Privacy policy
In short
- No accounts, no analytics, no ads, no tracking, no advertising identifiers.
- Prayer times, the qibla and your prayer records are computed and stored on your iPhone.
- The only data that leaves your phone goes to Apple (location look-ups, iCloud backup, purchases) or, for one small configuration file and this website, to our hosting provider Cloudflare.
- We do not sell or share personal data.
Who is responsible
The data controller for the Prayer Tracker: Qibla & Qada app and this website is Astra studio, TOO, the company named on the Legal notice page. Contact: support@prayertrackerapp.com.
What data is processed, and why
| Data | Purpose | Where it is processed | Legal basis (GDPR) |
|---|---|---|---|
| Location (coordinates) | Computing prayer times and the qibla direction | On your iPhone only. Access is "while using the app"; the coordinates are stored on the device and never sent to us. | Consent, given through the iOS location permission (Art. 6(1)(a)); withdraw it in iOS Settings at any time. |
| Coordinates sent to Apple's geocoding service | Showing the name of your city and detecting its time zone | Apple (CLGeocoder). Apple's own privacy policy applies to the look-up. | Legitimate interest in showing a readable location (Art. 6(1)(f)). |
| City search text | Finding a city you type when you choose a location by name | Apple Maps (MKLocalSearch). Only what you type in the search field is sent. | Performance of the contract — providing the feature you use (Art. 6(1)(b)). |
| Settings, prayer marks, the qada ledger, fasts | The app's core function | On your iPhone and, if iCloud is enabled for the app, in your own iCloud account (Apple's key-value store). We have no access to it. | Performance of the contract (Art. 6(1)(b)). See also "Religious practice data" below. |
| Purchases | Verifying the subscription | Apple (StoreKit). Apple may send our server App Store Server Notifications containing only the original transaction identifier and the subscription status — no name, email address or payment details. | Performance of the contract (Art. 6(1)(b)); accounting obligations (Art. 6(1)(c)). |
| Remote configuration request | Fetching the wording of some screens | The app requests one file (cdn.prayertrackerapp.com/config/v1.json) at most once per launch, without a body or any identifier. Like any web request it exposes your IP address and the app's user-agent string (app and iOS version) to our CDN provider, Cloudflare, which keeps short-lived logs. The app works without this file. |
Legitimate interest in keeping the app's wording current (Art. 6(1)(f)). |
| Reminders and alarms | Prayer, fasting and trial reminders | Scheduled locally on your iPhone. The app does not register for push notifications. | Performance of the contract (Art. 6(1)(b)). |
| Diagnostics (MetricKit) | Understanding crashes and performance | iOS may hand the app crash and performance reports. They are stored in the app's own container on your device and are not uploaded. | Legitimate interest in a working app (Art. 6(1)(f)). |
| This website | Serving these pages | The site sets no cookies and runs no scripts or analytics. It is served by Cloudflare Pages, which keeps standard server logs (IP address, URL, user agent) for security. | Legitimate interest in operating a secure website (Art. 6(1)(f)). |
| Support email | Answering you | We receive your email address and what you write. Our mail is hosted by Google Workspace. | Performance of the contract and legitimate interest in answering requests (Art. 6(1)(b), (f)). |
What we do not do
No advertising and no ad SDKs. No App Tracking Transparency prompt, because there is nothing to track. No selling or sharing of personal data. No profiling. No cross-app identifiers. No third-party analytics, in the app or on this website.
Third parties
- Apple Inc., Cupertino, USA (for users in the European Union: Apple Distribution International Ltd, Ireland) — location look-ups, iCloud, purchases and the delivery of the app. Apple acts under its own privacy policy.
- Cloudflare, Inc., San Francisco, USA — hosting of this website and the configuration file. Cloudflare's privacy policy.
- Google LLC / Google Ireland Ltd — hosting of our support mailbox.
Where these providers process data outside the European Economic Area or the United Kingdom, transfers rely on their EU–US Data Privacy Framework certification and/or the European Commission's Standard Contractual Clauses, as applicable. Each provider protects the data at least as well as required by this policy.
Retention and deletion
- Data on your iPhone stays until you delete the app.
- The copy in your iCloud account stays until you remove it; see Your data.
- Subscription notifications from Apple are kept as long as needed to verify the subscription and to meet accounting obligations.
- Cloudflare server logs are kept for Cloudflare's short standard retention.
- Support emails are deleted 12 months after the last message in the conversation, or earlier if you ask.
Your rights
Depending on where you live, you have the right to access, rectify, erase or restrict the personal data we hold about you, to receive it in a portable form, to object to processing based on legitimate interest, and to withdraw consent at any time — for location, in iOS Settings → Privacy & Security → Location Services. You may also complain to a supervisory authority: in the EU/EEA, your national data protection authority; in the United Kingdom, the Information Commissioner's Office; in Kazakhstan, the authorised body under the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 "On Personal Data and Their Protection".
Because we hold no data about you as an identifiable person, most requests are fulfilled by deleting the app and its iCloud copy yourself. For anything else, email support@prayertrackerapp.com. We do not make automated decisions about you.
Religious practice data
Records of which prayers you performed can reveal your religion, a special category of data under Article 9 of the GDPR. In Prayer Tracker these records are created by you, stored on your device and, if iCloud is on, in your own iCloud account. We never receive them.
Children
The app is not directed at children under 13, or under the age of digital consent where you live (up to 16 in some countries of the European Union). We do not knowingly process children's data.
Changes to this policy
Each version of this policy is dated and numbered above. When it changes, the previous version stays available at /privacy/<date>, and material changes are noted on this page and in the app's release notes.
Contact
support@prayertrackerapp.com · Postal address: see the Legal notice.