# Privacy Policy for Qalby Muslim

Last updated: October 23, 2025

Qalby Muslim ("we", "us", or "the App") provides tools such as daily prayer times, Qibla direction, Quran reading, reminders, and other Islamic utilities. This Privacy Policy explains what personal data we collect, how we use it, the choices you have, and how you can contact us. Protecting your privacy is a core part of how we build Qalby Muslim.

If you have any questions about this policy or how we process personal data, you can reach us at qalbymuslim1@gmail.com.

---

## Quick Summary

- Data controller: Qalbymuslim — contact: qalbymuslim1@gmail.com

- Data we collect: Location (with consent), optional calendar access, notification tokens, limited device/diagnostic data, support messages, anonymized analytics/crash reports, and any information you voluntarily share.

- Why we collect it: To deliver app features, send reminders you enable, improve performance, respond to support, and comply with legal obligations.

- Sharing: We do not sell personal data or share it with data brokers. We only share data with processors required to provide app functionality. In this build those processors are listed under "Sharing & Third-Party Processing" below. Analytics/crash providers (e.g., Firebase, Sentry) are not integrated by default and will be enabled only with consent where required.

- Retention: Most information stays on your device. Other data is kept only as long as needed (for example, support tickets up to 24 months) or until you request deletion, subject to legal requirements.

- Your rights: Adjust permissions on your device, request access or deletion via email, and exercise GDPR/CCPA rights where applicable.

---

## Who We Are

Qalbymuslim is the data controller responsible for Qalby Muslim. Contact us at qalbymuslim1@gmail.com for any privacy questions or to submit access, correction, or deletion requests. Please include “Privacy Request” in the subject line so we can respond quickly.

---

## Information We Collect

We only collect information that is necessary to provide, secure, and improve Qalby Muslim.

### Location (optional)

- Used to calculate prayer times and the Qibla direction for your location.

- Requested only when you initiate a location-based feature and with your explicit permission.

Note on local storage: We persist the most recent coordinates on the device (AsyncStorage) to support background refresh of prayer times. These stored coordinates are used locally and are not uploaded except when we call the third-party services listed in "Sharing & Third-Party Processing".

### Notification Token

- Generated by your device when you enable push notifications.

- Stored with our push provider (Expo Notifications/EAS, Apple APNs, or Google FCM) so we can deliver reminders you turn on.

### Calendar Access (optional)

- Used only if you choose to add prayer or reminder events to your personal calendar.

- Events are created at your direction; we do not access or sync existing calendar entries.

### Device & Diagnostic Data

- Includes device type, operating system, app version, IP address (where required), crash logs, and limited usage statistics.

- Helps us diagnose issues, combat fraud, and understand how features perform.

### Website Cookies & Device Information

- When you visit [https://qalbymuslim.com](https://qalbymuslim.com), we may collect browser type, time zone, IP address, and cookies to secure the site and remember preferences (such as language).

- You can disable cookies through your browser, though some site functionality may break.

### Support Requests

- When you contact us, we receive the name, email, and message you provide to resolve your inquiry.

### Analytics & Crash Reporting (optional)

- Privacy-minded tools (e.g., Firebase Analytics, Sentry) may capture pseudonymized usage data and crash reports. Where required by law, we request consent before enabling analytics.

- This build does not include analytics or crash-reporting SDKs by default. If we enable such tools in future releases (for example Firebase or Sentry), we will disclose the provider here, request consent where required, and update this policy. Such tools typically collect aggregated or pseudonymized usage data and crash reports to improve stability.

### Other Information You Voluntarily Provide

- Additional details submitted via feedback forms, surveys, or donations are processed only for their stated purpose.

### Information We Do Not Collect

- We do not require account sign-ups, payment card numbers, government IDs, or other sensitive personal data.

---

## How We Use Your Information

- Deliver core features such as prayer schedules, Qibla direction, Quran reading, dhikr counters, and saved preferences.

- Send notifications and reminders you explicitly enable (e.g., daily prayer alerts, Surah Mulk reminder).

- Store settings locally so the app feels personalized each time you return.

- Analyze performance, troubleshoot crashes, and improve reliability.

- Provide customer support, answer questions, and resolve technical issues.

- Meet legal obligations, enforce our terms, and prevent misuse or fraud.

We do not use your data for targeted advertising.

---

## Legal Bases for Processing (EEA/UK)

Where GDPR or UK GDPR applies, we rely on:

- Consent — for optional permissions like location, notifications, analytics, and calendar access.

- Performance of a contract/service — to supply the features you request.

- Legitimate interests — to analyze usage, improve security, and enhance the app in a way that respects your rights.

- Legal obligations — to comply with applicable laws, court orders, or regulatory requirements.

You can withdraw consent at any time through device settings or by contacting us.

---

## Sharing & Third-Party Processing

We do not sell personal data. We work with processors who help operate Qalby Muslim under strict data protection agreements, for example:

- Prayer time APIs: Aladhan, to fetch accurate schedules.

- Push notification services: Expo Notifications/EAS, Apple APNs, Google FCM.

- Hosting & infrastructure: Platforms such as Hostinger for web content and storage.

- Analytics & crash reporting: Firebase Analytics, Sentry, or similar tools (enabled only with consent where required).

- Geolocation services: Providers that convert coordinates into place names when you request it.

In this build, the third-party endpoints that may receive data include:

- api.aladhan.com — used to compute prayer times for provided coordinates.

- nominatim.openstreetmap.org — used for reverse geocoding to display a friendly place name.

- worldtimeapi.org — used to fetch timezone/date information the app uses for display.

- donate.stripe.com / stripe.com — donation payment processing via an external Stripe link (payment details are processed by Stripe and not stored by Qalby Muslim).

- Expo Notifications / Apple APNs / Google FCM — push delivery providers handle push tokens for notification delivery; the app does not upload push tokens to a separate backend in this build.

If data leaves your country or the EEA/UK, we use appropriate safeguards (e.g., Standard Contractual Clauses or adequacy decisions). We may disclose information if required by law, to protect safety or rights, or to investigate fraud, and will notify you where legally permitted.

---

## Storage & Retention

- On-device storage: Preferences, bookmarks, and cached data remain on your device until you clear them or uninstall the app.

- Notification tokens: Retained while notifications stay enabled; they typically expire when you uninstall the app or disable notifications.

- Support messages: Kept only as long as necessary to resolve your inquiry and up to 24 months afterward unless you request earlier deletion.

- Analytics/crash data: Stored in aggregated or anonymized form, generally for 12–36 months depending on the provider.

- Backups: Any backups follow the same retention windows and are purged on schedule.

We delete or anonymize personal data when it is no longer needed or when you request deletion, subject to legal requirements.

---

## Your Rights & Choices

### Manage Device Permissions

- Location & notifications: Adjust or revoke access via device settings (e.g., Settings → Qalby Muslim on iOS; App info → Permissions on Android).

- Calendar access: Decline permission; the app will not create calendar events without your approval.

### Analytics & Tracking Controls

- Where required by law, we seek in-app consent for analytics. You can opt out later in the app (if a toggle exists) or by contacting us.

### Data Access, Correction & Deletion

- Email qalbymuslim1@gmail.com with the subject “Privacy Request — [Access|Deletion|Other]”.

- Include your name, the email tied to your device (if any), your country of residence, and a brief summary of the request.

- We verify identity where necessary and respond within applicable timelines (typically 30 days).

### GDPR (EEA/UK) Rights

- Rights include access, correction, deletion, restriction, objection, portability, and challenges to automated decision-making. Contact us to exercise these rights.

### CCPA/CPRA (California) Rights

- California residents may request details about collected information, request deletion, and confirm we do not sell personal data. Initiate requests using the instructions above.

---

## Children’s Privacy

Qalby Muslim is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe your child has provided information to us, contact us and we will delete it promptly.

If you are a parent or guardian and believe we may have collected your child's information, please contact us at qalbymuslim1@gmail.com with the subject line “Privacy Request — Child Data” and we will take steps to remove the data as quickly as possible.

---

## International Transfers

Your data may be processed in countries other than where you reside (for example, the United States, Canada, or EU member states). When transfers occur, we rely on lawful mechanisms that provide appropriate safeguards.

---

## Information Security

We implement reasonable technical, administrative, and physical safeguards to protect your information. No system is completely secure, so please notify us at qalbymuslim1@gmail.com immediately if you suspect an issue.

---

## Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, or legal obligations. When we do, we update the “Last updated” date above. For material changes, we will provide an in-app notice or other reasonable communication where feasible.

---

## Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us:

- Email: qalbymuslim1@gmail.com

- Subject: “Privacy Request — [Access|Deletion|Other]”

- Website: [https://qalbymuslim.com/privacy-policy](https://qalbymuslim.com/privacy-policy)

We aim to acknowledge and respond to all legitimate requests within 30 days.