গোপনীয়তা

What we cannot read, even if asked

Some things are encrypted on your device before they are uploaded, with a key we never receive. We hold ciphertext and no way to open it. This covers:

• the optional reason you write on a period marked not required;
• a Shahada record, if you choose to keep one;
• private journey notes and anything you put in your vault.

There is no support path, no admin screen and no export that reveals these. That is the point, and it has a real cost: if you clear your browser data or lose the device, they are gone permanently. Nobody can recover them for you. The app warns you before you first rely on it.

Private by default

• Your worship records are yours. Prayer, fasting, dhikr and Quran progress are not shown to anyone unless you switch on sharing for a specific thing.
• Nothing is ever posted for you. No automatic sharing of prayers, fasts, donations or a Shahada. Not as a default, not as an option.
• Days marked not required are not missed days. They carry no shortfall, appear in no family total, and your family cannot tell that any exist.
• Shared prayer consistency is a rough band — most days, some days, building — never a number, a ratio or a streak.
• Your email and phone are stored encrypted. We can look up an account by a keyed hash, but there is no readable list of members' addresses anywhere in our systems.

What this app will never do

These are not current settings. They are commitments the software is built to make impossible, and automated checks in our codebase fail the build if any of them appears.

• No verification that you prayed or attended. No QR code, no Bluetooth beacon, no location check, no photo or AI proof. Worship is self-reported, and a record we could verify would be a record we could be compelled to hand over.
• No leaderboards, scores, ranks or comparison of anyone's worship with anyone else's.
• No behavioural advertising, and no third-party advertising, attribution or data-broker code.
• No guessing your gender from your photo, name, voice or behaviour, and never using it to hide content from you.
• No monitoring of your other apps, your browsing or your screen.
• No credit to anyone for another person's beliefs. No conversion counters, referrer rewards or funnels.

Location

Prayer times need to know roughly where you are. You can type a city instead of sharing your device location, and either way we do not keep a history of where you have been. Prayer times are calculated on your device, so that calculation does not require telling us anything at all.

Notifications

Lock-screen text is deliberately neutral. A notification never reveals your religious status, whether you are exploring Islam, what you asked about privately, or anything about an exemption — because whoever picks up your phone can read it.

If you are reading about Islam

Nobody is told. Reading does not appear in any feed, notify anyone, or mark your account. You can ask a question with no account, no email and no phone number; we do not store your IP address or device alongside the question, and the only way back to the conversation is a link you keep. We cannot recover that link for you, and the thread is deleted after 30 days without activity.

In countries where these features would put someone at risk, they are switched off entirely — and we keep no record of who would have used them.

What you can require of us

• A machine-readable copy of everything we hold about you.
• Correction of anything inaccurate.
• Deletion of your account and its contents.
• Withdrawal of any consent, taking effect immediately.

These are in the app under More → Data and storage, or by email to [email protected] if you cannot sign in. Each request has a legal deadline and we will tell you what it is when we acknowledge yours.

An export can include your end-to-end encrypted notes, but only as ciphertext — that is the only form we have. If we have to refuse any part of a request, we will say which part and why.

Other companies involved

We use outside services for email, text messages, file storage and maps. Each one receives the minimum it needs to do its job, each is recorded with a data-protection review before it is used in production, and none receives your worship records, your private notes or anything we cannot read ourselves.

Our AI runs on our own infrastructure. Questions are not sent to an outside model provider — there is no code in this platform that could.

Children

A child profile is a record a guardian keeps. It has no password, no public profile, no messages and no purchases. What it may do is off until a guardian turns it on — and a guardian's permission alone is not enough: local law has to allow it too. When a child becomes an adult and claims their own account, the guardian's private notes about them are deleted rather than handed over.

Contact

[email protected]

Locale: BN · Stage 1a pilot · This page describes software behaviour and will be superseded by the market-specific legal notice once it clears review.