Privacy policy

Last updated: 15 September 2026 · Effective: 15 September 2026 · Version 1

In short

Who is responsible

The data controller for the Prayer Tracker: Qibla & Qada app and this website is Astra studio, TOO, the company named on the Legal notice page. Contact: support@prayertrackerapp.com.

What data is processed, and why

DataPurposeWhere it is processedLegal basis (GDPR)
Location (coordinates) Computing prayer times and the qibla direction On your iPhone only. Access is "while using the app"; the coordinates are stored on the device and never sent to us. Consent, given through the iOS location permission (Art. 6(1)(a)); withdraw it in iOS Settings at any time.
Coordinates sent to Apple's geocoding service Showing the name of your city and detecting its time zone Apple (CLGeocoder). Apple's own privacy policy applies to the look-up. Legitimate interest in showing a readable location (Art. 6(1)(f)).
City search text Finding a city you type when you choose a location by name Apple Maps (MKLocalSearch). Only what you type in the search field is sent. Performance of the contract — providing the feature you use (Art. 6(1)(b)).
Settings, prayer marks, the qada ledger, fasts The app's core function On your iPhone and, if iCloud is enabled for the app, in your own iCloud account (Apple's key-value store). We have no access to it. Performance of the contract (Art. 6(1)(b)). See also "Religious practice data" below.
Purchases Verifying the subscription Apple (StoreKit). Apple may send our server App Store Server Notifications containing only the original transaction identifier and the subscription status — no name, email address or payment details. Performance of the contract (Art. 6(1)(b)); accounting obligations (Art. 6(1)(c)).
Remote configuration request Fetching the wording of some screens The app requests one file (cdn.prayertrackerapp.com/config/v1.json) at most once per launch, without a body or any identifier. Like any web request it exposes your IP address and the app's user-agent string (app and iOS version) to our CDN provider, Cloudflare, which keeps short-lived logs. The app works without this file. Legitimate interest in keeping the app's wording current (Art. 6(1)(f)).
Reminders and alarms Prayer, fasting and trial reminders Scheduled locally on your iPhone. The app does not register for push notifications. Performance of the contract (Art. 6(1)(b)).
Diagnostics (MetricKit) Understanding crashes and performance iOS may hand the app crash and performance reports. They are stored in the app's own container on your device and are not uploaded. Legitimate interest in a working app (Art. 6(1)(f)).
This website Serving these pages The site sets no cookies and runs no scripts or analytics. It is served by Cloudflare Pages, which keeps standard server logs (IP address, URL, user agent) for security. Legitimate interest in operating a secure website (Art. 6(1)(f)).
Support email Answering you We receive your email address and what you write. Our mail is hosted by Google Workspace. Performance of the contract and legitimate interest in answering requests (Art. 6(1)(b), (f)).

What we do not do

No advertising and no ad SDKs. No App Tracking Transparency prompt, because there is nothing to track. No selling or sharing of personal data. No profiling. No cross-app identifiers. No third-party analytics, in the app or on this website.

Third parties

Where these providers process data outside the European Economic Area or the United Kingdom, transfers rely on their EU–US Data Privacy Framework certification and/or the European Commission's Standard Contractual Clauses, as applicable. Each provider protects the data at least as well as required by this policy.

Retention and deletion

Your rights

Depending on where you live, you have the right to access, rectify, erase or restrict the personal data we hold about you, to receive it in a portable form, to object to processing based on legitimate interest, and to withdraw consent at any time — for location, in iOS Settings → Privacy & Security → Location Services. You may also complain to a supervisory authority: in the EU/EEA, your national data protection authority; in the United Kingdom, the Information Commissioner's Office; in Kazakhstan, the authorised body under the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 "On Personal Data and Their Protection".

Because we hold no data about you as an identifiable person, most requests are fulfilled by deleting the app and its iCloud copy yourself. For anything else, email support@prayertrackerapp.com. We do not make automated decisions about you.

Religious practice data

Records of which prayers you performed can reveal your religion, a special category of data under Article 9 of the GDPR. In Prayer Tracker these records are created by you, stored on your device and, if iCloud is on, in your own iCloud account. We never receive them.

Children

The app is not directed at children under 13, or under the age of digital consent where you live (up to 16 in some countries of the European Union). We do not knowingly process children's data.

Changes to this policy

Each version of this policy is dated and numbered above. When it changes, the previous version stays available at /privacy/<date>, and material changes are noted on this page and in the app's release notes.

Contact

support@prayertrackerapp.com · Postal address: see the Legal notice.