Privacy policy

This policy covers visitors who try Tasmi without an account, parents who manage a household, teachers who work with linked students, and anyone who contacts us at support@tasmi.app.

Students practice through a household profile picker — they do not sign in with their own Google account. A parent or guardian creates the household account and is responsible for student profiles on a shared device.

Visitors can also try practice without an account to evaluate Tasmi. That flow still uses the microphone and stores practice outcomes on that browser — see Anonymous practice below.

You can try Tasmi without signing in. When you recite, audio is captured and sent to our servers for transcription, and the resulting transcript and practice outcome are stored and tied to a device cookie on that browser.

Before your first practice without an account, we show a short notice asking you to confirm you are at least 18, or a parent or guardian supervising a child, before the microphone is used.

Anonymous practice is intended for adults evaluating Tasmi, or for a minor practicing only with a parent or legal guardian present and supervising. If a child under 13 uses anonymous practice, a parent or guardian must be present, must consent to the microphone and data processing described in this policy, and is responsible for that use.

Anonymous attempts are not added to a household account when you later sign in. For ongoing student practice with parent visibility, create a household account and use a student profile.

The information we collect depends on how you use Tasmi:

• Account (parents and teachers): When you sign in with Google, we receive your Google account identifier, name, email address, and profile image from Google. We store this to operate your account.
• Household and student profiles: Display name for each student under your household. Optional student PIN and optional household parent PIN — stored only as one-way hashes, not as plain text. We do not collect student gender, birth date, or age in the current product.
• Practice attempts: Passage recited, Arabic transcript text produced by speech-to-text, word-level feedback results (matched, missed, or extra words), accuracy summary, whether practice was from memory, and timestamps. We do not store raw audio recordings after transcription completes.
• Teacher links: When a parent and teacher connect through an invite, we store the link relationship and which students the teacher may view or assign lessons to.
• Assignments and notifications: Lesson passages you set, practice-goal settings, teacher review timestamps, and records of transactional emails we send (such as assignment or practice reminders).
• Cookies and similar identifiers: HttpOnly cookies for sign-in session, anonymous device identity, active student selection on a shared device, shared-device handoff mode, and short-lived sign-in or invite helpers. See Cookies below.
• Technical data: IP address and request metadata used for abuse prevention and operating the service.

When a student recites, audio is captured in the browser and sent to our servers for transcription. Our servers process the audio using a speech-to-text service provider and do not retain raw audio after transcription. Only the resulting transcript text and practice outcome are stored with the attempt.

Transcripts may include minor recognition errors. They are used to compare recitation against the canonical Quran text word by word and to show feedback to the student and, when applicable, to the parent or linked teacher.

We use cookies that are necessary to run Tasmi. We do not use advertising or cross-site tracking cookies.

• Sign-in session — keeps you signed in after Google sign-in.
• Device identity — anonymous browser identity for guests practicing without an account.
• Student selection — remembers which household student is practicing on a shared device.
• Shared-device handoff — marks student mode after a parent hands the device to a student.
• Sign-in and invite helpers — short-lived cookies so sign-in or invite flows resume correctly.

You can clear cookies in your browser settings. Clearing cookies signs you out and resets anonymous device identity on that browser; household data stored in our systems is not deleted by clearing cookies alone.

• Provide word-level recitation feedback and display results on the mushaf.
• Operate household and teacher features — student profiles, lesson assignment, practice visibility, and invite links.
• Authenticate you and enforce access rules (for example, which teacher can see which student).
• Send transactional email you expect — assignment set, practice nudges, and digests — to the parent email from Google sign-in.
• Prevent abuse and protect the service.
• Maintain, secure, and improve Tasmi during the pilot.

We do not sell your personal information.

Tasmi is designed for at-home Quran practice, often by minors under a parent's direction. Tasmi is not directed at children to use on their own without a parent or guardian.

Students do not create their own login. A parent or legal guardian who is at least 18 creates the household account, adds student profiles, and controls who can practice as each student on a shared device. By creating a household account and adding student profiles, that parent or guardian represents that they have authority to provide information about those students and to consent to Tasmi's processing of student practice data as described in this policy.

Practice transcripts and outcomes for a student profile are visible to the household parent and, when linked, to that student's teacher. Teachers only see students explicitly connected through the invite flow.

If you believe we collected a child's information without appropriate parental consent, contact us at support@tasmi.app and we will take appropriate steps to review and delete it where required.

We share information only with service providers that help us run Tasmi, under contracts that limit their use of the data, or when required by law. These providers process data on our behalf in categories such as:

• Authentication — Google sign-in (you authenticate directly with Google).
• Speech-to-text — processing practice audio sent from our servers during a recitation attempt.
• Cloud hosting and databases — storing accounts, practice data, and operating the application.
• Email delivery — sending transactional messages to parents.

A current list of subprocessors is available on request by emailing support@tasmi.app.

When a teacher is linked to a student, practice outcomes for that student's assigned passages are visible in the teacher dashboard — not to other teachers or unrelated households.

• Practice attempts and transcripts are kept while your account is active so parents and teachers can see practice history and assignment progress.
• Anonymous practice without sign-in is tied to a device cookie on that browser. Those attempts are not added to a household account when you later sign in.
• Invite links and short-lived cookies expire automatically.
• Email delivery records are kept to prevent duplicate messages.

Account deletion is not fully automated in the pilot. To request deletion of your household account or specific data, email support@tasmi.app. We aim to respond within 30 days and will confirm when deletion is complete or explain any data we must retain by law.

We use industry-standard measures appropriate to a web application pilot — encrypted connections (HTTPS), hashed PINs, and access controls on household and teacher data. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

• Practice without an account — for evaluation or supervised try only; see Anonymous practice. A device cookie is set for that browser.
• Sign out at any time to end your session.
• Manage student profiles and optional PINs from your household settings.
• End a teacher link from your parent or teacher dashboard when you no longer want sharing.
• Contact us to access, correct, or delete personal information we hold, subject to applicable law.

Depending on where you live, you may have additional privacy rights. We will honor valid requests where applicable.

Tasmi is operated from the United States. If you use Tasmi from another country, your information may be processed and stored in the United States and other countries where our service providers operate.

We may update this policy as Tasmi evolves. We will post the revised policy on this page and update the effective date. Material changes during the pilot may also be noted on sign-in or by email where appropriate.

Privacy questions or requests: support@tasmi.app.