Legal
Last updated: 17 May 2025
Your privacy is important to us. This Privacy Policy explains what information Salah collects, how it is used, and the choices you have. We have designed Salah to be a private spiritual tool — we collect only what is necessary for the app to function.
Short version: Almost everything Salah stores stays on your device. We do not sell your personal data. We do not build advertising profiles. Location is used only to calculate prayer times and is never stored on our servers.
The following data is stored only on your device using SQLite and AsyncStorage. It never leaves your device except as described below.
| Data | Purpose | Where stored |
|---|---|---|
| Prayer records (which prayers you completed, timestamps) | Tracker, streak, and points calculation | Device (SQLite) |
| Journal entries (mood, notes, Sadaqah records) | Personal reflection journal | Device (SQLite) |
| Your name and onboarding answers | Personalising the app experience | Device (AsyncStorage) |
| Niyyah signature (drawn during onboarding) | Personal spiritual reminder, shown only to you | Device (AsyncStorage) |
| App settings (calculation method, madhab, notifications) | Configuring the app to your preferences | Device (AsyncStorage) |
| Cached prayer times | Offline access to today's prayer schedule | Device (AsyncStorage) |
| Cached daily Hadith and Quran verse | Reducing API calls; offline guidance access | Device (SQLite) |
Salah requests access to your device location solely to calculate accurate local prayer times. We use your GPS coordinates to query the Aladhan prayer times API. Your coordinates are sent to Aladhan's servers for this calculation but are not stored on our servers. Location is not used for advertising, profiling, or any purpose beyond prayer time calculation.
You can deny or revoke location access at any time in your device settings. If you do, you can enter your city manually instead.
Subscription management is handled entirely by RevenueCat and your device's app store (Apple App Store or Google Play). We receive anonymised entitlement status (active/inactive subscription) from RevenueCat to gate app features. We do not receive or store your payment card details, billing address, or full purchase history.
RevenueCat's privacy policy is available at revenuecat.com/privacy.
Salah communicates with the following external services. Each has its own privacy policy:
| Service | Purpose | Data sent |
|---|---|---|
| Aladhan API (aladhan.com) | Prayer time calculation | Latitude, longitude, calculation method |
| OpenStreetMap / Overpass API | Mosque finder | Approximate location (rounded to 2 decimal places) |
| api.hadith.gading.dev | Daily Hadith | None (public API, no personal data) |
| Al-Quran Cloud (api.alquran.cloud) | Daily Quran verse | None (public API, no personal data) |
| RevenueCat | Subscription management | Device ID (anonymised), entitlement status |
| Google Fonts | Typography (landing website only) | IP address (standard web request) |
Salah sends local notifications for prayer times. These are scheduled on-device and do not pass through our servers. No personal data is transmitted when a notification fires. You can disable notifications at any time in your device settings or within the app.
On supported iOS devices, Salah may use Apple's Screen Time / FamilyControls framework to restrict access to other apps during prayer windows. This is an on-device feature managed by iOS. We do not receive data about which apps are restricted, how long they were blocked, or your usage patterns. The feature requires your explicit authorisation and can be revoked at any time in iOS Settings → Screen Time.
Salah is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete it.
Because your data is stored locally on your device, you control it directly. You can:
Any data shared with RevenueCat for subscription management can be deleted by contacting RevenueCat directly or us at the address below.
Your data is stored on your own device using iOS and Android's standard secure storage mechanisms. We do not operate servers that store your personal prayer or journal data. Network requests to third-party APIs (prayer times, Hadith, Quran) use HTTPS encryption.
If you are located in the UK or European Economic Area, you have certain rights under data protection law, including the right to access, correct, or delete personal data we hold about you. Since most data is stored locally on your device, you can exercise these rights directly. For data held by RevenueCat, contact them directly or contact us and we will assist.
We do not operate as a data controller in the traditional sense for most data, as it never reaches our servers.
We may update this Privacy Policy as the app evolves. We will notify you of significant changes via the app or by updating the "Last updated" date above. Continued use of Salah after changes constitutes acceptance of the revised policy.
If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us at: