Privacy policy

1. Who we are

Yaqeen is provided by [legal entity name], [address], Egypt (“we”). Privacy questions: [support email]. Data protection officer: [DPO name and email].

2. What stays on your phone

Your location and coordinates (prayer times and Qibla are computed on the phone) and the home-screen widget’s data never reach us. Your reading history, bookmarks, notes and khatma, memorisation plan and reviews, dhikr and tasbeeh counts, daily routine and Ramadan log (fasts, taraweeh, khatma) stay on your phone and don’t reach us — unless you turn on “cloud backup” yourself (below).

3. What we keep

Account: when you sign in with Google or Apple we keep the name and email they send and their account id. You can use the app as a guest without an account.

Synced settings: language, the city name you picked, time zone, calculation method and Hijri adjustment.

The 365-day journey: the tasks you mark done, your points and the rewards you redeemed — only to award points. This reveals religious practice, so it is never shared with any ad platform, our team only ever sees totals, and it never appears on your public card.

Your public Yaqeen card (optional): the name, avatar and the fields you choose to show, plus a visit counter only. Physical medals and cards carry a random code, not your identity.

Device: push token (FCM), operating system and app version, to deliver the notifications you agreed to.

Consent record: every change to your consents with its time and source, as legal evidence of what you agreed to.

Cloud backup (optional, only for accounts signed in with Google or Apple, off until you turn it on in Profile → Privacy): a copy of the progress kept on your phone — reading, bookmarks, notes, khatma, memorisation, dhikr counts, favourite duas, chosen reciter, your routine, Ramadan log and tasbeeh — so it comes back on a new phone. Never your location or downloads. It is encrypted before it is stored on our servers, seen by no one but you (not our team), never used for analytics or advertising, included in your data export, and deleted from our servers as soon as you turn it off or delete your account.

4. Separate consents

Six independent consents you can change at any time in Profile → Privacy: worship reminders (local notifications on your phone), challenge & rewards messages, store offers, ads measurement, app improvement, and cloud backup (signed-in accounts). Each is off until you turn it on, apart from what you choose during setup.

5. Advertising

Only with “ads measurement”, we send Google, Meta and TikTok a fixed list of marketing events (such as first open, joining the challenge, or a store purchase) — never any worship activity. On iOS the tracking prompt only appears after you agreed inside the app.

6. App improvement

Only with “app improvement”, we record how you move through non-worship areas (setup steps, the card, the store, settings) under a random install id that is not linked to your account, and delete it after 180 days. It may be forwarded to PostHog (EU) without IP addresses. Worship areas are never tracked.

7. Crash reports

We use Sentry for crash reports: the error, device and app version, with personal and worship data removed and no screenshots.

8. Who processes data for us

Hosting: [hosting provider and region]. Notifications: Google Firebase Cloud Messaging. Sign-in: Google and Apple. Reward codes and the store: Shopify. Crashes: Sentry (EU). App improvement: PostHog (EU, with your consent). Advertising: Google, Meta and TikTok (with your consent only).

Some are outside Egypt; we send them the minimum needed under the law’s safeguards [and a transfer authorisation where required].

9. How long we keep it

We keep your account data while it exists. When you ask to delete it, your card is hidden and your medals switched off at once; after 30 days your identity, sessions, devices, current consents, task history and cloud backup are deleted, while the points ledger and redemptions stay anonymised for accounting and the consent record stays as legal evidence. App-improvement events are deleted after 180 days. The cloud backup is deleted as soon as you turn it off.

10. Your rights

You can see and export your data (Profile → Export my data), correct it, delete your account (how to delete your account) and withdraw any consent. Questions or objections: [support email]. You may also complain to the Personal Data Protection Centre.

11. Children

Yaqeen is meant for people aged [minimum age] and over. [To be confirmed with counsel.]

12. Changes

If we change this policy materially we will tell you in the app before it applies, and update the date above.