Privacy Policy

1. What This Is

This explains what information we collect about you, how we use it, what we don't do with it, and how you can control it. We follow Malaysia's Personal Data Protection Act (PDPA) and other recognized privacy standards.

2. What We Collect

2.1 Account info

• Your name and email when you sign up
• Apple Sign-In info, if you use it
• Anything else you add to your profile (like display name, age, gender)

2.2 Your location

• Your location (rough or exact), used only for prayer times, Qibla direction, and finding masjids nearby
• We process location on your device whenever possible, and we never use it for ads or tracking

2.3 Religious and personal activity

• Your prayer and Sunnah tracking, dhikr counts, and Asma ul Husna progress
• Your Quran progress, bookmarks, notes, and reading goals
• Your reflections journal entries and Qareen conversations
• Period tracking (only if you turn that feature on)
• Your streaks and how you use the app

2.4 Device info

• Your device model, operating system version, and app version
• Crash logs and diagnostic info, so we can fix bugs
• Anonymous usage stats (if you opt in)

2.5 Halal Mode

• Filtering happens on your device
• Domain-level activity may be saved locally and synced (in encrypted form) so you can see your own dashboards
• We do NOT collect or sell your browsing history

3. How We Use Your Info

3.1 We use it to:

• Make the app work and personalize features for you (prayer times, tracking, Qareen, journal)
• Keep your account safe
• Sync your data across your devices
• Answer your support emails
• Fix bugs and build new features
• Follow the law and stop abuse

3.2 We do NOT:

• Sell your personal info to anyone
• Use your journal entries or Qareen conversations for advertising
• Share your religious tracking data with anyone outside our service providers

4. AI Features

4.1 How AI works in the app

• Qareen and any AI-powered prompts send your text to an outside language model provider (like OpenRouter)
• Only the content needed to generate a response is sent
• We ask AI providers not to train on your data, when they offer that option

4.2 Use AI features wisely

• Avoid putting highly sensitive personal info into AI features
• AI conversations may be briefly logged for safety, debugging, and stopping abuse

5. Where Your Data Lives and How It's Protected

5.1 Where it's stored

• App settings and caches stay on your device
• Account info, tracking, and journal data are stored with Supabase, which provides encryption and access controls
• Some data may be processed in countries where our service providers operate

5.2 How it's protected

• All network traffic uses HTTPS/TLS encryption
• The database is locked down so users only access their own data
• Login uses secure, token-based authentication
• Only a few trusted people have access to production data

5.3 How long we keep it

• We keep your data while your account is active or while it's needed to run the app
• If you delete your account, we delete or anonymize your data within a reasonable time, unless the law requires us to keep it

6. Who We Share Data With

6.1 Service providers we use

• Apple: App Store, Sign-In, and push notifications
• Supabase: accounts, storage, and real-time sync
• AI providers (like OpenRouter): only to generate AI responses

6.2 Legal disclosures

We only share your data when the law requires it, when a court orders it, or to protect users or the public.

7. Your Rights

Under PDPA and similar privacy laws, you have the right to:

• See what data we have about you
• Fix any data that's wrong or incomplete
• Delete your data (your right to be forgotten)
• Take back your consent at any time (the app may not work fully if you do)
• Get a copy of your data in a portable format
• Object to certain ways we use your data

To use these rights, email confidentmuslim.app@gmail.com. You can also delete your account directly from Profile inside the app.

8. Children

The app is not made for children under 13. We don't knowingly collect data from children under 13. If you think a child has given us info, contact us and we'll delete it right away.

9. International Data Transfers

Your data may travel to countries outside Malaysia where our service providers operate. We take reasonable steps to make sure your data stays protected, in line with PDPA, when this happens.

10. Updates to This Policy

We may update this policy now and then. We'll tell you about important changes in the app or by email. The "Updated" date at the top shows the latest version. If you keep using the app after a change, you're accepting it.

11. Contact

For questions or concerns about your data or this policy, email confidentmuslim.app@gmail.com. We'll get back to you as soon as we can.