NorigooPLACEHOLDER TEXT. This page will be replaced after it is reviewed with a lawyer. Norigoo is not open to families yet.
Privacy policy
Draft of 13 October 2026. Plain-English summary of what the app does today, for review.
Who can use Norigoo
- Adults and teens use Norigoo with their own account.
- Children under 14 use it only through a parent's or guardian's account. The parent agrees to this notice before a child's profile can be added. A child never makes an account, signs in or types anything.
- Teens from 14 to 17 may make their own account, which holds one profile: their own.
What we keep
- The account: the email address, a name, the answer to the age question ("18 or over" or "14 to 17"), the password (stored only as a scrambled hash), and the notice agreed to, with its date.
- Each child's profile: a nickname, a picture chosen from a fixed list, and, if the parent chooses, an age group (such as "8–9").
- Progress: the lessons finished with their stars, the challenges and tests passed, the games and puzzles earned, and the questions answered wrongly on the first try (so they can be practised again).
- Learning activity (only for a profile on an account): when a lesson, challenge, test, game or puzzle was started or finished, how long it took, and whether each question was answered correctly. Dhikr, wird and other worship are never recorded.
What we never keep
No birth date, surname, photo, voice, school, location, phone number or contact details for a child; no device or advertising identifiers; nothing a child types (a child never types).
How it is used
- To run the app: to keep each child's progress safe and the same on every phone signed in to the account.
- To show the parent each child's progress and recent activity in the parent area.
- To improve the lessons, using only totals with no names or ids (for example, how many learners got a question right on the first try). A group of fewer than 5 learners is never counted.
Norigoo shows no adverts, sells no data and uses no third-party tracking or analytics. Nobody else sees a child's progress. Worship is never compared, ranked or scored.
Where it is kept, and who helps us
- Our database and files are with Google Cloud in the United States (Virginia), encrypted at rest.
- Google Firebase Hosting serves our web pages and the lesson updates the app downloads; like any website, it sees the address (IP) of the phone or browser asking.
- Resend sends our emails (verification, password reset, deletion and export emails).
How long it is kept
- Learning activity: 180 days, then deleted. Totals with no names or ids are kept.
- Accounts and progress: while the account exists.
- An account not used for 24 months gets one email; if it is still not used 30 days later, it is deleted.
- Copies in our backups are gone within about 8 days after data is deleted.
Your choices
- See: the parent area in the app shows each child's progress and recent activity.
- Download: "Download data" in the parent area emails you a file of everything we keep about the account or one child.
- Delete: delete a child's profile or the whole account in the parent area. It is hidden at once and deleted for good after 30 days; until then you can undo it. Or choose "Delete now, no undo" to delete it at once. Either way, backups are gone about 8 days later. Without the app, use the deletion page.
The parent area asks for the account's password before it opens, and again before any download or deletion.
Contact
See Support.