My Framer Site

Privacy policy

Last updated: September 22, 2026

1. Who is the data controller?

The controller of personal data processed through the Muraja3App mobile application and related website is:

BLM Company

SIRET: 91447258400038
Sole proprietorship (micro-entreprise)
Registered office: 43/3 rue des chercheurs, 59650 Villeneuve d'ascq, France
Privacy / rights requests: contact@muraja3app.com

Muraja3App is published by BLM Company.

2. Scope

This Privacy Policy explains how we collect, use, store, and protect your personal data when you:

use the Muraja3App mobile app (iOS / Android);
create an account (including a guest / anonymous account);
start a free trial or subscribe;
contact us by email.

We process personal data in accordance with the EU GDPR (Regulation 2016/679) and French data-protection law. If you use the app from the United States or elsewhere, this policy still describes our practices; additional consumer notices may apply depending on your state (see section 17).

3. Data we collect

3.1 Account and identity

email address (if you register with email);
technical account identifiers (e.g. Firebase UID);
guest / anonymous account status, if applicable;
app preferences (language, settings).

3.2 Memorization and revision data (core service)

Qur’an pages / portions you mark as memorized;
revision programs, schedules, sessions, completions;
progress stats, repetition counts, reported mistakes;
feature-related content (e.g. notes / quiz) depending on use.

Sensitive data note (GDPR Art. 9)
This information may reveal religious beliefs. It is processed only to provide Qur’an revision features, with the safeguards in section 5.

3.3 Subscription and payment-related data

Premium / trial / free status;
technical purchase / entitlement identifiers (via app stores and RevenueCat);
offer type (monthly, annual, etc.) and entitlement expiry when applicable.

We do not collect or store your full payment card numbers. Payments are processed by Apple (App Store) and/or Google (Play Store).

3.4 Technical and usage data

device type, OS, app version;
technical logs needed for diagnostics (crashes, errors);
product analytics events (screens, onboarding funnels, aggregated actions) via PostHog;
push notification token (if you allow notifications).

3.5 We do not sell your data

We do not sell your personal data and do not share it with data brokers for advertising.

4. Purposes and legal bases (GDPR)

Purpose

Examples

Legal basis

Provide the app (account, sync, programs, schedule, quiz, mushaf…)

Create / restore your progress

Contract (providing the service)

Process memorization / revision data that may be religious in nature

Memorized pages, hifdh stats

Explicit consent (Art. 9(2)(a)) — by using the app for this purpose

Manage trial and subscription

Premium access, restore purchases

Contract + store requirements

Push reminders

Revision reminders, trial-end reminders

Consent (system permission + in-app choices)

Product analytics (improve the product, funnels)

PostHog (EU cloud)

Legitimate interests and/or consent where required

Security, fraud prevention, support

Logs, email replies

Legitimate interests / legal obligationwhere applicable

Legal obligations

Accounting, authority requests

Legal obligation

You may withdraw consent (e.g. notifications) at any time via device / app settings, without affecting prior lawful processing.

5. Data related to religious beliefs (Art. 9)

Muraja3App helps with Qur’an memorization and revision. Progress data is inherent to the service.

We commit to:

use it only to provide and improve that service;
not sell it;
not use it for third-party behavioral advertising;
limit access to people / processors who need it to operate the service.

6. Processors and recipients

We use service providers (processors) to run the app. They act on our instructions for the purposes below.

Provider

Role

Typical data

Location / hosting

Google Firebase (Auth, Firestore, related services)

Account, database, sync

IDs, profile, programs, progress

Google infrastructure (possible transfers outside the EU, with safeguards)

PostHog

Product analytics

Usage events, technical / account properties

EU cloud (eu.i.posthog.com)

RevenueCat

Subscription entitlements

Purchase IDs / Premium status

US provider (transfers with safeguards)

Apple

App Store billing, APNs

Purchases, iOS push tokens

Per Apple

Google

Play Store billing, FCM

Purchases, Android push tokens

Per Google

Other recipients: competent authorities only when legally required.

7. International transfers

Some providers (including Google / Firebase, RevenueCat, Apple) may process data outside the EU / EEA, including in the United States.

Where such transfers occur, we rely on GDPR transfer tools, in particular the European Commission’s Standard Contractual Clauses, and any additional measures offered by those providers.

PostHog is configured in an EU region.

8. Retention

9. Your rights (GDPR)

You have the right to:

access your data;
rectification;
erasure (“right to be forgotten”);
restriction of processing;
objection (including to some legitimate-interest processing);
portability (where applicable);
withdraw consent at any time;
give instructions about your data after death (French law).

To exercise your rights:
Email contact@muraja3app.com with your request and the email linked to your account. We respond within legal time limits (generally one month).

You may also lodge a complaint with the French supervisory authority CNIL: www.cnil.fr.

10. Account deletion

You can delete your account from the app Settings (delete account action), or by emailing contact@muraja3app.com.

Deletion may be limited for data we must keep by law (e.g. certain billing-related records retained via the stores).

11. Security

We apply reasonable technical and organizational measures: authentication, encrypted transit (HTTPS / TLS), access control, and environment separation where practicable.

No system is perfectly secure. If an incident creates a risk to your rights, we will follow applicable GDPR breach-notification duties.

12. Children

Muraja3App is intended for users aged 15+ (digital consent age under French law).

We do not knowingly collect data from children under 15. If you are a parent / guardian and believe a child under 15 provided data, contact us and we will delete it promptly.

(App Store age ratings and US store rules may differ; we still apply this 15+ rule for our processing.)

13. Push notifications

Reminders (revision, trial-related, etc.) require your system permission and, where applicable, in-app choices. You can disable them anytime in device settings.

14. Cookies and trackers

The mobile app does not use classic browser cookies. It uses SDKs for analytics / diagnostics / push (see section 6).

On the marketing site (Framer), the host may set its own trackers; see any Framer / site notices shown there.

15. Changes to this policy

We may update this policy. The “Last updated” date will change. For material changes, we may notify you in the app or by email when possible.

16. Contact

BLM Company — Muraja3App
Privacy: contact@muraja3app.com
Address: 43/3 rue des chercheurs, 59650 Villeneuve d'ascq, France

17. Notice for users in the United States

Depending on your state (e.g. California CCPA/CPRA and similar laws), you may have rights to know, delete, and correct personal information, and to opt out of “sale” or “sharing” for cross-context behavioral advertising.

We do not sell personal information for money.
We do not share personal information for cross-context behavioral advertising as those terms are commonly defined.
To submit a privacy request, email contact@muraja3app.com. We will verify and respond as required by applicable law.

Apple and Google process payments under their own terms and privacy policies.