Prayer Tracker
Privacy policy
In short
- No accounts, no ads, no tracking, no advertising identifiers, and no third party that watches how you use the app.
- Prayer times, the qibla and your prayer records are computed and stored on your iPhone — and, if you use them, on your Apple Watch and in your own iCloud account.
- The app sends us usage statistics so we can see what to improve. They never say which prayers you performed or what you owe, and they carry no name and no location — only the country. In the EU, the EEA, the UK, Switzerland and Albania the app asks first; elsewhere you can switch them off in Settings → Backup & data.
- The rest of what leaves your phone goes to Apple (location look-ups, iCloud backup, purchases), to RevenueCat (the record of your subscription purchase and the identifier iOS assigns to our apps on this iPhone, without your name) or, for any feedback you send and this website, to our hosting provider Cloudflare.
- We do not sell or share personal information.
Who is responsible
The data controller for the Prayer Tracker: Salah & Qibla app and this website is Astra studio, TOO, the company named on the Legal notice page. Contact: support@prayertrackerapp.com.
What data is processed, and why
| Data | Purpose | Where it is processed | Legal basis (GDPR) |
|---|---|---|---|
| Location (coordinates) | Computing prayer times and the qibla direction, and keeping them right when you travel | On your iPhone. Access is "while using the app". The saved city and its coordinates are stored on the iPhone, on your Apple Watch if you use the watch app, and — if iCloud backup is on — in your own iCloud account (Apple's key-value storage). They are never sent to us. | Consent, given through the iOS location permission (Art. 6(1)(a)); withdraw it in iOS Settings at any time. |
| Coordinates sent to Apple's geocoding service | Showing the name of your city and detecting its time zone | Apple (CLGeocoder). Apple's own privacy policy applies to the look-up. | Legitimate interest in showing a readable location (Art. 6(1)(f)). |
| City search text | Finding a city you type when you choose a location by name | Apple Maps (MKLocalSearch). Only what you type in the search field is sent. | Performance of the contract — providing the feature you use (Art. 6(1)(b)). |
| Settings, prayer marks, the qada ledger, fasts | The app's core function | On your iPhone; on your Apple Watch if you use the watch app (see "Apple Watch" below); and, if iCloud backup is on, in your own iCloud account (Apple's key-value storage). We have no access to any of it. | Performance of the contract (Art. 6(1)(b)). See also "Religious practice data" below. |
| Purchases | Selling and checking the subscription | Apple (the App Store and StoreKit) takes the payment and manages the subscription, and the app checks it on your iPhone. Apple gives us sales reports that do not identify you. The app also includes the RevenueCat SDK, which the app starts only when there is a purchase to record: after a purchase or a restore, and once after a reinstall that finds a subscription. It then sends RevenueCat the transaction Apple signed — the product, the dates, the price, Apple's transaction identifiers and the country of your App Store — together with a random identifier the SDK creates for this installation and, with every request, the identifier iOS assigns to our apps on this iPhone (identifierForVendor), the iPhone model, the iOS and app versions and the iPhone's language settings. Apple notifies RevenueCat when the subscription renews, ends or is refunded. Like any web request, this also exposes your IP address to RevenueCat. RevenueCat keeps the record of the subscription and shows us how many trials start, convert and end. Neither RevenueCat nor we receive your name, email address or payment details. | Performance of the contract (Art. 6(1)(b)); accounting obligations (Art. 6(1)(c)); for the subscription statistics, legitimate interest in running the subscription (Art. 6(1)(f)). |
| Reminders and alarms | Prayer, fasting and trial reminders | Scheduled locally on your iPhone. The app does not register for push notifications. | Performance of the contract (Art. 6(1)(b)). |
| Diagnostics | Understanding crashes and performance | The app collects no crash or performance data itself. If you allow it in iOS (Settings → Privacy & Security → Analytics & Improvements → Share With App Developers), Apple shares crash reports and usage figures for the app with us; Apple does not tell us who you are. | Legitimate interest in a working app (Art. 6(1)(f)). |
| This website | Serving these pages | The site sets no cookies and runs no scripts or analytics. It is served by Cloudflare (Cloudflare Workers), which keeps standard server logs (IP address, URL, user agent) for security. | Legitimate interest in operating a secure website (Art. 6(1)(f)). |
| Usage statistics | Seeing which screens and features people use and where setup loses them, so we know what to improve | Our own database at Cloudflare (D1), reached through our endpoint on Cloudflare Workers. What an event and a batch contain is set out under "Usage statistics" below. Deleted after 90 days. | In the EU, the EEA, the UK, Switzerland and Albania: your consent (Art. 6(1)(a) and Art. 9(2)(a) of the GDPR, and the corresponding provisions of Albania's Law No. 124/2024 on Personal Data Protection), asked for before anything is recorded. Elsewhere: legitimate interest in improving the app (Art. 6(1)(f)), with a switch to turn them off. |
| Feedback you send | Answering you and fixing what you report | Your message, the category you chose, your email address if you type one, the app and iOS version and the iPhone model. No country and no IP address are stored with it. The "Include app details" switch is off unless you turn it on; if you do, the app also sends your settings (calculation method, madhab, high-latitude rule, time format, whether a location is set, subscription state, whether iCloud backup is on). "What's sent" on the same screen shows the whole block before you send. The message is stored in our database at Cloudflare for 12 months after we receive it and emailed to our support mailbox through Resend. To stop floods, Cloudflare counts messages per IP address for a minute at a time; the address is never stored. | Performance of the contract and legitimate interest in answering requests (Art. 6(1)(b), (f)). For the settings block, your explicit consent (Art. 6(1)(a), and Art. 9(2)(a) where a madhab says something about your beliefs) — given by switching it on before you send; with the switch off, none of it is sent. |
| Support email | Answering you | We receive your email address and what you write. Our mail is hosted by Google Workspace. | Performance of the contract and legitimate interest in answering requests (Art. 6(1)(b), (f)). |
Usage statistics
The app records a small number of events so we can see which screens and features are used and where people give up during setup. Each event has a name, the time it happened and a few properties — for example which setup screen was reached, whether a purchase went through, whether a permission was granted, the subscription state (such as trial or paid), the first use of a feature such as the qibla, the make-up log or the fast planner, or where a prayer was marked from (the app, a widget, the watch), but never which prayer. With each batch the app sends a random install ID that it creates itself (deleting and reinstalling the app makes a new one), the app version and build, the iOS major version, whether it is a TestFlight or an App Store build, and the day the app was installed. It does not send the device model, your name, your location, or anything from your prayer, qada or fasting records. Our server adds the country the request came from, taken from Cloudflare's network, and does not store your IP address.
The statistics are pseudonymous, not anonymous: the install ID ties together the events of one installation, though not to your name, your Apple Account or any contact detail. They are deleted after 90 days.
If the country of your App Store account — or, when the App Store cannot tell, your iPhone's region — is in the European Union, the European Economic Area, the United Kingdom, Switzerland or Albania, the app asks during setup and records nothing unless you allow it. The legal basis there is your consent (GDPR Art. 6(1)(a)) and your explicit consent under Art. 9(2)(a), because the use of a prayer app can reveal religious belief. Elsewhere the statistics are on, based on our legitimate interest in improving the app (Art. 6(1)(f) where the GDPR applies). Everywhere, you can switch them off or on at any time in Settings → Backup & data → "Share usage statistics" — without a subscription, under "Privacy & data" at the bottom of the subscription screen; switching them off stops them at once and deletes what is still waiting on the phone.
Your first name
Setup asks what to call you, so the app can greet you and use your name in reminders ("Ali, it's time for Asr."). Any name or nickname will do. It is kept only in this iPhone's keychain: it is never sent to us, it is not in the app's iCloud backup, and it does not move to a new iPhone. The keychain outlives the app, so the name stays on the iPhone after you delete the app and comes back if you install it again. To remove it, clear it before deleting the app: in Settings, tap the greeting at the top to open Your name, and empty the field. Without a subscription, the same field is under "Privacy & data" at the bottom of the subscription screen.
Your answers during setup
Setup asks a few questions — such as how often a prayer slips past and how you keep track of qada — to shape the screens that follow. The answers stay on your iPhone, are never sent to us or to iCloud, and are deleted when setup is finished. What you enter there as prayers and fasts owed becomes your qada and fasts counts, kept like the rest of your records.
Apple Watch
If you use the Apple Watch app, your iPhone sends it — between your own devices, never through us — a copy of your settings (including the saved city and its coordinates), your fasts and the last 7 days of prayer marks, so the watch can show today's prayers. Marks you make on the watch go back to the iPhone the same way. The copy stays on the watch until you delete the watch app.
What we do not do
No advertising and no ad SDKs. No App Tracking Transparency prompt, because there is nothing to track. No selling or sharing of personal information. No profiling. No cross-app identifiers. No SDK that watches how you use the app, and no analytics on this website — the usage statistics described above go to our own database and nowhere else; the one third-party SDK in the app is RevenueCat's, which the app starts only to record a purchase or a restore and which learns nothing about how you use the app (see "Purchases"). We never receive which prayers you performed, what you owe, which days you fast, your name, or your coordinates or city — the usage statistics carry only the country.
Third parties
- Apple Inc., Cupertino, USA (for users in the European Union: Apple Distribution International Ltd, Ireland) — location look-ups, iCloud, purchases, the crash reports you choose to share, and the delivery of the app. Apple acts under its own privacy policy.
- Cloudflare, Inc., San Francisco, USA — hosting of this website, and the endpoints and database (Cloudflare Workers and D1) that receive usage statistics and feedback. Cloudflare's privacy policy.
- RevenueCat, Inc., San Francisco, USA — the record of your subscription and our subscription statistics, from the purchase transactions described under "Purchases". RevenueCat's privacy policy.
- Resend, Inc., USA — delivery of the feedback you send to our support mailbox.
- Google LLC / Google Ireland Ltd — hosting of our support mailbox.
Where these providers process data outside the European Economic Area or the United Kingdom, transfers rely on their EU–US Data Privacy Framework certification and/or the European Commission's Standard Contractual Clauses, as applicable. Each provider protects the data at least as well as required by this policy.
Retention and deletion
- Data on your iPhone stays until you delete the app — except your first name, which stays in the keychain until you clear it (see "Your first name").
- The copy on your Apple Watch stays until you delete the watch app.
- The copy in your iCloud account stays until you remove it; see Your data.
- Usage statistics are deleted after 90 days.
- The subscription record at RevenueCat is kept while we use RevenueCat, and deleted there on request.
- Feedback is deleted from our database 12 months after we receive it, or earlier if you ask.
- Support emails, including the copy of any feedback that reaches our support mailbox, are deleted 12 months after the last message in the conversation, or earlier if you ask.
- Cloudflare server logs are kept for Cloudflare's short standard retention.
Security
Everything the app sends us, and every page of this site, travels encrypted over HTTPS. We collect as little as we can and keep it only as long as stated above, and access to our database and support mailbox is restricted to the people who run Prayer Tracker.
Your rights
Depending on where you live, you have the right to access, rectify, erase or restrict the personal data we hold about you, to receive it in a portable form, to object to processing based on legitimate interest, and to withdraw consent at any time — for location, in iOS Settings → Privacy & Security → Location Services; for usage statistics, in Settings → Backup & data in the app, or under "Privacy & data" on its subscription screen. You may also complain to a supervisory authority: in the EU/EEA, your national data protection authority; in the United Kingdom, the Information Commissioner's Office; in Switzerland, the Federal Data Protection and Information Commissioner; in Kazakhstan, the authorized body under the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 "On Personal Data and Their Protection".
Most of your data never reaches us, so most requests are fulfilled by deleting the app and its iCloud copy yourself. Usage statistics carry no name or contact detail and the install ID is not shown anywhere, so we cannot tell which of them are yours; switching them off deletes what is still on the phone, and what we already hold is deleted after 90 days. For anything else, email support@prayertrackerapp.com. We do not make automated decisions about you.
Your privacy rights in the United States
If you live in a US state with a consumer privacy law, such as California, you can ask to know what personal information we collect, use and disclose, and ask us to delete or correct it. We do not sell or share personal information and do not use it for targeted advertising, so there is nothing to opt out of. To make a request, email support@prayertrackerapp.com. We will not discriminate against you for exercising these rights.
Do Not Track
This website sets no cookies and has no tracking, and the app does not track you either, so a Do Not Track or Global Privacy Control signal from your browser changes nothing: every visitor is already treated the way those signals ask.
Religious practice data
Records of which prayers you performed can reveal your religion, a special category of data under Article 9 of the GDPR — and so can the use of a prayer app at all. Your prayer records are created by you and stored on your devices and, if iCloud backup is on, in your own iCloud account. We never receive which prayers you performed or what you owe. If usage statistics are on, we do receive the fact and the time that a prayer was marked, without which prayer it was; in the EU, the EEA, the UK, Switzerland and Albania only with your explicit consent.
Children
The app is not directed at children under 13, or under the age of digital consent where you live (up to 16 in some countries of the European Union). We do not knowingly process children's data.
Changes to this policy
The date at the top of this page is when this version took effect. When the policy changes, we update that date and note material changes on this page and in the app's release notes.
Contact
support@prayertrackerapp.com · Postal address: see the Legal notice.