Very little — and only when you sign up:

• Name — for a friendly greeting
• Email — for account recovery and (rare) important notices
• Password hash — Argon2id; we never see your actual password

That's the complete list of personal data we store.

• ✗ No third-party analytics (no Google Analytics, no Facebook Pixel)
• ✗ No advertising identifiers
• ✗ No IP logging beyond standard server logs (kept for 24 hours)
• ✗ No location tracking
• ✗ No browser fingerprinting

Your browser may store the following on your own device (via localStorage):

• Theme preference (light / dark)
• Sidebar collapsed state
• Hifz (memorization) level

None of this ever leaves your device.

We use one session cookie (PHPSESSID) to keep you logged in. That's it. No advertising cookies, no tracking cookies, no third-party cookies.

Our app talks to a small number of external services to function:

• QuranicAudio CDN — for audio recitations
• quran.com API — for tafsir and word-by-word data
• Google Fonts — for typography

These services receive only your request; they don't know who you are.

You can request deletion of your account and all associated data at any time by emailing trustme@trustnvelope.com. We'll process the request within 7 days.