Privacy
No ads, no analytics or tracking. An account is optional, and nothing is ever sold.
Signed out (the default)
Saved verses, streak, achievements, memorization progress, settings, reading position, collections and liked verses stay in this browser on this device only (local storage). Clearing site data removes them. Your reading progress is not sent to Ayah. To show like counts, your device asks Ayah for the counts of the verses on screen, a normal web request with no account attached.
Signed in
Ayah stores your email address, how you sign in (a securely hashed password, or the link to your Google or Apple account and the name it shares) and one progress document so it can sync between your devices. It also stores which verses you like (one like per verse) so they count toward Most loved; only totals are shown, never who liked a verse. You can delete your account and its data from Settings.
Sign in with Google or Apple
That company handles the sign-in and tells Ayah your email address and name; Ayah never sees your Google or Apple password.
Reminders and Give
The daily reminder runs on your device; Ayah has no push server. Give opens the charity's own website, so Ayah never knows whether or how much you give.
Content services
To show text and audio, your device asks public services (alquran.cloud, cdn.islamic.network, api.quran.com and its audio hosts, cdn.jsdelivr.net, raw.githubusercontent.com and Google Fonts) for the verse you are viewing. They see a normal web request (your IP address and the verse requested), as with any website. Search words you type are sent to the search service.
More detail is in the app under Settings → About, sources & privacy. See also the terms of use.