Privacy notice

Who we are

Bayna (bayna.co) is run from the United Kingdom. Bayna decides how your data is used, which makes Bayna the "controller" under UK data protection law.

To ask about your data, use the contact form and choose "Privacy and my data". We reply by email within one month.

When you read

• Page visits: the page, your country, the type of device and browser, your language, the site you came from, and how long the page was in use. Visitors are counted with a code that changes every day, so we cannot follow anyone from one day to the next. No cookie is used for this.
• Security records: a scrambled form of your IP address and failed sign-in attempts, to stop spam, abuse and break-ins.
• Error reports: when something breaks, the page, the error, the type of browser and your country, so we can fix it.

Your country comes from your connection. We never ask for your exact location, and never keep it.

When you join

• Your email address, the name you show, your language, and your password, kept only as a one-way code that no one can read back.
• Your two-step sign-in key, if you turn it on.
• What you post: questions, finds, threads, comments, votes, checks, wiki edits, map work and reports. Posts show with your name, because that is how members check evidence.
• Files you upload, with their name, type, size and a fingerprint to spot copies.
• Sign-ins: country, type of browser and device, and time. They keep you signed in, list your sessions and warn you of a new sign-in.
• Notifications, if you turn them on: your device's push address, time zone, the alerts you chose and the last verse you read, so alerts come at the right time and never in your quiet hours.
• Emails we send you: the address (partly hidden), the subject, a copy, and whether it arrived.

Your beliefs

What you post on a site about the Koran may show your beliefs. The law treats this with extra care. We show it only because you chose to post it publicly, and we use it for nothing else.

Our reasons

• To run the service you joined: your account, sign-in, your posts and files, and the emails you need, such as confirming your address or resetting your password.
• Our legitimate interest in a safe site that works: security records, visit counts, error reports, and activity emails you can switch off.
• Your consent: notifications. Turn them off at any time in your settings or your browser.
• The law: records we must keep, and lawful requests we must answer.

Who helps us

A few services help run Bayna. They act only on our instructions and may not use your data for themselves.

• Cloudflare hosts the site, the database and uploaded files, checks for bots at sign-up and sign-in, and runs the AI that translates posts and helps draft wiki pages. Your posts are not sent to any other AI company. Cloudflare also counts page visits for us without cookies (Cloudflare Web Analytics).
• Resend sends our emails.
• Map pictures and land heights come from Esri and Amazon Web Services, and recitations play from everyayah.com and Quran.com. Your browser asks them directly, so they see your IP address.
• Some archive pictures load straight from the library that holds them, such as Wikimedia Commons.

Some of these services are in the United States. When data leaves the UK, we rely on the UK's approved safeguards.

We share data with the police or a court only when the law requires it.

How long we keep it

• Your account: until you delete it. When you do, your email address, name and two-step key are removed at once, and you are signed out everywhere.
• Your posts, checks and files: they stay, signed "Deleted member", because other members' work and the chain of evidence depend on them. Ask us if you want one removed.
• Sign-ins: until you sign out or the session ends.
• Failed sign-in attempts: 1 day.
• Page visits: 400 days.
• Error reports, security records and email records: 12 months.
• Notification settings: until you turn notifications off.

Your rights

• See your data: download it from your account settings, or ask us for a copy.
• Correct it: change your name, email or settings yourself, or ask us.
• Delete it: delete your account from your settings, or ask us to remove a post.
• Object: ask us to stop a use of your data that rests on our legitimate interest.
• Take it with you: the download is in a format other services can read.
• Withdraw consent: turn notifications off at any time.

If you are unhappy with how we handle your data, tell us first through the contact form. You can also complain to the Information Commissioner's Office (ico.org.uk).

Cookies

One cookie, set only when you sign in, keeps you signed in. Cloudflare, which protects Bayna from attacks, may set a small security cookie.

Your browser also keeps a few settings on your device, such as your reading place, text size and the notices you closed. They stay on your device.

There are no advertising or tracking cookies, so there is no cookie banner.

Children

Joining is for people aged 13 or over. Anyone can read without an account. If you think a child under 13 has an account, tell us through the contact form and we will delete it.

Changes

If we change this notice, the date at the top changes. If the change matters, members are told on the site.