Privacy policy

Last updated November 03, 2026

Wirdy (wirdy.app and the Wirdy app for Android and iOS) is a free, non-profit service run by its founder. This policy explains what we keep about you, why, and how to delete it. Wirdy shows no ads, uses no third-party analytics or tracking, and never sells or rents your data.

What we collect

• Account details: your email address, your first and last name if you give them, and your password, which is stored only as a secure hash.
• If you sign in with Google: Google tells us your email address, your name and a Google account ID, so we can link your Google account to Wirdy. We never see your Google password.
• Your public profile: an @handle and an invite code, which friends use to find you. Friends see your handle and name, not your email address.
• Reminder settings: your time zone, reminder time, language and light/dark theme.
• Reading activity: your bookmark (the Mushaf page you are on), the pages and ayat you read each day, your streaks and trophies, and your friends list.
• A log of the reminder emails we send you (date and page).
• Security records: for each sign-in, the time, method, IP address and browser or device type; the IP address you signed up from; and when you were last active.
• Feedback you choose to send, with the app version, device type and page it was sent from.

How we use it

• To run the service: sign you in, keep your place in sync between the app and the website, show your stats, friends and leaderboard.
• To send the daily reminder email at the time you choose, and emails about your account.
• To keep accounts safe and block abuse such as automated sign-ups.
• To answer your feedback and improve Wirdy.

Who else handles it

We share your data with no one for their own use. A few providers process it for us, only to run Wirdy:

• Our hosting provider, which runs the servers and database.
• Our email delivery provider, which sends the reminder emails.
• Expo and Google Firebase Cloud Messaging (Apple's push service on iPhone), which deliver the app's daily reminder notification. They receive only your phone's push token and the reminder text.
• Cloudflare Turnstile, which checks that the website's sign-up form is used by a person. It is not used in the app.
• Google, only if you choose to sign in with Google. Google confirms who you are; we receive just your name, email address and Google account ID.

In the app

• Your sign-in token is kept in your phone's secure storage.
• If you turn on the daily reminder, your phone's push token, reminder time and time zone are sent to Wirdy so we can send the notification on time. Signing out or turning the reminder off removes them.
• If push delivery is unavailable, the app also schedules the daily reminder on your phone as a backup.
• The app asks only for permission to show notifications. It does not access your location, contacts, photos, camera or microphone.

How long we keep it

• We keep your data for as long as your account exists.
• All data travels over an encrypted (HTTPS) connection.
• When you delete your account, your profile, reminder settings, reading history, friends, sign-in records, app sessions and reminder log are erased right away. Feedback messages you sent are kept so we can still reply, unless you ask us to remove them.

Your choices

• You can change your details and reminder settings at any time in Settings.
• You can stop the reminder emails without deleting your account.
• You can ask us for a copy of your data, or to correct or delete it, by email.
• Wirdy is not directed at children under 13.

Deleting your account

You can delete your account yourself in the app or on the website. See: Delete your Wirdy account

Contact

Questions about this policy or your data? Email us at contact@wirdy.app