Legal
Privacy policy
This is one policy for every product we run. Where a product differs, it is named.
Last updated: 18 October 2026
1. Who we are
QN Ventures Ltd, a company registered in England and Wales under number 17391834, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. For everything in this policy, write to support@qnventures.uk or telephone +44 20 3873 1064.
QN Ventures Ltd is registered with the Information Commissioner's Office (ICO) as a data controller, registration number ZC295415.
2. What this covers
This policy covers QuNeva, InsightsGrid, Noor, Sahra, Sofra, BabyBoard and Finance, on the web and in their mobile apps.
QuNeva and InsightsGrid are different in one important way. There, your employer decides what is collected and why; we only process it on their written instructions. If you use QuNeva at work, ask your employer for their own privacy notice — ours describes our role, not theirs.
3. What we collect
| Where | What | Why |
|---|---|---|
| All products | IP address, country, city and region derived from it, device type, operating system, browser, language, app version, and the times you opened and closed the app. | To keep the service running, measure load, and find faults. |
| Where you sign in | Your name, email address and profile picture, as your sign-in provider gives them to us. | To know whose data is whose, and to let you back in. |
| Noor / نور | Your reading position, saved verses and reminders. Coarse location only while you ask for nearby mosques, rounded before it leaves your device. | Noor works fully without an account. |
| Sofra / سُفرة | Your kitchen list, recipes and family group. A photo you take of ingredients is sent for recognition and discarded as soon as the answer comes back. | We do not keep the photo, and we do not detect or store faces. |
| Sahra / سهرة | Room codes, the names players type, and the state of a game while it is being played. | A room's contents are deleted when the room ends. |
| BabyBoard | Settings, sleep events and alert history. Video and audio from your camera never reach our servers — the app connects to your own camera on your own network. | Camera credentials are held in your device's secure store, not by us. |
| Finance | Accounts, transactions, budgets and goals that you enter or forward to the app. | The app never reads the messages on your phone. You choose what reaches it. |
| QuNeva / InsightsGrid | The operational data your organisation loads: employees, schedules, attendance and performance. | Here your employer is the controller and we act on its instructions under a separate agreement. |
4. Why we are allowed to
- To give you what you asked for. Your account, your data and the features you use.
- Because you agreed. Camera, location and notifications are only used after you allow them, and you can withdraw that at any time in your device settings.
- To keep the service standing. Logs and counters that let us see an outage or an attack and stop it.
5. Who else sees it
Only the suppliers below, only for the purpose named, and only under a contract that forbids them from using it for anything else.
| Supplier | What for |
|---|---|
| Cloudflare, Inc. | Hosting, content delivery, and the model that recognises ingredients in Sofra. |
| Supabase, Inc. | The database and sign-in behind most products. |
| Google LLC | Sign in with Google, where a product offers it. |
| OpenStreetMap | Nearby mosques in Noor, from a rounded point — never your exact position. |
| Telegram FZ-LLC | Only in Finance, only if you connect it yourself. It is off unless you turn it on. |
We will also disclose data if a court or the law requires it, and we will tell you unless we are forbidden from doing so.
6. How long we keep it
- Your account and the data in it: until you delete it.
- Technical logs: a short rolling window, then they are overwritten.
- A photo sent for recognition: not kept at all.
- A finished game room: deleted when the game ends.
7. Where it is kept
On servers run by the suppliers above, which may be outside the United Kingdom. Where data leaves the UK or the European Economic Area, it does so under the standard contractual protections those suppliers publish.
8. What you can ask us to do
You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to a particular use, or ask us to stop entirely. Write to support@qnventures.uk and we will answer within 30 days.
Deleting your account is also available inside each app, and described at Delete your account. If you are not satisfied with how we answer, you may complain to the data protection authority where you live.
9. Children
None of our products is directed at children, and we do not knowingly collect data from a child. BabyBoard is for a parent watching their own child on their own camera: the child is the subject of the video, and that video stays between the camera and the parent's phone. If you believe a child has given us data, write to us and we will delete it.
10. Keeping it safe
Traffic is encrypted in transit. Each organisation's data is separated inside the database itself rather than by application code. Access to production is limited to the smallest number of people that can keep it running, and every privileged action is recorded.
No system is perfect. If you find a weakness, write to us before you tell anyone else and we will work with you.
11. Changes
When we change this policy we change the date at the top. If a change affects what we collect or why, we will say so inside the product before it takes effect.