Privacy Policy

This Privacy Policy explains how Vikolo Dynamics Ltd (“we”, “us”, “our”) collects, uses, shares, and protects your personal information when you use the RecitID mobile application (the “App”) and any related services we provide.

We designed RecitID to respect your privacy. Audio, images, and text submitted through identification, translation, and scanning features are processed in real time or temporarily buffered to deliver the feature you request, then deleted from our systems according to our retention workflow. We do not sell your personal data. We do not run third-party advertising or track you across apps.

If you have any questions about this policy or your data, contact us at support@recitid.ai.

1. Who we are

RecitID is operated by:

Vikolo Dynamics Ltd
Sw8/1877 College Cres, 200252
Reg No: 9003186
Contact: support@recitid.ai
Website: https://vikolo.com

For the purposes of the NDPA Act 2023, Vikolo Dynamics Ltd is the data controller for personal information processed through RecitID.

2. What we collect and why

We group the data we process into categories that broadly match the privacy disclosures shown in app store listings.

2.1 Account information (linked to you)

When you sign in with Apple, Google, or an email address, we collect:

• Name — as provided by Apple, Google, or entered by you
• Email address — for authentication and account-related communication
• User ID — a unique internal identifier generated through our authentication system

Why we use it: to authenticate you, sync bookmarks and saved data across devices, and provide account-based features.

Lawful basis: performance of a contract, and consent where applicable.

2.2 Purchase and subscription information (linked to you)

When you subscribe to a paid plan, we collect:

• Subscription status
• Plan type
• Purchase, renewal, and expiry information
• Transaction or entitlement identifiers from Apple and RevenueCat

We do not receive your Apple ID password, full card number, or full billing details. Payments are handled by Apple.

Why we use it: to verify purchases, unlock paid features, manage entitlements, and understand subscription flow performance.

Lawful basis: performance of a contract.

2.3 Audio data (generally not linked to your identity for feature processing)

When you use Detect, Auto-Detect, or Live Translation, the App sends short microphone recordings to our backend and service providers to identify recitation, transcribe speech, detect reciters, and return translations or related results.

• Audio is processed to provide the feature you requested
• Audio is not used by us for advertising
• We delete audio from our systems after processing, subject to short operational buffering or transient storage required to complete the request
• Our AI and cloud service providers may retain request content for a limited period, including up to 30 days in some cases, for abuse monitoring, security, and reliability
• We do not use customer API content to train our own models

Why we use it: to identify Qur'an recitations, detect reciters, transcribe Arabic speech, and provide live translation features.

Lawful basis: performance of a contract.

2.4 Photos, scanned images, and pasted Arabic text (generally not linked to your identity for feature processing)

When you use Smart Scanner, upload an image, select a photo from your library, or paste Arabic text, the App sends that content to our backend and service providers for recognition and explanation.

• Images and text are processed to provide the feature you requested
• Uploaded images may be briefly buffered in our storage or compute pipeline while processing completes
• We delete images from our systems after processing, subject to short operational delays
• Third-party providers may retain request content for a limited period for abuse monitoring, security, and service integrity

Why we use it: to identify Qur'anic verses, hadith, du'a, Arabic study materials, and other Islamic text, and to provide meaning, source, and context.

Lawful basis: performance of a contract.

2.5 Usage analytics, diagnostics, and performance data

We use analytics and diagnostics tools, including Firebase services, to understand how RecitID is used and to improve reliability, performance, and product quality. This may include:

• Feature usage and interaction events
• Device model, operating system version, app version, and language
• Crash reports, performance metrics, and diagnostics
• General subscription funnel events

We do not use analytics for third-party advertising or cross-app tracking. We do not use analytics data to directly identify you by name or email.

Why we use it: to improve the App, measure performance, diagnose failures, and understand aggregate product usage.

Lawful basis: legitimate interests, and consent where required by applicable law.

3. Information we do not collect for unrelated purposes

RecitID does not collect or use the following for advertising or profiling purposes:

• Precise location data
• Contacts
• Calendar data
• Health data
• Browsing history from other apps or websites
• Third-party advertising identifiers for cross-app tracking

4. How we store and protect your information

We use technical and organisational safeguards designed to protect your information, including:

• Encrypted transmission over HTTPS/TLS
• Access controls for production systems
• Managed cloud infrastructure and authentication services
• Operational controls limiting access to authorised personnel

Our systems may include services such as Google Firestore, Google Cloud, Cloudflare, and related infrastructure providers.

No system is completely secure. If a personal data breach occurs and notification is required by law, we will notify the appropriate regulator and affected users within the legally required timeframe.

5. Who we share your information with

We share the minimum necessary information with service providers that help us operate RecitID. These may include:

These providers process information on our behalf or as independent service providers as needed to operate the App.

We do not sell personal information. We do not share personal information with third parties for their own advertising purposes.

6. International transfers

Because our service providers operate in multiple countries, your personal information may be processed outside your country of residence.

Where required by law, we rely on appropriate safeguards for international transfers, which may include:

• Adequacy decisions
• Standard contractual clauses or similar transfer mechanisms
• Other lawful transfer mechanisms recognised by applicable law

You may request more information about applicable safeguards by contacting support@recitid.ai.

7. How long we keep your data

We retain information only as long as reasonably necessary for the purposes described in this policy, including to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements.

Typical retention periods include:

8. Your rights

Depending on where you live, you may have rights including:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Deletion — request deletion of your account and associated data
• Restriction — ask us to limit certain processing
• Objection — object to processing based on legitimate interests
• Portability — request a machine-readable copy of certain data
• Withdraw consent — where processing is based on consent
• Opt out of sale or sharing — we do not sell or share personal information for cross-context behavioural advertising

To exercise your rights, contact support@recitid.ai. We may need to verify your identity before completing your request.

You may also have the right to lodge a complaint with your local data protection regulator.

9. Subscriptions and cancellations

RecitID offers subscriptions through Apple’s in-app purchase system. Subscription billing, renewal, cancellation, and refunds are governed by Apple’s systems and policies.

Cancelling a subscription does not automatically delete your RecitID account. If you want your account deleted, use the in-app deletion option if available or contact us.

10. Children’s privacy

RecitID is intended for a general audience. We do not knowingly collect personal information from children in violation of applicable law.

If you believe a child has provided personal information to us in a way that is not permitted, contact support@recitid.ai and we will investigate and, where appropriate, delete the information.

11. AI-generated content

RecitID uses artificial intelligence and machine learning to:

• Transcribe Arabic recitation and speech
• Translate Arabic into supported languages
• Read Arabic text in scanned images
• Generate explanations and study aids
• Help identify reciters

AI-generated outputs may be incomplete or mistaken and should be used as study aids, not as a substitute for qualified religious scholarship or professional advice.

Where applicable inside the product, we aim to label AI-generated output clearly and provide source-based explanations.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the Last updated date at the top of this page.

If changes are material, we may notify you through the App, by email, or by other appropriate means before they take effect.

13. Contact

If you have questions, concerns, or requests about this Privacy Policy or the way RecitID handles personal information, contact:

support@recitid.ai

Vikolo Dynamics Ltd
Sw8/1877 College Cres, 200252
Reg No: 9003186
Website: https://vikolo.com