01Who we are
Lantern : Learn Islam is an educational app and website offering illustrated stories of the prophets, Islamic history and short quizzes. It is published by Md Sohel, an independent individual developer based in Bokaro Steel City, Jharkhand 827001, India.
Md Sohel decides how and why information is handled here. Under India’s Digital Personal Data Protection Act, 2023 that makes him the Data Fiduciary; under the GDPR the equivalent term is data controller. Questions, privacy requests and grievances all go to support@lanternislam.com, which is also the grievance redressal contact required by Indian law.
This policy covers this website and the Lantern mobile app for iOS and Android. This document takes effect on the day Lantern : Learn Islam first becomes publicly available, and was last updated on 7 September 2026.
02This website collects nothing
The website sets no cookies, runs no analytics, embeds no advertising and contains no tracking scripts of any kind. There is no signup form and no way to send us information through the site.
The sample quiz runs entirely in your browser’s memory. Your answers are never transmitted to us, never written to your device, and disappear the moment you reload or leave the page.
The site is delivered through Vercel, which processes ordinary request information such as your IP address, browser type, the page requested and the time of the request. Vercel needs this to route traffic and block abuse. These are short-lived operational records held by Vercel under its own privacy terms; we do not consult them to identify visitors, and we build no profiles from them.
03What the app handles
Using the app requires an account, and accounts are created only by signing in with Google or Apple. From that provider we receive the name held on that account, its email address, and a stable identifier that lets us recognise you when you return. We never see or store your password, because you never give us one.
Each account has a single profile. There are no separate child profiles, so we hold no additional name, nickname, birthdate, photograph or age for anyone else using the account.
Once you are signed in, we store the learning progress attached to your account: which stories have been opened or completed, quiz results and scores, and whether an active subscription entitles the account to paid content. If you email us for support, we keep that correspondence so we can answer it.
We do not collect your contacts, photos, calendar, microphone, precise or approximate location, or advertising identifiers. The app contains no analytics SDK, no crash reporting SDK and no advertising SDK.
04Why we handle it
Account details from Google or Apple let us create your account, sign you in securely, and recognise the same account across devices. Learning progress and quiz results exist so your place in a story is still there tomorrow and on your other phone. Subscription status tells the app which content your account may open. Each of these is necessary to deliver the service you asked for, which under the GDPR is the performance of a contract and under the DPDP Act is a legitimate use for the purpose you provided the information.
A limited amount of handling supports security: detecting abusive sign-in attempts and protecting accounts from unauthorised access. Where the GDPR applies, we rely on legitimate interests for that, balanced against your rights.
Where the law requires consent rather than any other basis, we ask for it before handling the information, and you can withdraw it at any time as described below.
05Children and families
Children are an intended audience for Lantern, and the app is built so that we do not collect personal information from them. Accounts must be created and held by a parent or legal guardian who is at least 18 years old. A child reads and takes quizzes through that parent’s account, and the only identity in the system is the parent’s.
India’s DPDP Act treats everyone under 18 as a child and requires verifiable consent from a parent or guardian before a child’s personal data is handled. The United States COPPA rule applies the same principle to children under 13. Requiring the parent to create, own and control the account is how we meet both: the adult account holder provides the consent, and no separate information about the child is ever gathered.
We never use anyone’s information, and least of all a child’s, for advertising, behavioural profiling, tracking across services, or any purpose beyond running the app. There are no ad networks or analytics tools in Lantern to make that possible, and we will not add tracking directed at children.
A parent or guardian may see what is held on the account, correct it, delete the account outright, or withdraw consent. Deleting the account inside the app removes everything; anything else can be arranged by writing to support@lanternislam.com. If you believe a child has somehow created an account without a parent, tell us and we will delete it.
06Who else is involved
We keep the list of companies that touch your information deliberately short. Supabase provides the database and authentication behind the app, and therefore stores your account details and learning progress on our behalf. Apple and Google operate the sign-in you choose, and separately act as the merchant for subscriptions bought through their stores, which means they process the payment and we never receive your card details. Vercel delivers this website. Each acts on our instructions or under its own published terms, and none of them receives your information for its own advertising.
There are no advertisers, data brokers, analytics providers or marketing platforms in that list, and there never will be without this policy changing first. We do not sell personal information, and we do not share it for cross-context behavioural advertising, including as those terms are used in California law.
We would disclose information if a valid legal order required it, or where it is genuinely necessary to protect someone’s safety or defend a legal claim. If that ever happens we will tell you unless we are legally prohibited from doing so.
07Where information is held
Account and progress data sit on Supabase’s managed infrastructure, and the website is served from Vercel’s global network. Because Lantern is available worldwide, handling your information may involve moving it outside the country you live in.
Supabase publishes its hosting regions and sub-processors on its own site. If you want to know the specific region serving your account, write to support@lanternislam.com and we will tell you. Where the GDPR applies, transfers outside the European Economic Area rely on the safeguards our providers offer, principally the European Commission’s Standard Contractual Clauses.
08How long we keep it, and how it is protected
Account details and learning progress are kept for as long as the account exists, because that is what makes your progress persist. When you delete your account, the records are removed from our live systems straight away and purged from backups within 30 days. Support emails are kept for up to a year so we can follow up on an unresolved issue. We keep nothing else after an account is gone.
Information travels over encrypted connections, and Supabase encrypts stored data at rest. Because sign-in is handled entirely by Google or Apple, there is no password database here to be stolen, which removes the single most common cause of account breaches. Access to the production database is limited to the publisher.
No service can promise perfect security. If a breach affects your personal data we will notify you, and we will notify the Data Protection Board of India and any other regulator, within the time limits the applicable law sets.
09Your rights and choices
You can ask what we hold about you, have it corrected, have it erased, obtain a copy in a portable form, object to or restrict certain handling, and withdraw consent where consent is what we relied on. Under the DPDP Act you may also nominate someone to exercise your rights if you die or become incapacitated.
The fastest route for deletion is inside the app: open Settings, choose Account, and select Delete Account. That removes the account and everything attached to it on the schedule described above. Uninstalling the app on its own does not delete your account, and it does not cancel a subscription.
For anything else, write to support@lanternislam.com. We answer within 30 days, and will tell you if a request will take longer or if we need something more to confirm it is really your account.
If you are not satisfied with how we handle a request, you can complain to a regulator. In India that is the Data Protection Board of India; in the European Economic Area or the United Kingdom it is your national supervisory authority. We would rather you came to us first so we can put it right.
10Changes to this policy
We will update this policy when the app changes. The date at the top will change with it, and where an update materially affects how your information is handled we will tell you in the app or by email before it takes effect, and ask for fresh consent where the law requires it.
Questions about any of this can go to Md Sohel at support@lanternislam.com, or by post to Bokaro Steel City, Jharkhand 827001, India.