Falaah

1Who we are (data controller)

For personal data processed in connection with Falaah (the “App”), the data controller is the operator of Falaah (“we,” “us,” “our”), reachable via Contact us.

This Policy is intended to meet requirements under the EU/EEA General Data Protection Regulation (“GDPR”), the UK GDPR, the Swiss Federal Act on Data Protection, the California Consumer Privacy Act as amended by the CPRA (“CCPA”), and other applicable privacy laws. By using the App, you acknowledge this Policy. If you do not agree, do not use the App.

2Information we collect

• Account: your Apple ID identifier and email address via Sign in with Apple (you may choose to hide your email).
• Worship data you create: prayer logs, qaza (make-up) balances, goals, dhikr counts, memorization progress, reflections, and similar entries.
• Content you submit to AI features: text or audio you choose to send for features such as dua composition, make-up planning, or recitation transcription.
• Recitation recordings, only if you choose to make them.
• A device notification token, only if you enable reminders.
• Subscription status as reported by Apple (we do not receive your full payment card details).
• Support communications you send to us.

3What we do not collect

We do not collect your precise location — prayer times are calculated on your device and your location never leaves your phone. We do not use advertising identifiers, third-party advertising analytics or tracking SDKs, and we never sell your personal data. Your detailed qaza estimation questionnaire answers stay on your device; only the resulting totals you save are stored.

4Legal bases (GDPR / UK GDPR)

If you are in the EEA, UK, or Switzerland, we process personal data only where a legal basis applies, including:

• Contract: to provide the App features you request (account, sync, backup, subscriptions you buy, AI features you invoke).
• Legitimate interests: to secure the App, prevent abuse, improve reliability, and communicate about service changes — balanced against your rights.
• Consent: where required (for example, optional push notifications, or optional AI submissions). You may withdraw consent at any time without affecting prior lawful processing.
• Legal obligation: where we must retain or disclose information to comply with law.

5How we use your information

To provide, sync, and back up the App’s features; send the reminders you turn on; process AI requests you initiate; manage entitlements via Apple; respond to support; and comply with law. We do not use your data for advertising or cross-context behavioral advertising.

6AI processing

When you use AI features, the text or audio you submit is sent to our AI processor (currently OpenAI) solely to generate a response for you. AI output can be inaccurate, incomplete, culturally or religiously inappropriate, or otherwise unsuitable. AI results are assistive only — not religious rulings, not professional advice, and not decisions about you with legal or similarly significant effects without your own review.

Under applicable OpenAI API terms, customer content submitted via the API is not used to train their models. Please only submit what you are comfortable having processed by a third-party processor. We are not responsible for how you use or rely on AI output; see our Terms of Service and EULA for liability limits.

7Where data is stored & international transfers

Structured data is stored on our managed backend (Supabase). Files you choose to back up, such as recordings, may be stored with a cloud object-storage provider (Cloudflare R2). Because Falaah is available worldwide, personal data may be processed in countries other than where you live, including the United States and other locations where our providers operate.

For transfers from the EEA, UK, or Switzerland to countries not deemed adequate, we rely on appropriate safeguards where required — such as the European Commission’s Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement / Addendum, and provider contractual commitments — together with technical and organizational measures. Contact us for more information about transfers applicable to your account.

8Sharing and processors

We do not sell or rent your personal data. We share it only with service providers who help us operate the App (for example Apple, Supabase, Cloudflare, our AI processor, and push delivery), with professional advisors when needed, and where required by law. Processors who handle personal data on our behalf are instructed to protect it and use it only for instructed purposes.

9Your rights (EEA, UK, Switzerland)

Subject to applicable law, you may have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase data (“right to be forgotten”).
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent where processing is consent-based.
• Lodge a complaint with a supervisory authority in your country of residence or work.

You can exercise many of these rights in the App (view or edit data; delete your account from Account & preferences). For other requests, use Contact us. We may need to verify your identity. We aim to respond within one month for GDPR requests (extendable where permitted for complex requests). Some rights are limited where we have overriding legitimate grounds or legal duties.

10Your rights (California and other US states)

If you are a California resident (and where similar US state laws apply), you may have rights to know/access, delete, and correct personal information; opt out of “sale” or “sharing” for cross-context behavioral advertising (we do not sell or share for such purposes); and non-discrimination for exercising privacy rights. To submit a request, use Contact us or use in-app account deletion.

11Your choices

You may edit or delete worship data in the App, turn reminders on or off, manage or cancel subscriptions in Apple ID settings, delete your account and associated cloud data from Account & preferences, and choose not to use optional AI features.

12Data retention

We keep your data while your account is active. When you delete your account, we delete or anonymize associated personal data from our systems within a reasonable period, except where we must retain limited information for legal, security, fraud-prevention, accounting, or dispute-resolution purposes. Backups may persist briefly before being overwritten. Device-local copies remain until you remove the App or clear local data.

13Children’s privacy

Falaah is not directed to children under 13 (or under 16 in the EEA/UK where a higher digital consent age applies). We do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

14Security

We use reasonable technical and organizational measures to protect your data. No method of transmission or storage is completely secure. You are responsible for keeping your device and Apple ID secure. To the maximum extent permitted by law, we are not liable for unauthorized access resulting from circumstances beyond our reasonable control.

15Automated decision-making

AI features generate assistive text or suggestions you can review, edit, or ignore. They do not produce legal or similarly significant decisions about you without your own judgment. Prayer-time calculations and qaza estimates are organizational tools only.

16Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the latest version. Material changes may also be highlighted in the App. Continued use after changes take effect constitutes acceptance where permitted by law.

17Contact

Privacy questions or GDPR/CCPA requests? Use Contact us.