Privacy Policy

Application: Salah Deen – Islamic Prayer Tracker

Developer: Ali Sohail

Effective Date: April 17, 2026

Last Updated: May 11, 2026

1. Introduction

Welcome to Salah Deen ("the App," "we," "us," or "our"). Salah Deen is an Islamic prayer companion application that helps Muslim users track their five daily prayers (Salah), find Qibla direction, maintain prayer streaks, join accountability groups, and receive personalised coaching feedback based on their prayer habits.

This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and your rights regarding your data. By using Salah Deen, you agree to the practices described in this policy. If you do not agree, please discontinue use of the App.

2. Information We Collect

We collect the following categories of information when you create an account and use the App:

2.1 Account & Identity Information

• Email address – required to create and log into your account.
• Display name – the name shown to other group members.
• Password – handled entirely by Firebase Authentication; we never store or have access to your plaintext password.
• Timezone – automatically detected from your device at registration to ensure prayer times are displayed in your local time.

2.2 Location Data

• GPS coordinates (latitude & longitude) – collected when you open the App and when you use the Qibla Compass feature.
• City label – a human-readable city name derived from your coordinates, stored for display purposes only.

Your coordinates are used exclusively to (a) fetch accurate daily prayer times from the Aladhan API and (b) calculate the Qibla bearing on your device. Your precise GPS coordinates are cached in our database linked to the date, so that prayer times do not need to be re-fetched if you remain in the same area. We recalculate only when you move more than approximately 2.5 km. Location data is never sold, shared with advertisers, or used for any purpose other than prayer-time and Qibla calculations.

2.3 Prayer & Religious Practice Data

• Daily prayer log – your completion status for each of the five prayers (Fajr, Dhuhr, Asr, Maghrib, Isha): on-time, late, missed, or unmarked.
• Daily prayer score – a numerical score calculated from your statuses (0–100).
• Streak data – current streak, longest streak, Fajr-specific streak, and total days prayed.
• Madhab preference (optional) – your Islamic jurisprudence school (Hanafi, Shafii, Maliki, or Hanbali), used only to adjust prayer time calculation methods.

2.4 Notification & Device Data

• Firebase Cloud Messaging (FCM) token – a device-specific push notification token used to send prayer reminders and group pings to your device.
• Device platform – iOS or Android, recorded alongside your FCM token.
• Notification preferences – per-prayer settings including whether reminders are enabled, how many minutes before prayer to notify you, and the alert sound level.

2.5 Group & Social Data

• Group membership – if you create or join an accountability group, your display name and daily prayer statuses are visible to other members of that group.
• Invite codes – 6-character codes used to join groups; these are not linked to personal identity.

2.6 Usage & Analytics Data

• Weekly prayer analytics – aggregated breakdown of your prayer statuses across a 7-day window, used to generate personalised coaching feedback.
• Offline sync queue – pending prayer status updates stored temporarily on your device when you are offline, synced automatically when connectivity resumes.

2.7 Data Stored Only on Your Device (Not Transmitted)

• Cached prayer times for offline access.
• Cached daily log for offline access.
• App theme preference (light/dark).

3. How We Use Your Information

Data Category	Purpose	Legal Basis
Email, password, display name	Account creation, authentication, and identification within groups	Contract (account service)
GPS coordinates	Calculate daily prayer times and Qibla bearing	Consent (runtime permission) + Legitimate interest
Prayer log & streak data	Display your history, compute streaks, generate coaching feedback, show group status	Contract (core app feature)
Madhab preference	Adjust prayer time calculation method	Consent (optional setting)
FCM token	Deliver prayer reminders and group ping notifications to your device	Consent (notification permission)
Notification preferences	Schedule local notifications at the correct time and with your chosen alert style	Contract (core app feature)
Group membership & statuses	Display real-time member prayer statuses within accountability groups	Consent (opt-in feature)
Weekly analytics	Generate personalised AI coach feedback via a Firebase Cloud Function	Legitimate interest (app improvement)
Timezone	Display prayer times in your local timezone	Contract (core app feature)

We do not use any of your data for targeted advertising, profiling for marketing purposes, or sale to third parties.

4. Device Permissions

The App requests the following permissions. All permissions are explained at the time of request:

Permission	Why It Is Needed
ACCESS_FINE_LOCATION & ACCESS_COARSE_LOCATION	Fetch accurate prayer times from the Aladhan API and compute Qibla direction
POST_NOTIFICATIONS (Android 13+)	Send prayer reminder notifications at the times you configure
VIBRATE	Vibrate the device for prayer reminder alerts
INTERNET	Communicate with Firebase servers and the Aladhan prayer-times API
SYSTEM_ALERT_WINDOW	Display system-level prayer notifications
READ / WRITE_EXTERNAL_STORAGE	App asset access on older Android versions
Motion & Compass (iOS)	Read the device compass heading to display the real-time Qibla direction

You may deny or revoke any permission at any time in your device settings. Denying location permission will prevent prayer-time calculations and Qibla compass functionality. Denying notification permission will cancel all scheduled prayer reminders.

5. Third-Party Services

Salah Deen integrates the following third-party services. Each has its own privacy policy that governs their data practices:

5.1 Google Firebase (Google LLC)

We use multiple Firebase products to power the App's backend:

• Firebase Authentication – manages secure sign-up and sign-in using email and password. Firebase hashes and stores passwords; we never see your plaintext password.
• Cloud Firestore – our primary database that stores your account profile, prayer logs, streak data, group membership, notification preferences, and prayer times cache.
• Firebase Cloud Messaging (FCM) – delivers push notifications (prayer reminders and group pings) to your device.
• Firebase Cloud Functions – server-side functions that generate personalised AI coaching feedback based on your weekly prayer analytics, and that send group ping notifications.

Firebase Privacy Policy: https://firebase.google.com/support/privacy

5.2 Aladhan Prayer Times API

Prayer times are fetched from the Aladhan API (aladhan.com). When requesting prayer times, the App sends your latitude, longitude, and calculation method to the Aladhan API. No user identity or account information is included in these requests.

Aladhan Privacy Policy: https://aladhan.com/privacy-policy

5.3 Expo Updates (Expo / Microsoft)

Salah Deen uses Expo Updates to deliver over-the-air (OTA) app updates without requiring a full App Store or Play Store release. Expo may collect anonymous crash and update telemetry data.

Expo Privacy Policy: https://expo.dev/privacy

5A. Auto-Renewable Subscriptions

Salah Deen offers an optional Premium subscription that unlocks additional features beyond the free experience. All payments are processed by Apple (App Store) or Google (Google Play); we never receive or store your payment card details.

5A.1 What Premium includes

• AI Prayer Coach — weekly personalised feedback based on your prayer patterns
• Advanced streak & habit analytics
• Prayer groups & accountability
• Full Quran with translation
• Qibla compass with live calibration
• Smart reminders for every prayer

5A.2 Subscription plans

Plan	Billing period	Price
Premium Monthly	1 month, auto-renewing	As shown in the app at the point of purchase
Premium Yearly	12 months, auto-renewing	As shown in the app at the point of purchase

Prices are displayed in your local currency before you confirm any purchase and may vary by region in line with Apple's and Google's pricing tiers. Applicable taxes are added by the store at checkout where required.

5A.3 Free trial

New users receive a 3-day free trial of Premium features beginning at sign-up. The trial is free of charge and ends automatically after 3 days. The trial does not auto-convert to a paid subscription — you must explicitly subscribe to continue using Premium features after the trial ends.

5A.4 Auto-renewal

Premium subscriptions are auto-renewable. The following terms apply:

• Payment is charged to your Apple ID or Google account at confirmation of purchase.
• Your subscription automatically renews at the end of each billing period (monthly or yearly) unless auto-renewal is turned off at least 24 hours before the end of the current period.
• Your account is charged for renewal within 24 hours prior to the end of the current period at the price of the selected plan.
• You can manage your subscription and turn off auto-renewal at any time through your device's subscription settings (see 5A.5 below).

5A.5 Managing and cancelling your subscription

• iOS / iPadOS: Open the Settings app → tap your name → Subscriptions → Salah Deen. From there you can change plan, turn off auto-renewal, or cancel.
• Android: Open the Google Play Store app → tap your profile icon → Payments & subscriptions → Subscriptions → Salah Deen.

Cancelling stops the next renewal; you retain Premium access for the remainder of the period you've already paid for. Uninstalling the app does not cancel an active subscription — you must cancel through the store.

5A.6 Refunds

All refund requests are handled by Apple or Google, not by us:

• Apple: reportaproblem.apple.com
• Google: Google Play refund policy

5A.7 Subscription data we receive

When you subscribe, Apple or Google sends us a server-to-server receipt containing only the information needed to grant you access:

• The product identifier (salahdeen_premium_monthly or salahdeen_premium_yearly)
• The purchase and expiration timestamps
• The transaction status (active, expired, in trial, refunded, etc.)

We do not receive your full name, billing address, card number, or any other payment instrument detail. This receipt data is stored in Firestore alongside your account so we can confirm Premium entitlement on every device you sign in from.

5A.8 Price changes

If we change the price of an active subscription, Apple or Google will notify you in accordance with their respective policies and, where required, ask you to explicitly opt in to the new price before your next renewal. If you do not opt in, your subscription will not renew at the new price.

5A.9 Terms of Use

Use of the Premium subscription is also governed by Apple's Standard EULA (or any custom EULA we publish in App Store Connect) and Google Play's Terms of Service. By subscribing, you agree to those terms in addition to this Privacy Policy.

6. Data Storage and Security

All user data is stored in Google Cloud Firestore, which is hosted in Google's secure cloud infrastructure. Google applies industry-standard encryption at rest and in transit (TLS/HTTPS) to all Firestore data.

Additional security measures we apply:

• Firebase Authentication tokens are used to authenticate all database requests, ensuring that each user can only read and write their own data.
• Firestore Security Rules restrict access to documents based on the authenticated user's UID.
• Passwords are never stored by us; they are managed entirely by Firebase Authentication using industry-standard hashing.
• All communication between the App and our backend is encrypted over HTTPS.

While we implement strong security measures, no system is completely immune to breaches. In the event of a data breach that affects your personal information, we will notify affected users in accordance with applicable law.

7. Data Retention

We retain your data for as long as your account is active. Specifically:

• Account and profile data – retained until you delete your account.
• Prayer logs and streak data – retained until you delete your account.
• Prayer times cache – retained for up to 1 year on a rolling basis; older entries are periodically purged.
• FCM push tokens – retained until you sign out, uninstall the App, or your token is rotated by the device operating system.
• Group data – a group and its data are deleted when the last member leaves.

When you delete your account, we will permanently delete all personally identifiable data associated with your account from our servers within 30 days.

8. Data Sharing

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• Within accountability groups: Your display name and daily prayer statuses (on-time, late, missed) are visible to other members of any group you voluntarily join or create. You can leave a group at any time.
• Service providers: Data is processed by Firebase (Google LLC) and the Aladhan API solely to deliver the App's features, as described in Section 5.
• Legal obligations: We may disclose information if required by law, court order, or governmental authority.
• Business transfer: In the unlikely event of a merger, acquisition, or asset sale, user data may be transferred. We will notify users before their data is transferred and becomes subject to a different privacy policy.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate data (display name can be updated in Settings; email update requires re-authentication).
• Deletion: Request deletion of your account and all associated data by contacting us at alisohail6835@gmail.com. We will process your request within 30 days.
• Portability: Request an export of your prayer log data in a structured format.
• Withdraw consent: You can revoke location or notification permissions in your device settings at any time.
• Opt out of notifications: Disable all prayer reminders in the App's Settings screen at any time.
• Leave a group: You can leave any accountability group at any time, which removes your data from that group immediately.

To exercise any of these rights, please contact us at alisohail6835@gmail.com.

10. Children's Privacy

In compliance with the Children's Online Privacy Protection Act (COPPA) and Google Play's Families Policy:

• The App is intended to be used by individuals of all ages, including children, under appropriate parental supervision.
• Creating an account requires providing an email address. We require that users under the age of 13 (or the applicable age of digital consent in your jurisdiction) only use the App with the knowledge and supervision of a parent or legal guardian.
• We do not knowingly collect personal information from children under 13 without verifiable parental consent. If a parent or guardian believes their child under 13 has provided us with personal information without consent, please contact us immediately at alisohail6835@gmail.com and we will promptly delete that information.
• We do not display interest-based advertising, behavioural advertising, or any form of advertising within the App.
• We do not enable social features (such as group chats) beyond the structured accountability groups described in this policy.
• We do not share children's data with any third party beyond what is necessary to operate the App (Firebase and Aladhan API as described above).

11. International Data Transfers

Salah Deen is operated from Pakistan and uses Firebase services hosted by Google LLC, whose servers may be located in the United States and other countries. By using the App, you acknowledge that your data may be transferred to and processed in countries outside your own, which may have different data protection laws. Google applies appropriate safeguards (including Standard Contractual Clauses) for international data transfers.

12. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information is being collected about you.
• Know whether your personal information is sold or disclosed, and to whom.
• Opt out of the sale of personal information (we do not sell personal information).
• Request deletion of your personal information.
• Not be discriminated against for exercising your privacy rights.

To submit a CCPA request, contact us at alisohail6835@gmail.com.

13. European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and applicable local law, including the rights to access, rectify, erase, restrict processing of, and port your data. You also have the right to lodge a complaint with your local data protection authority.

Our lawful bases for processing are: performance of a contract (account and core features), consent (location permission, notification permission, optional madhab preference), and legitimate interests (analytics, security, and service improvement).

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where required by law or where reasonably practicable, by sending you an in-app notification or email. Your continued use of Salah Deen after the effective date of any updated policy constitutes your acceptance of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

• Developer: Ali Sohail
• Email: alisohail6835@gmail.com
• Application: Salah Deen – Islamic Prayer Tracker

We aim to respond to all privacy-related requests within 30 days.