Privacy Policy

1. Introduction

SalahMate ("the App") helps you track daily prayer, journal entries, streaks, circles with people you trust, and optional reminders and alarms. We use analytics to understand how the App is used and to improve reliability. We may introduce advertising in the future; if we do, we will describe it here and adjust the App or obtain consent where required. This policy explains what information we process, why, and your choices.

2. Who we are

The App is operated by Muhammad Haseeb. When you use the App, we act as a controller of certain personal data described below. Some processing is done on our behalf by service providers (see Section 6).

3. Information we collect and why

3.1 Account and profile (when you sign in)

SalahMate requires Sign in with Google. Google shares authentication data with us as part of that sign-in (for example an identifier and, where available, your name and email) so we can create and maintain your account.

We store a user profile in our database, including items such as: your user id, email, display name, location label (the city name we derive from device location—see Section 3.2), prayer calculation preferences, reminder settings, streak counts, optional feature flags (for example whether the Fajr alarm, the evening reminder, or app blocking is enabled), and timestamps when your profile is updated.

We use this information to run the App: show your name, compute prayer times and reminders, sync your settings across devices when you use the same account, and provide community features you opt into.

3.2 Location

The App may request approximate or precise device location so it can calculate prayer times for where you are. Prayer times, reminders, and alarms are calculated on your device.

Storage: Your GPS coordinates stay on your device; we do not store them on our servers. We store only the city name derived from your location, along with your calculation-method preferences, in your profile so they can be shown in the App and synced across your devices.

You can control location permission in your device settings. If you deny location, features that depend on it may be limited or unavailable. You may also be able to enter or adjust a place manually in the App instead of using live GPS, depending on the version.

3.3 Prayer activity and journal

Prayer logs (which prayer, date, time, and status such as on time, late, excused, or missed) and related journal content you enter are stored so the App can show history, streaks, and your journal inside the App.

3.4 Circles and nudges

If you use circles, we store circle names and descriptions, who is a member of each circle, and invite codes created for a circle.

When you join a circle, other members of that circle can see your display name, your current streak, and your prayer logs (which prayers you logged and their status). Leave a circle to stop sharing with its members.

Nudges (gentle reminders from people in your circle) may be delivered using push notifications (see Section 3.5). Content is limited to what is needed for that feature.

3.5 Notifications and device tokens

If you allow notifications, we use Firebase Cloud Messaging (FCM) to deliver nudges from people in your circles. Prayer reminders, the Fajr alarm, and the evening reminder are scheduled on your device and are not sent from our servers.

We store a device push token associated with your account so messages can reach your device. Tokens can change over time and are updated when the App runs.

3.6 Fajr alarm

If you enable the Smart Fajr alarm, it is scheduled on your device and silenced by logging Fajr in the App. The App does not use your camera.

3.7 Optional app blocking (Android)

On Android, if you turn on app blocking, you may be asked to enable an Accessibility Service so the App can detect when a blocked app opens during prayer-related windows you configure, and show a blocking overlay. This uses package names and timing needed for blocking; it is controlled on your device and tied to your explicit setup.

3.8 Technical and security data

Like most online services, our servers and providers may automatically receive technical data (for example IP address, device type, timestamps) when the App talks to our backend. We use this to operate, secure, and improve the service.

3.9 Analytics

We use analytics services to measure how the App is used, diagnose crashes, and improve features and performance. Depending on how analytics is configured, these services may collect and process data such as: device identifiers (for example advertising or analytics IDs where permitted), device model and manufacturer, operating system version, screen size or language, app version, installation and session information, general geographic region (often derived from IP address by the analytics provider), in-App events (for example screens viewed or features used), and error or diagnostic logs.

Analytics data may be associated with your account, a pseudonymous installation ID, or your device as allowed by the platform and your settings. Analytics providers process this information on our behalf under their own terms and privacy policies (see Section 6).

3.10 Purchases (SalahMate Pro)

SalahMate Pro is sold through Google Play. Google handles payment; we never receive your card or payment details. When you buy or restore Pro, the App sends us the purchase token and product, and we check it with the Google Play Developer API. We store the token, the product, your plan (free or Pro), and when it expires, so Pro works across your devices and each purchase stays linked to one account.

3.11 Circle invites and sharing

If you open a circle invite link, or install the App from one, the App reads the invite code from the link or from the Google Play install referrer and keeps it on your device until you join. When you share an invite or your streak card, the image and text are created on your device and sent through your phone's share menu; we do not upload them.

3.12 Problem reports

If you send a problem report from Settings, we store your message, the App version, and any screenshot or file you choose to attach, so we can investigate.

3.13 Advertising (possible future feature)

We may introduce advertising in the App (for example banner or interstitial ads). If we do, ads may be shown by us or by third-party ad networks and partners. Those partners may use identifiers, device details, and usage or performance data to deliver, personalize, frequency-cap, and measure ads, subject to platform rules and applicable law.

Where required, we will ask for consent before enabling personalized or interest-based advertising, or rely on platform-level settings you control (for example on iOS or Android). We will update this policy when advertising goes live so you can see what data is involved and your opt-out choices.

4. Legal bases (EEA, UK, or similar regions)

Depending on where you live, we rely on one or more of: contract (providing the App you asked for), legitimate interests (security, reliability, analytics that does not require consent under local law, and improving the App—balanced against your rights), and consent where required (for example optional notifications, location, certain analytics or advertising preferences, or personalized ads when we introduce them). You may withdraw consent where applicable by changing device or in-App settings and, for account-linked data, by contacting us.

5. Retention

We keep your information for as long as your account is active and as needed to provide the App.

When you delete your account in the App, we permanently delete everything tied to it: your sign-in account, profile, prayer logs, circle memberships, invites, purchase records, problem reports and their attachments, and device push tokens. Circles that only you are in are deleted; circles with other members stay for them without you. We do not keep any record of the deleted account.

We may delete or anonymize data when it is no longer needed, unless we must keep it longer for legal, security, or dispute reasons. Analytics and server logs may be kept for shorter rolling periods or in aggregated form, according to our configuration and provider settings.

6. Sharing of information

We do not sell your personal information to data brokers for a fee. If we introduce third-party advertising, ad partners may receive or derive identifiers and limited usage or device data to show and measure ads, as described in Section 3.13 and in their respective policies. What they collect and how they use it is subject to applicable law (including opt-out rights in some regions) and platform rules.

We share data with service providers as needed to run the App:

• Supabase — authentication, database, and realtime features for your account, profile, location fields stored with your profile, logs, circles, and related data.
• Google — Google Sign-In (and related account services), and Google Play for purchases and purchase verification (see Section 3.10).
• Google Firebase — Firebase Cloud Messaging for push delivery, and Firebase or other Google services we use for analytics and crash reporting, which may process device-level and usage data as described in Section 3.9.
• Analytics providers — tools we use to collect aggregated or event-level analytics and device details (see Section 3.9). The specific vendors may change; we will keep this policy aligned with what we actually use.
• Advertising partners (if/when ads are enabled) — ad networks or exchanges that display ads in the App and measure impressions and clicks. Their use of data is governed by their policies and by your consent or device settings where applicable.

These providers process data under their own terms and privacy policies, as well as agreements we have with them where applicable.

We may also disclose information if required by law, to protect rights and safety, or as part of a business transfer (for example merger), subject to applicable law.

7. International transfers

Your information may be processed in countries other than where you live, including where our providers host data (for example the United States or the European Union, depending on configuration). Where required, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

8. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing (including some analytics or advertising processing where the law allows), and to withdraw consent where processing is consent-based. You may also have the right to lodge a complaint with a supervisory authority. Device and system settings may offer additional controls for analytics or interest-based advertising.

To exercise rights, contact us at hello@muhammadhaseeb.me. You can delete your account at any time in the App under Settings → Delete my account (see Section 5 for what is deleted), or email us and we will process verifiable requests as required by law.

10. Children

The App is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

11. Changes

We may update this policy from time to time. We will post the new effective date at the top and, where appropriate, notify you in the App or by email.

12. Contact

Questions about this policy: hello@muhammadhaseeb.me