Privacy Policy

Public APIs and MCP server (no account needed). When you or an AI assistant calls our API or MCP server, our servers write a standard access log containing:

• The request itself: the endpoint or tool name and its parameters (for example surah 2, ayah 255, or a search keyword).
• The date and time of the request.
• The IP address and user agent of the client that made the request.
• The response status and how long the request took.

Some advanced tools (such as recitation correction and semantic search) require an API key. To get one you can create a free developer account on the dashboard. For an account we store your name, email address, a hashed password, your API keys and usage counters for those keys. Creating an account is optional and is never required to read the Quran through our APIs, the MCP server, Claude or ChatGPT.

If you subscribe to a paid plan, payment is handled by a third-party payment provider. We do not receive or store full card numbers.

The qurani.ai website (not the API or MCP server) uses Google Analytics and Google Tag Manager to understand how pages are used. These tools set cookies and collect usage data such as pages visited, approximate location and device type. You can block these cookies with your browser settings or a content blocker without affecting the service.

• To run the service and return the content you asked for.
• To prevent abuse, enforce fair-use limits and protect the service against attacks.
• To find and fix errors and improve reliability.
• To understand which features are used so we can prioritise work (website analytics only).
• To manage your account, API keys and subscription, when you have one.

Only the infrastructure providers that host and deliver the service process this data on our behalf:

• Cloudflare: CDN, DNS and DDoS protection.
• Bunny.net: CDN for audio and static assets.
• Google Analytics: website usage analytics (website only).

• Cloudflare privacy policy
• Bunny.net privacy policy
• Google Analytics privacy policy

We do not sell, rent or trade any data. We do not use request logs for advertising or profiling. We disclose data only to the providers above, or when the law requires us to.

• Server access logs are deleted automatically after 30 days.
• Aggregated statistics that cannot identify anyone (for example total requests per day) may be kept indefinitely.
• Account data is kept while your account exists and deleted within 30 days of a deletion request.
• Website analytics data is retained according to Google Analytics default settings.

When you use Qurani.ai inside Claude, ChatGPT or another MCP-compatible app, the assistant sends us only the tool request it decides to make, for example "get ayah 2:255 in the Sahih International translation". We never receive your conversation, your prompts, your account on that platform or any other message content.

Those requests are logged exactly like any other API request (see section 1) and are subject to the same retention period. What the assistant does with our response is governed by the privacy policy of that assistant's provider, not by this policy.

The service does not knowingly collect personal data from children. Reading Quran content through our APIs does not require any personal data.

Depending on where you live you may have the right to access, correct, delete or restrict the processing of your personal data, and to object to it. Because API and MCP logs contain only an IP address, we can act on a request only if you tell us the IP address and approximate time of the requests concerned.

To exercise any right, or to ask what data we hold about you, email [email protected]. We answer within 30 days. Account holders can also delete their API keys from the dashboard at any time.

We may update this policy when the service changes. The date at the top shows the latest revision. Material changes will be announced on this page.