How we look after your information.

1. Who is responsible

DEENUNA operates The Hifz Eutopia. Contact: thehifzeutopia@gmail.com.

2. Information we collect

• Account details — name, username, password (stored as a secure hash), role, optional email, country, phone, gender and birth date when you enrol.
• Learning records — tracker entries, Sabak, progress, Dor calendars, reviews, attendance, notices and similar academy activity.
• Optional profile — a photo and short bio if you choose to add them.
• Technical data — a session cookie so you stay signed in, and a remember-me token if you ask us to remember this device.

Public Islamic tools (Qiblah, prayer times, Tasbeeh on a device) may use your device location only in the browser, and only when you allow it. That location is not stored as a student record unless a feature you signed into needs it to save your own progress.

3. Why we use it

• To create and secure your account.
• To teach, track and support Quran learning.
• To let a linked Parent or Ustadh see the progress they are permitted to see.
• To keep the academy safe (login limits, abuse prevention).

We do not use your information for advertising networks, and we do not sell it.

4. Who can see it

Access follows role. A student sees their own journey. A parent sees only linked children. An Ustadh sees assigned students. An admin sees what is needed to run the madrasa. We do not publish private tracker or review notes to the public internet.

5. Cookies and sessions

We use a session cookie that is HTTP-only and SameSite=Strict. If you tick “Remember me”, a long-lived token is stored so you do not have to sign in every visit. You can end a session by logging out.

6. How long we keep it

We keep account and learning records for as long as the account is active and the madrasa needs them for teaching. If you want an account closed, write to us and we will remove or anonymise what we no longer need, unless we must keep a record for security or legal reasons.

7. Security

Passwords are hashed. Forms that change data use extra checks where they are in place. Uploaded photos are type-checked and stored outside executable script paths. No website can promise perfect security; please choose a strong unique password.

8. Children

This academy is used by students, often with a parent. A parent or guardian should create or supervise enrolment for a child. Contact us if you believe a child’s information was given without that care.

9. Your choices

• Update personal information from your account pages.
• Change your password at any time.
• Ask us to correct or delete information that we no longer need.
• Read the Terms of Service for how the academy is used.

10. Changes

We may update this policy when our practices change. The date at the top will change when we do.