Quran Platform
Providers and external services
Third parties involved in Iqro and the data they may receive.
Current from 2026-08-24
1. Infrastructure
Hetzner Cloud hosts application servers, APIs, and databases. Cloudflare provides DNS, a protection/CDN layer, and R2 object storage and audio delivery. They may process IP addresses, technical headers, connection logs, and data we host as needed to provide those services.
2. Quran and audio
Quran.Foundation/Quran.com provides the Content API and some Quran and audio sources. Iqro is an independent service and is not an official Quran.Foundation app. Server-side Content API requests do not send user email or Iqro profile data. An external CDN sees ordinary network request data when audio loads directly.
3. Telegram Mini App
When a user chooses to launch the future Telegram Mini App, Telegram supplies platform launch data and separately processes information under its terms. The Mini App will accept only required fields and verify the signed launch payload. The web app does not send data to Telegram without this feature.
4. Email, notifications, and monitoring
Resend delivers one-time sign-in codes and receives the recipient address, service-message content, and delivery metadata. When a user explicitly allows browser notifications, Iqro stores the device push endpoint, subscription keys, language, and time zone; the browser-selected Google, Mozilla, Apple, or Microsoft push service receives the endpoint, delivery time, network metadata, and an encrypted message. The subscription can be disabled in the profile or browser settings. Sentry (Functional Software, Inc.; data stored in the EU) receives crash reports from the website, the app, and the server: the error type, stack trace, app version, device model and OS, page address and, for a sample of visits, page-load speed metrics. IP addresses, cookies, user identifiers, and request contents are not included in these reports.
5. Our limits
We do not sell personal data, disclose it to advertising brokers, use religious behavior for advertising, or train AI models on user content without separate explicit consent. Provider access is limited by purpose, contract, and data minimization.