Ilem Privacy Policy
Effective date: 23 September 2026 Version: 1.0
Ilem is made by Ilem Ltd, a company registered in England and Wales (company number 17463494), registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. In this policy, "we", "us" and "Ilem" mean Ilem Ltd. We are the data controller for the personal data described here.
If you have any question about this policy or your data, email hello@ilemapp.com.
1. The short version
- You can use most of Ilem without an account, and without giving us anything.
- If you sign in, we hold your name, email address and a user ID so you can use your free picks and ilem Plus.
- Your notes, progress, quiz results, bookmarks and downloads are stored on your phone, not on our servers.
- Prayer times are worked out on your phone. Your location never comes to us.
- We do not use analytics, advertising or tracking tools, and we do not sell or share your data for marketing.
- You can delete your account from inside the app at any time.
2. What we collect and why
2.1 Using Ilem without signing in
You can read the Qur'an, listen to lectures and Benefits, read books and use prayer times without an account. In that case we collect no personal data ourselves. Some data still passes to the services that deliver the app's content, described in section 4.
2.2 Your account
When you sign in with Google or Apple we receive:
- your name (Apple lets you hide this and send only your first name or none)
- your email address (Apple lets you hide this and send a relay address instead)
- a unique user ID created for your account
We use this to sign you in, to show your name and email on your Profile, and to link your free picks and any ilem Plus subscription to you.
Legal basis: performance of a contract (providing the account you asked for).
2.3 ilem Plus subscriptions
Subscriptions are sold through the Apple App Store (and, when available, Google Play). Payment is taken by Apple or Google. We never see your card details.
To know whether your account has ilem Plus, we use RevenueCat, a subscription management service. RevenueCat receives your user ID, purchase receipts from the store, and basic device information (device type, app version, language, and a device identifier that Apple resets when you delete and reinstall the app). RevenueCat does not receive your name or email.
Legal basis: performance of a contract (providing the subscription you bought).
2.4 Prayer times and location
If you allow it, the app reads your approximate location on your phone to calculate prayer times. The calculation happens entirely on your phone. Your coordinates and the name of your nearest town are kept on your phone for up to 12 hours so the times do not need recalculating every time you open the app.
The only place your coordinates are sent is to your phone's built-in address lookup service (provided by Apple on iPhone and Google on Android) to turn them into a town name. They are not sent to us or to anyone else.
You can refuse or withdraw location permission at any time in your phone's Settings. Prayer times will then be unavailable until you allow it again.
Legal basis: your consent, given through the phone's permission prompt.
2.5 Data kept on your phone only
The following is stored on your phone and is not sent to us:
- personal notes you write on lessons and Benefits
- lesson progress, listening time, quiz results and revision records
- bookmarks and saved items, including any note you attach to them
- which lessons and Benefits you have unlocked with free picks
- downloaded audio and books
- display preferences such as dark mode, text size and reciter
If you delete the app, this data is deleted with it. Your phone's own backup (iCloud or Google backup) may include it, under Apple's or Google's terms.
On iPhone, when you spend your free picks the app stores a small marker in the phone's secure storage that records only that picks have been used on this device. It contains nothing that identifies you and survives reinstalling the app. Its purpose is to stop free picks being reset by creating new accounts.
2.6 Technical data
Like any app, Ilem connects to services over the internet. When it does, those services see your device's IP address and standard connection details. This includes Google (for sign-in), RevenueCat (for subscriptions), Cloudflare (which hosts our audio and book files) and the Al Quran Cloud API (which provides the Qur'an text, translation and recitations in the scroll reader). We do not use this information to identify or profile you.
Google's Firebase service, which handles sign-in, also creates an installation identifier for the app on your device. It is used to make sign-in work and is not used for analytics or advertising.
Legal basis: our legitimate interest in running a working, secure app.
3. What we do not do
- We do not use analytics or usage-tracking tools.
- We do not show advertising or use advertising identifiers.
- We do not track you across other apps or websites.
- We do not sell your personal data, and we do not share it for anyone else's marketing.
- We do not read your notes.
If any of this ever changes, we will update this policy and, where the law requires it, ask for your consent first.
4. Who we share data with
We share personal data only with the service providers needed to run the app, and only what each one needs:
| Provider | What they receive | Why |
|---|---|---|
| Google (Firebase Authentication, Sign in with Google) | name, email, user ID, installation ID, IP address | signing you in |
| Apple (Sign in with Apple, App Store) | your Apple ID details as you choose to share them; purchase information | signing you in; selling subscriptions |
| RevenueCat | user ID, purchase receipts, device information | knowing whether you have ilem Plus |
| Cloudflare | IP address and file requests | delivering audio and book files |
| Islamic Network (alquran.cloud) | IP address and which surah or verse is requested | delivering Qur'an text, translation and recitations |
When you tap a source link (for example to sunnah.com) the site opens in an in-app browser and that site's own privacy policy applies.
We may also disclose personal data if the law requires it, or to protect the rights and safety of users or the public.
5. International transfers
Google, Apple, RevenueCat and Cloudflare process data in the United States and elsewhere. Transfers from the UK are covered by the UK's adequacy arrangements where they apply and otherwise by the safeguards those providers publish, including the UK International Data Transfer Addendum to standard contractual clauses.
6. How long we keep data
- Account data: until you delete your account or ask us to.
- Subscription records at RevenueCat: deleted within 30 days of your account deletion request. Apple and Google keep their own purchase records under their terms.
- Data on your phone: until you delete it or the app.
- Support emails: up to two years after the matter is closed.
7. Deleting your account
Go to Profile, then Settings, then Delete account. The app will ask you to sign in again to confirm it is you, then it deletes your account from our sign-in provider, revokes the Apple or Google sign-in link, and unlinks your subscription record. Data kept on your phone (section 2.5) is not deleted by this; delete the app to remove it. An active subscription is not cancelled by deleting your account; cancel it in your Apple or Google subscription settings.
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict or object to how we use it
- receive a copy of the data you gave us in a usable format
- withdraw consent where we rely on it (for example, location)
To exercise any of these, email hello@ilemapp.com. We will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
9. Children
Ilem's content is suitable for all ages, and anyone may use the app without an account. Accounts are for people aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, email us and we will delete it. We keep the data we collect to the minimum needed, use no tracking or advertising, and design the app with the UK Age Appropriate Design Code in mind.
10. Security
We keep the data we hold to a minimum, use providers with strong security practices, protect all connections with encryption in transit, and limit access to our provider accounts to the people who run Ilem, protected by two-factor authentication. No system is perfectly secure; if a breach affects your data we will tell you and the ICO as the law requires.
11. Changes to this policy
We will post any changes here and update the effective date. For significant changes we will tell you in the app.
12. Contact
Ilem Ltd 71-75 Shelton Street, Covent Garden, London WC2H 9JQ hello@ilemapp.com Company number 17463494, registered in England and Wales.