian. That declaration is the account holder's responsibility. If you believe a child's data is in our system without permission, notify us at admin@hafizly.app and we will delete it immediately.
10. Security
To protect your data: • All connections are encrypted with HTTPS/TLS • Audio files are stored privately on Vercel Blob — not accessible via direct URL • Database access requires authentication • Regular security reviews are conducted No system is 100% secure. If we detect a security breach, we will notify you within the legally required timeframe.
11. Policy Updates
This policy may be updated when significant changes occur. We will announce material changes to your registered email address or via an in-app notification. Continuing to use the service after changes are published means you accept the updated policy. Last Updated: May 2026
12. Contact
For questions about this privacy policy or your personal data: Email: admin@hafizly.app Response time: within 30 business days