Wisal · وصال

Privacy Policy

Effective date: 30 May 2026  |  Last updated: 30 May 2026

1. Introduction

Summary. This policy explains what data the Wisal app collects, why, who we share it with, how long we keep it, and your rights.

Wisal (“the App”, “we”, “us”, “our”) is operated by Hussam Banuwas, an individual developer based at rhga8283, Riyadh, Kingdom of Saudi Arabia. We are the data controller for the personal data described here and can be reached at admin@atharquran.org. By using the App you acknowledge these practices.

This policy is written to meet Apple’s App Store requirements and the Saudi Personal Data Protection Law (PDPL), and to cover the EU/UK GDPR and California CCPA/CPRA rights of users who download the App in those regions.

2. The data we collect

Summary. We collect 13 data types. Some are linked to your identity; the rest are collected but not linked to your identity. This mirrors, one-to-one, the disclosures on our App Store product page.

2.1 Data linked to your identity

2.2 Data collected but not linked to your identity

3. How we use your data

Summary. Four purposes: App Functionality, Analytics, Product Personalization, and Developer’s Advertising or Marketing.

• App Functionality — operate core features, authenticate you, process payments, fix crashes, and keep the App secure.
• Analytics — understand aggregate usage to improve the App.
• Product Personalization — tailor content and recommendations to you.
• Advertising or Marketing — send promotional messages and measure their performance, using your email and phone number only where permitted and, where required, with your consent.

4. Marketing communications

Summary. You can opt out of marketing at any time without losing access to the App.

Where the law requires opt-in consent, we obtain it before sending marketing. Every marketing email carries an unsubscribe link, and you can also opt out by emailing admin@atharquran.org. Service and transactional messages (security alerts, payment receipts) are not marketing and may still be sent.

5. Sensitive information — religious interests

Summary. The App processes data revealing your interest in religious texts, plus your behavior in the App, to personalize religious content.

Because data revealing religious interests or beliefs is a special category under the GDPR (Art. 9) and is treated as sensitive under the Saudi PDPL, we process it only on the basis of your explicit consent, limit it to what is necessary to personalize your experience, apply enhanced security, and let you withdraw consent at any time by contacting us or deleting your account. Withdrawing consent stops future personalization based on this data.

6. Location data

Summary. We collect coarse (approximate) location only — never precise GPS.

You can change or revoke location access at any time in iOS Settings → Privacy & Security → Location Services (or the equivalent Android setting). Revoking it may limit location-aware features but will not block core use of the App.

7. Payment information

Summary. Payments are handled by Apple Pay, Google Play or a third-party payment gateway — not by us. We do not process or store your full card details ourselves.

Your payment details are handled by the payment provider under its own terms and security standards (e.g. PCI-DSS). We keep only the records needed for fulfilment, refunds, fraud prevention, tax, and accounting.

8. How we share your data

Summary. We do not sell your personal data. We share it only with providers acting on our instructions, and where the law requires.

We may share data with service providers (such as hosting, analytics, crash reporting, payment processing, and message delivery) that are contractually bound to use it only for us; and with regulators, courts, or law enforcement where required by law or to protect rights and safety. We require every recipient to protect your data and use it only for the disclosed purposes.

9. International data transfers

Your data may be processed in the Kingdom of Saudi Arabia and in other countries where our service providers operate. Where data crosses borders, we rely on the transfer safeguards permitted under the Saudi PDPL and, for EEA/UK data, mechanisms such as the EU Standard Contractual Clauses.

10. Data retention

Summary. We keep personal data only as long as needed for the purposes above:

• Account and contact data: retained for the life of your account. When you request deletion, your account is disabled immediately and all personal data is permanently deleted or irreversibly anonymized within 90 days of that request (see Section 12).
• Payment records: retained for the period required by applicable tax and accounting law.
• Diagnostics: retained for a limited troubleshooting window.
• Analytics: retained in aggregated or pseudonymized form.

When data is no longer needed we securely delete or irreversibly anonymize it.

11. Security

We use technical and organizational measures including encryption in transit, access controls, and least-privilege practices to protect your data. No system is perfectly secure, but if a personal-data breach occurs we will notify affected users and regulators where the law requires.

12. Your rights

Summary. You can access, correct, and delete your data, withdraw consent, and exercise the rights granted by the law that applies to you.

• Saudi PDPL: the rights to be informed, to access, to request correction, and to request destruction of your personal data.
• EU/UK GDPR: access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to complain to a supervisory authority.
• California CCPA/CPRA: the rights to know, delete, correct, and opt out of any sale or sharing, without discrimination.

You may also exercise any right, including requesting deletion, by emailing admin@atharquran.org. We will verify your identity and respond within the legally required time.

13. Children’s privacy

The App is not directed to children under 16, and we do not knowingly collect their personal data. If we learn we have done so without verified parental consent, we will delete it promptly. Parents or guardians with concerns may contact admin@atharquran.org.

14. App Tracking Transparency

We do not track you across other companies’ apps and websites. The marketing use of your contact details described in Section 4 is first-party and separate from cross-app tracking.

15. Changes to this policy

We may update this policy and will post the revised version with a new “Last updated” date. For material changes we will give additional notice and, where required, seek renewed consent.

16. Contact us