Privacy Policy

This policy explains which data SalahNow, developed by ALMU CO and published on the App Store and Google Play (listed on Google Play as SalahNow: Prayer Times & Quran), processes, why, and with whom. We show no ads, we do not sell your data and we do not use an advertising ID. The data processed depends on the features you use.

• Location information: You can choose a city manually or allow location access. If you allow location access, your coordinates are sent to our API for prayer times, qibla and nearby mosques. For place and mosque searches these coordinates may be passed to Google Maps Platform, and for official prayer times in Saudi Arabia to King Abdulaziz City for Science and Technology (KACST).
• User preferences: Your calculation method, madhab, language, theme and notification preferences are stored on your device. Your madhab and content tradition preference is stored on our server under the identifier the app creates for your device, even if you have no account.
• Reading progress: Your Quran reading progress and bookmarks are stored on your device, and on our server when sync is on.
• Account details: If you create an account, we store your email address, your name, an irreversible hash of your password and your account number. Your email address is used for sign-in, password resets and the welcome email sent when you sign up. Creating an account is optional.
• Photos: Photos you choose for your profile, a Community post or your journal are uploaded to our server. We do not access your photo library. File details such as location (EXIF) are removed from profile and Community photos; these photos are visible to other users. Journal photos are visible only to you.
• Community and group activity: Your Community posts, comments, likes, follows, saves and reports, and your contributions in group khatm and dhikr rooms, are stored on our server. Your posts and contributions are visible to other users.
• Worship records: Your prayer, fasting and missed-prayer tracking and journal notes are kept on your device, and on our server when Explore sync is on. Your madhab preference and worship records are sensitive data about your religious beliefs; they are processed only to provide these features and are not shared with others.
• Device identifier: The app creates a random identifier for your device and sends it with requests to our server. A device record may be kept for notifications. No advertising ID is used.
• Error and performance information: App crashes and errors are sent to the error-diagnostics service Sentry together with technical details such as device model, operating system and app version.
• Searches: Searches you make in the app (city, mosque and content searches) are sent to our server to return results; place and mosque searches may be passed to Google Maps Platform.
• Feedback: If you send feedback, your message, an optional rating and technical app and device details are stored and forwarded to our support inbox.

Account, Community and sync data are stored on the server we rent; we do not use a separate cloud storage service. Preferences and reading progress are also kept on your device. Copies of feedback and support emails reach our support inbox.

We do not sell your data. The following services receive only the data needed for the feature concerned: Sentry (error and performance diagnostics); Google Maps Platform and Google Maps SDK (maps, place and mosque search; Google processes device and usage information in these services under its own privacy policy); KACST (location coordinates for official prayer times in Saudi Arabia); YouTube (when you play the Makkah live stream); our email delivery provider (account emails); Telegram (notifications forwarded to our team to moderate Community content).

Notifications are only sent when you enable them. You can manage notification types such as prayer time reminders, special day notifications and reading reminders in settings. We do not send marketing notifications. When you create an account, we send a welcome email introducing the app's features.

We use no analytics or tracking tools for advertising or marketing. Sentry processes technical error and performance information; these records may include the addresses of requests the app makes (for example, requests containing a location or a search). Feedback may include an optional rating, device identifier, app version, platform, language and location country code.

If you choose a language in the language menu, that choice is stored in a cookie for one year. Apart from this, the website uses no cookies, no persistent visitor identifiers and no third-party analytics services.

For every request to the website, our web server writes an access log entry: IP address, date and time, the address requested, the response code, size and duration, the address of the referring page, browser information (user agent), and the prefetch, DNT and GPC signals your browser sends. We use these logs to run the site, detect abuse and errors, and produce aggregate visit counts. The referring address and browser information are used to assign a page load to a source category (for example a search engine, the Google app, an AI assistant or a direct visit) and to tell whether the page was actually opened in a browser. While reports are prepared, IP addresses are processed in memory only (to verify search engine crawlers and to stop a single source from distorting the measurements) and are never written to a report. Raw logs are deleted within 15 days at the latest; only aggregate summaries without IP addresses, referring addresses or browser information are kept permanently. The one exception is the prayer-time box that other websites can embed: for the sites that show it, only the domain name (e.g. example.org, not the page address) is kept, together with the daily number of loads.

To measure where store clicks come from, the source category, the address of the first public page opened (without query parameters) and the start time are stored in this tab for up to 30 minutes; the source and page path are added to the log entry of the redirect to the store. Store links carry a campaign label for the language, page type and country or province; Google Play links also carry the source category. Search terms, full page addresses and URL queries are never passed to the stores. To measure page speed, on about half of visits, when the page is closed or moved to the background, a single request sends the loading times, server response time, interaction response time and visual layout shift, together with the page type, to our own server without cookies or identifiers. Like every request, it appears in the access log; the speed report contains only the page type, the device class (mobile or desktop) and the timings, in aggregate.

If your browser sends a DNT (Do Not Track) or GPC (Global Privacy Control) signal, no source is stored in the tab, no source category is added to store links or passed to Google Play, no speed measurement is sent, and the referring address in the access log is not assigned to any source category; your page load counts only towards aggregate totals. The referring address is also left unclassified whenever a log entry does not show this preference. The access log itself is kept for everyone for security and operation and is deleted on the same schedule; the campaign label, which says nothing about you (language, page type, country or province), stays on store links. Reports are aggregate counts, not unique visitor or installation counts.

Please avoid including children’s personal information in public posts or support messages. Contact us if you believe information about a child needs to be removed.

Write to info@ezanim.app to access your data or ask for it to be corrected or deleted. You can delete your account immediately in the app under Profile › Security › Delete Account; the steps and the list of data deleted or kept are on our Delete Your Account and Data page.

Your account data is deleted immediately when you delete your account. Server logs kept for security and troubleshooting (IP address and request details) are deleted within 30 days. Without an account, data linked to your device identifier is kept until you ask for its deletion. Support emails and feedback copies are not deleted automatically; write to info@ezanim.app about them. The website's access logs are deleted within 15 days at the latest; see the website section above for details.

All connections between the app, our server and the services we use are encrypted with HTTPS. Your password is stored in irreversible (hashed) form.

This page may be updated as features and data practices change. The date above identifies the current text.

For questions or requests regarding our privacy policy, you can reach us at: info@ezanim.app