Privacy Policy

1. Introduction and who we are

Welcome to Taqwa — Your Islamic Companion (hereinafter, "the App", "Taqwa" or "we"). This Privacy Policy describes how we collect, use, store and protect your personal information when you use our mobile app, available on the Google Play Store and coming soon to the Apple App Store.

The data controller is:

By downloading, installing or using the App, you accept the practices described in this Privacy Policy. If you do not agree, please refrain from using the App.

2. Data we collect

2.1 Data you provide to us

• Account information: first name, last name and email address when you register.
• Login credentials: password (stored encrypted; never in plain text).
• Sign in with Google: if you choose to authenticate with Google, we receive your name, email address and profile photo from your Google account.
• User-generated content: posts, comments or content you share in the App's Social feature.
• Favorite du'as: du'as you mark as favorites are stored linked to your account.

2.2 Data collected automatically

• Geographic location: with your explicit permission, we access your GPS location solely to calculate prayer (Salat) times and the qibla direction. This information is not stored on our servers.
• Usage data: information about how you interact with the App (screens visited, features used, errors), collected anonymously or in aggregate via Firebase Analytics.
• Device data: device type, operating system, app version, anonymous installation identifier.
• Push notification tokens: if you grant permission, we collect your device's notification token to send you prayer reminders or other relevant notifications.
• Crash reports: in case of an App error, we may automatically collect technical crash information to improve stability (via Firebase Crashlytics).

2.3 Data we do NOT collect

• We do not directly collect payment data. Transactions are handled by Google Play and RevenueCat.
• We do not access your contacts, photo gallery, microphone or camera, unless a future feature requires it and requests your explicit permission.
• We do not collect biometric data.

3. How we use your data

We use the information we collect for the following purposes:

• Providing and personalizing the service: creating and managing your account, showing you personalized content and remembering your preferences.
• Calculating prayer times: using your location to provide accurate Salat times for your city. Location is processed on-device and is not sent to our servers.
• Syncing across devices: saving your favorite du'as and settings in the cloud so they are available on all your devices.
• Notifications: sending you prayer reminders, daily ayah alerts or other notifications you have enabled. You can disable them at any time from your device settings.
• Improving the App: analyzing aggregated, anonymous usage data to identify issues, optimize performance and develop new features.
• Security: detecting and preventing fraud, misuse or activities that violate our Terms of Use.
• Service communications: sending you important emails about policy changes, security updates or service interruptions.
• Managing premium subscriptions: if you purchase premium features, processing and validating your subscription through RevenueCat and Google Play Billing.

4. Third-party services

Taqwa integrates trusted third-party services to provide its features. Each provider has its own privacy policy:

4.1 Firebase (Google LLC)

We use Firebase for user authentication, real-time database (Firestore), push notifications (FCM), usage analytics (Analytics) and crash reporting (Crashlytics).

• Data shared: user identifier, email address, anonymous usage data, device tokens.
• Purpose: authentication, data sync, notifications and analytics.
• Privacy policy: firebase.google.com/support/privacy

4.2 Google Sign-In (Google LLC)

We offer the option to sign in with your Google account as an alternative to email registration.

• Data shared: name, email address and profile photo from Google.
• Privacy policy: policies.google.com/privacy

4.3 RevenueCat

If the App offers premium features or paid subscriptions, we use RevenueCat to manage subscription status, verify purchases and administer entitlements.

• Data shared: anonymous user identifier, purchase history, subscription status.
• Important: RevenueCat does not receive credit card data or payment information; this is handled directly by Google Play or the Apple App Store.
• Privacy policy: revenuecat.com/privacy

4.4 Google Play Billing

In-app purchases and subscriptions are processed through Google Play Billing. We do not store or have access to your payment data.

• Privacy policy: policies.google.com/privacy

4.5 Expo (Expo Inc.)

The App is built with Expo / React Native. Expo may collect basic technical data required for the app runtime to function.

• Privacy policy: expo.dev/privacy

5. Storage and security

5.1 Where your data is stored

Your account and content data are stored on Firebase (Google Cloud) servers, which may be located in the European Union, the United States or other regions. Firebase complies with GDPR and has signed the EU Standard Contractual Clauses (SCCs).

5.2 For how long

• Account data: for as long as your account is active. If you delete your account, your data will be deleted within 30 days.
• Anonymous usage data: up to 14 months per Firebase Analytics' default settings.
• Backups: may be retained for up to an additional 90 days in encrypted backups.

5.3 Security measures

• Data transmission via HTTPS/TLS.
• Passwords stored with secure hashing (managed by Firebase Auth).
• Restricted access to production data via two-factor authentication.
• Firestore security rules that prevent unauthorized access between users.

6. Minors

Taqwa is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data without your consent, contact us at mbenamakh2709@gmail.com and we will delete that information immediately.

In the European Economic Area (EEA), we do not collect data from minors under 16 without the verifiable consent of their parents or legal guardians.

7. Your rights

Depending on your place of residence, you may have the following rights over your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request the deletion of your personal data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to the processing of your data for certain purposes.
• Restriction: request that we restrict the processing of your data in certain circumstances.
• Withdrawal of consent: withdraw your consent at any time (for example, by disabling location or notification permissions from your device settings).

How to exercise your rights

To exercise any of these rights, contact us at mbenamakh2709@gmail.com. We will respond within a maximum of 30 days. In some cases we may need to verify your identity before processing the request.

Account deletion

You can delete your account directly from the App under Settings → Account → Delete account. This will permanently delete all of your data from our active servers within 30 days.

Complaints

If you believe that the processing of your data does not comply with applicable regulations, you have the right to file a complaint with the data protection authority in your country (in Spain: AEPD — aepd.es).

8. Cookies and tracking technologies

The mobile App does not use browser cookies. However, we use similar technologies such as:

• Local storage (AsyncStorage): to save user preferences on the device (theme, language, last surah read). This data stays on your device and is not sent to our servers.
• Firebase Analytics SDK: uses app instance identifiers to collect anonymous usage data. You can disable Analytics tracking by disabling "Ad tracking" on your Android device under Settings → Google → Ads → Opt out of Ads Personalization.
• Advertising identifier (ADID/GAID): only used if available and you have not opted out. You can reset or disable it in your device settings.

9. Changes to this policy

We may update this Privacy Policy periodically to reflect changes to the App, applicable legislation or our privacy practices.

When we make material changes, we will notify you through:

• A push notification in the App (if you have notifications enabled).
• A visible notice on the App's home screen the first time you open it after the update.
• Updating the "Last updated" date at the top of this document.

We recommend reviewing this page periodically. Continued use of the App after changes are published constitutes your acceptance of them.

10. Contact

If you have questions, requests or comments about this Privacy Policy or about the processing of your personal data, you can contact us through:

This privacy policy has been drafted in accordance with the General Data Protection Regulation (GDPR), Spain's Organic Law 3/2018 on Data Protection (LOPDGDD), the California Consumer Privacy Act (CCPA) and the publication requirements of the Google Play Store and Apple App Store.

جَزَاكُمُ اللَّهُ خَيْرًا