Privacy Policy

Mustami is a Quran audio player. There are no ads and no advertising SDKs. Listening does not require an account. If you choose to sign in, we store only what is needed to keep your listening statistics, favourites and continue-listening position, and videos you submit to Reels. Most of what you do in Mustami never leaves your device.

This policy covers the Mustami iOS app and the Mustami web player at mustami.oelhaidi.com.

The short version

• Listening does not require an account. You can sign in with Apple if you want your listening time, streak, favourites and continue position on more than one device. Name and email are only stored if Apple shares them with us.
• Playlists, downloads and settings stay on your own device — on your iPhone, or in your browser’s local storage. We cannot see them.
• We collect product analytics — which screens are opened, which reciter is played, whether audio failed to load — so we can tell what is working and fix what is broken. Guests use a random identifier. If you sign in, events are linked to your Mustami account ID, never to your name or email.
• We do not sell, rent or share your data with advertisers or data brokers. We do not track you across other apps or websites.
• Audio is streamed from third-party servers (MP3Quran) and verse text and translations from AlQuran Cloud. Those requests reach those services directly.

What we store on your device

The following stays on your device and is not uploaded unless you sign in:

• Favourite reciters and starred recitations (unless you sign in)
• Playlists you create
• Playback queue
• Continue-listening position (unless you sign in)
• Listening time, daily goal and streak (unless you sign in)
• Downloaded audio files
• Interface language, playback speed, translation choice and other settings
• Notification preferences

On iOS this lives in the app’s own storage. On the web it lives in your browser’s localStorage. Deleting the app removes the on-device copy. On the web, clearing your browser’s site data for mustami.oelhaidi.com removes the on-device copy. Signed-in listening statistics, favourites and continue position remain on our servers until you delete your account.

Tasmīʿ practice

Personal practice history, recall estimates, points, completed practice days and your own memorized-surah marks sync with your account when you sign in. Guest practice stays on your device. Your personal points do not determine public league scores. Joining the league is optional and uses a generated alias.

Shared family or halaqa challenges are optional. Participants choose a display name or use a generated alias. Only the organizer can see the participants’ aliases, scores and completion progress. A challenge closes to new answers after seven days; its organizer can delete it. Account deletion removes your attempts and any challenges you organized. Pass-the-phone names and results stay in the current screen on your device and are not uploaded.

Reels watch history

We store reel impressions, viewing progress, saves, shares, external opens and feedback to personalize your feed and avoid repeats. Anonymous history uses a hashed installation ID; signed-in history is linked to your account. On sign-in, anonymous history from this installation is merged into your account. Detailed ranking events are retained for 90 days. Watch history is retained until you clear it from the Reels menu or delete your account. Feed sessions expire after 48 hours. Clearing history allows earlier videos to appear again. We retain one qualified view per account or hashed installation and reel to show creators their view counts. A qualified view requires three seconds of playback, or the full video if shorter. Clearing feed history does not reset these counts; deleting an account removes its linked views. Creator permissions and content are reviewed before external videos are published. Opening an Instagram link takes you to a third-party service with its own privacy policy.

Optional account

Sign in is optional. Playback is not gated. If you sign in with Apple (or, during development, with a local email), we store:

• An Apple user identifier, or a development email address
• Your name and email, if Apple shares them
• Listening time, streak, daily totals and daily goal, so they can restore on another device. Updated iOS apps also sync time listened by surah and reciter for monthly recaps, with the most recent 400 listening days retained for that detailed breakdown. Guest listening stays on the device unless you choose to import it into your account.
• Favourite reciters, starred recitations, and the last reciter, surah and playback position, so you can continue on another device

Playlists and downloaded recordings stay on your device. Source Quran audio and text come from MP3Quran, AlQuran Cloud and our hosting. If you submit a reel, its rendered video contains the selected recitation, Arabic text and translation and is stored for review and publication.

You can sign out, or delete your account, in Settings. Deleting the account removes the user record, listening statistics, favourites and continue position we hold, and removes your reels from public listings. Their media files are queued for deletion.

Quran reels

Browsing, creating and exporting reels do not require an account. Drafts, selected photos or videos, and saved-reel bookmarks stay on your device. Choosing media uses the system picker; we receive access to the selected item, not your full photo library. Opening the phone’s share menu does not publish a video to Mustami.

Submitting a reel requires sign-in. We store its rendered video, account identifier, reciter, surah, selected audio interval, template, translation edition, and review status. Approved reels and creator names are visible to everyone. Original imported media is not separately uploaded. You can remove your own reel; it disappears from public listings immediately and its media is queued for deletion.

Reports include the reel, selected reason, and a keyed identifier used to limit repeated reports. For guests that identifier is derived from the request IP; raw IP addresses are not stored in the report record. Reports remain while the reel is retained. Media delivery and hosting providers also receive ordinary network request information.

Analytics

Mustami also records first-party activity sessions and download or export counts for its restricted admin dashboard. Activity uses a hashed random installation identifier, platform, and first and latest activity times. When signed in, activity sessions can be linked to your account so the dashboard can distinguish active accounts from guest devices. We also keep the approximate country supplied by our hosting provider for signed-in activity and account-sync requests, to support country filters. This is not precise location or verified residence, and VPNs can affect it. Download events record the content, size and completion time without an account link. We do not store raw device identifiers, IP addresses, authentication tokens or session recordings in these dashboard records. Your account deletion removes its link to activity sessions.

We use PostHog to understand how Mustami is used. Guests use a random analytics identifier. When you sign in, we link events to your Mustami account ID across sessions and devices. We do not send your email, name, Apple identity token or password to PostHog for this link. Signing out resets the local analytics identity so the next account does not inherit it. Existing anonymous history on that browser or installation can become linked when you sign in.

The events describe the content, not you: reciter, surah, track, and the interface language you have selected. Search events record that a search happened. The SDK also collects app lifecycle events, crash and error reports, a randomly generated device identifier, app and OS version, device model, rough locale and timezone, and IP address, which PostHog uses to derive an approximate country or city.

PostHog processes this on our behalf as a data processor, on infrastructure in the United States. On the web, analytics requests are proxied through mustami.oelhaidi.com. We retain analytics data under PostHog’s standard retention settings. Authorized administrators can use account-linked analytics and approximate country for product analysis and support.

We do not use the Advertising Identifier (IDFA), we do not present App Tracking Transparency prompts because we do not track you, and we run no advertising, attribution or marketing SDKs of any kind.

Third-party services the app contacts

Using Mustami means your device connects directly to these services. Their own privacy policies govern those connections, and each of them will necessarily see your IP address:

We do not send playlists or downloaded audio to these services. If you sign in, listening statistics, favourites and continue position are sent to our API on mustami.oelhaidi.com. If you submit a reel, its rendered video is uploaded to our storage for review.

Notifications

If you turn on daily, streak or monthly recap reminders, those notifications are scheduled locally on your device by iOS. You can turn these reminders off in Mustami’s settings or in iOS Settings at any time.

When a reel you submitted is approved and published, we save a notification in your account. If you allow notifications, we also send an alert through Apple Push Notification service. We store the app’s push token, notification language and delivery status to send these alerts. Push tokens are linked to your signed-in session and removed when that session ends or you delete your account. You can disable push alerts in iOS Settings and still read approval notifications from your profile.

Photos and other permissions

Mustami never reads your photo library. When you add a photo or video to a reel, you choose it in the system picker, and the app receives only that item. When you save a reel or monthly recap to Photos, iOS asks for permission to add to your library; this permission cannot read your existing photos. Notifications are only sent if you allow them.

Mustami does not request or access your location, contacts, camera, microphone, calendar or health data.

Children

Mustami contains no messaging, no purchases and no advertising. Listening does not require an account. Reels include videos submitted by signed-in users. Each submission is reviewed before it is published, anyone can report a reel, and you can block a creator. If a child signs in with Apple, Apple may share a name or email; we use that only to operate the account. We do not knowingly collect personal information from children beyond what is needed for an optional sign-in.

Your rights

If you have not signed in, we hold no account and no identifier that points back to you, so we usually cannot locate “your” data in order to export or delete it on our servers.

If you have signed in, you can delete the account in Settings, or write to us at the address below and we will delete the user record, listening statistics, favourites and continue position we hold.

You can nonetheless exercise complete control:

• Delete everything we hold on your device by deleting the app, or by clearing site data for mustami.oelhaidi.com in your browser.
• Stop analytics from your browser by using your browser’s tracking protection, or a content blocker.

If you are in the EU, the UK, or a jurisdiction with comparable law, you have the rights of access, rectification, erasure, restriction, objection and portability in respect of any personal data we process. Our lawful basis for the product analytics described above is our legitimate interest in maintaining and improving the app. Write to us at the address below and we will do whatever can be done with the information available.

If you are a California resident: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use it for cross-context behavioural advertising.

Changes

If this policy changes, the date at the top changes with it, and material changes will be noted in the app’s release notes.

Contact

Questions about this policy, or about privacy in Mustami: hello.elhaidi@gmail.com

See also our Terms of Use.