Your data, treated quietly

Privacy Policy

Effective 26 August 2026 · Version 1.0

The short version. Tomorrow’s alarm and wake verification are local-first. Fajr Companion does not sell data, run advertising trackers, or upload wake photos or voice recordings. Optional online features use an anonymous app identity and only the data needed to provide them.

1. Who is responsible

Fajr Companion (“Fajr Companion,” “we,” or “us”) is the controller of personal data processed through the Fajr Companion app and website. Privacy questions and rights requests can be sent through our contact page by selecting “Privacy or data request.”

2. What stays on your device

Your alarm schedule, wake sessions, challenge state, prayer-time cache, progress history, and local settings are designed to work on-device, including when the backend is unavailable.
Camera frames used by the object challenge and audio used by the spoken challenge are processed for the immediate challenge. We do not retain or upload the photo, video, voice recording, or spoken text by default.
Exact location can be used for prayer-time and timezone setup. We do not store exact coordinates in the Fajr Companion backend. If you choose an online prayer-time source, coordinates needed for that request are sent directly to that provider and its policy applies.

3. Data sent for optional online features

Anonymous account data: an app-generated device identifier, platform, anonymous user ID, authentication tokens, and last-active time, used to protect sync and notifications.
Notifications: an APNs device token and already-calculated reminder times. The backend does not receive your exact coordinates to schedule these reminders. Apple can process notification delivery data under its own terms.
Private spiritual sync: duaa/dhikr items, session state, availability windows, and directional trust relationships only when you use sync or trusted sharing. Record payloads are encrypted at rest and access-controlled per user. This is server-side encryption, not a claim of end-to-end encryption.
Support: the name, email, topic, and message you submit on the contact page.
Coarse product analytics: only after you enable anonymous product analytics in Settings, approved event names such as alarm scheduling outcome, wake outcome, challenge type, permission denial, goal/check-in events, and a broad foreground-time bucket. We do not collect screen paths, exact session duration, exact location, wake media, private religious text, reflections, or raw health data as analytics. You can turn this off at any time; the change applies to future collection.

4. Approximate location by IP

During onboarding, the app may ask our backend for an approximate country and city based on the network address already visible to the server. The backend sends that address to the IP geolocation provider ipwho.is for the lookup and does not save it in the Fajr Companion database. You can ignore the suggestion and choose a location manually.

5. Why we process data

We process data to provide features you request, secure accounts, deliver reminders, synchronize optional records, answer support requests, maintain reliability, and understand the app through limited aggregate metrics. Depending on where you live, the legal basis may be performance of the service, your consent, our legitimate interest in secure and reliable operation, or compliance with law. We do not use Fajr Companion data for targeted advertising or cross-app tracking.

6. Sharing and processors

Data is shared only as needed with infrastructure providers that host the API/database, Apple for APNs and App Store services, an online prayer-time provider when selected, and ipwho.is for optional approximate location. A trusted person receives only content you intentionally share under the app’s directional trust controls. We do not sell personal data or share it with data brokers.

7. Retention

Coarse telemetry is deleted after 90 days.
Resolved contact requests are deleted after 12 months.
Expired/revoked admin sessions are cleaned after 30 days; editorial audit records are kept for up to two years for security and accountability.
Optional synced records remain until you delete them or delete the anonymous sync account. Revocation/deletion may retain content-free tombstones briefly so removal can synchronize correctly.
Local records remain until you delete them in the app, reset the app, or remove the app, subject to device backup settings.

8. Your choices and rights

You can deny or revoke camera, microphone/speech, motion, location, and notification permission in iOS Settings. You can use manual location, export optional spiritual sync data, revoke trusted contributors, and delete the synced account from the app. Depending on your location, you may also request access, correction, erasure, restriction, portability, or object to processing. Submit a privacy request through the contact page. We may need limited information to verify and complete the request.

9. Security and children

We use TLS in transit, hashed credentials and session secrets, encryption at rest for private spiritual payloads, role-based operator access, and audited editorial changes. No system is perfectly secure. Fajr Companion is not directed to children under 13, and we do not knowingly create identified child profiles. A parent or guardian who believes a child submitted personal data should contact us.

10. International use and changes

Our service providers may process data outside your country. Where required, we use lawful safeguards for international transfers. We will update this page when practices materially change and revise the effective date. Material changes will be communicated in the app when appropriate.

Release review. This policy reflects the implemented technical behavior as of the effective date. It must receive qualified legal review and be kept aligned with App Store privacy disclosures before public release.