Privacy Policy
Effective: 28 February 2026
1. Who We Are
WhatSurah is a QR-based Quran audio card game operated by launch0.dev. We are the data controller for the personal information described in this policy. Contact: privacy@launch0.dev
2. Data We Collect
Notification sign-up form
When you sign up to be notified about launch or preorders, we collect your name, email address, country (optional), and whether you indicated interest in preordering. This is stored in a database hosted on AWS (EU region).
Reciter preference
Your preferred reciter is saved in your browser's localStorage only. It never leaves your device and is not sent to our servers.
We use no cookies, no analytics trackers, and no fingerprinting. We do not track you across sites or sessions.
3. Why We Process Your Data
Notification list — to send you a one-time email when preorders open. Legal basis: your consent (submitting the form).
Preorder processing — to fulfil your purchase and ship the card deck. Legal basis: performance of a contract.
4. How Long We Keep It
Sign-up data is kept until the product launches and for up to 12 months afterward, or until you request deletion — whichever comes first. Preorder records are retained for as long as required by applicable accounting and tax law (typically 7 years).
5. Third Parties
Amazon Web Services (AWS) — database and hosting, EU (eu-west-1) region. Governed by the AWS Data Processing Addendum.
Stripe — payment processing for preorders. Stripe operates as an independent data controller for payment data. See stripe.com/privacy.
Quran Foundation — provides the audio clips via their API. No personal data is transmitted in audio requests.
6. Your Rights (GDPR)
If you are in the European Economic Area or the UK, you have the following rights:
Access — obtain a copy of the personal data we hold about you.
Rectification — have inaccurate data corrected.
Erasure — request deletion of your data ("right to be forgotten").
Restriction — ask us to limit processing while a dispute is resolved.
Portability — receive your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests.
Withdraw consent — unsubscribe from our notification list at any time.
To exercise any of these rights, email privacy@launch0.dev. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.
7. Changes
We may update this policy as the service evolves. Material changes will be noted with a new effective date at the top of this page. Continued use of the service after changes constitutes acceptance.