← Back to 7upToHeaven

App Privacy Policy

Effective August 9, 2026

This policy covers the 7upToHeaven mobile app. For how the 7uptoheaven.com waitlist website handles data, see our website privacy policy instead.

The short version

Everything your child does in the app — their name, their age, their XP, streaks, quiz results and memorisation progress — stays on your device and is never sent to us. Two things leave the device: a short voice clip during recitation practice, which is turned into text and immediately discarded, and anonymous crash and usage statistics. The voice clip requires a parent to agree first, and that agreement can be withdrawn at any time.

Who we are

The app is operated by 7upToHeaven (“we”, “us”). You can reach us at privacy@7uptoheaven.com with any privacy question or request.

No accounts, and nothing about you on our servers

The app has no sign-in and no online account. We hold no database of users. You can set up profiles inside the app — a first name and an age for each learner — but those profiles live only in the app's own storage on your device. We never receive them.

What stays on your device

All learning data is written to a private database inside the app and never transmitted anywhere:

  • Profile names, ages and the artwork style chosen for each
  • XP, ranks, streaks and reward goals
  • Quiz results, flashcard review history and memorisation progress
  • The Parent Corner PIN
  • Your recording-consent decision and the date it was made

Because none of this reaches us, we cannot see it, export it, or delete it for you — and neither can anyone else.

Recitation practice & the microphone

When a learner holds the recite button, the app records a short clip of their voice so it can check the recitation. Nothing is recorded at any other time — there is no background or always-on listening.

The clip is sent over an encrypted connection to our own proxy server, which forwards it to Groq for speech-to-text. Groq operates a Zero Data Retention policy on their API: the audio is not stored, not logged, and not used to train their models. Our proxy holds the service key so the app never carries it, and the proxy does not log or store audio either. Once the words come back as text, the clip is gone. We never keep a copy, never listen to recordings, and never share them.

Parental consent, and how to withdraw it

Before the very first recording, the app shows a consent screen explaining exactly what happens to the audio, and a parent must confirm using the Parent Corner PIN. Until that happens, the microphone is never used.

You can withdraw that consent whenever you like in Parent Corner → Settings → Recording Consent. Turning it off stops all recording immediately; recitation practice then simply asks for consent again the next time it is used.

Crash reports & analytics

The app uses two service providers to help us keep it working well, and both may be active while a child is using the app:

  • Sentry — collects technical crash and error data (such as stack traces, device model, OS version and app version) when something goes wrong. It is configured not to collect personal information, and it is not linked to any name, email, or profile.
  • PostHog— records which features are used, as counts of named events such as “a quiz was completed”. Events are tied to a random identifier generated on the device, not to a person, and they never include profile names or anything typed into the app.

Neither service is used for advertising or profiling, and the app does not use an advertising identifier at all.

You can switch PostHog off entirely at Parent Corner → Settings → Usage Data. Sentry crash reporting stays on: it carries no personal information, and it is how we find out the app broke on your device.

Audio streamed from the internet

Quran recitation, adhan audio and some verse text are streamed from public Islamic services — cdn.islamic.network, cdn.aladhan.com and api.alquran.cloud. As with loading any web page, those services can see the request and the device's IP address. No profile data, and nothing about the learner, is sent with these requests.

Reminders

The optional daily reminder is scheduled by the device itself. There is no push server and no device token is registered with us, so reminders involve no data leaving the phone.

No ads, no selling data

The app has no advertising, no third-party ad software, and no advertising identifier. We do not sell, rent, or share data for marketing purposes, and we never will. The data described above is used solely to run and improve the app.

Children's privacy

The app is built for children to use directly, so we hold it to the standards set by COPPA and the UK/EU rules on children's data. We collect no directly identifying information from a child — no name reaches us, no email, no account, no location, and no contact details. A child cannot send a message, publish anything, or be contacted by anyone through the app.

The only data generated by a child's use that leaves the device is the recitation audio described above, which requires parental consent and is discarded after transcription, and the anonymous crash and usage statistics.

What is kept, and for how long

DataWhere it livesHow long
Profiles & all learning progressYour device onlyUntil you delete the app
Voice clipsSent to Groq, stored by no oneDiscarded after transcription
Crash reportsSentryUp to 90 days
Anonymous usage eventsPostHogUp to 12 months

Your choices

  • Stop all recording — turn off Recording Consent in Parent Corner → Settings.
  • Stop usage analytics — turn off Share anonymous usage data in Parent Corner → Settings.
  • Stop reminders — set the daily reminder to Off in the same place.
  • Delete everything — uninstalling the app removes every profile and all progress from the device permanently. Since we hold no copy, that is a complete deletion.
  • Ask us anything — write to privacy@7uptoheaven.com. We answer privacy requests from parents and guardians within 30 days.

Changes to this policy

If this policy changes, we'll update the effective date above. We check our providers' terms periodically and will revise this page if their handling of data changes.