Privacy policy

In short

Rawaq is built to work on your phone. Your prayers, qada, habits, tasks and adhkar are stored on the device itself, and nobody sees them but you.

No ads or ad tracking, and we never sell data. We only collect anonymous usage statistics (you can turn them off in Settings).

What data we handle and why

On your phone only: prayers you mark, qada, habits, tasks, adhkar progress, settings and your name — so the app works and shows your stats. Uninstalling the app deletes them.

Approximate (not precise) location: used on the phone only to calculate prayer times and find the nearest city; never sent to us or to any server.

Account (optional): your email, name and account ID from Google, Facebook or the email link, so you can sign in and tie your backup to you.

Backup (optional): a copy of the on-phone data above (including your saved city and its coordinates), so it comes back if you change phones.

Global leaderboard (optional, off by default): your nickname and aggregate numbers (streak days, habit completions, and on-time prayer counts only if you turn on prayer ranking yourself) — visible to signed-in users.

Profile picture: if you pick one of the app’s built-in characters, only its name (e.g. “crescent”) is shared with the leaderboard and your family circle when you use them. A personal photo never leaves your phone and is not included in backups.

Family circle (optional): your nickname and aggregate achievement numbers (streak, habits, adhkar, tasks, badges), visible only to the family members you invite or join — never any prayer you marked. Cheers sent between members are stored until they are read.

Contact form: the message you write, its type, the app language and version, and your email and name if you choose to add them. If you are not signed in, an anonymous identifier (Firebase Anonymous Auth) is created to protect the form from spam, with a small record of how many messages were sent and when (rate limit).

On your phone only, never sent anywhere: your personal photo, the sound files you pick for the adhan and reminders (copied inside the app, and for sunnah reminders also into your phone’s notification sounds, folder Notifications/Rawaq, so the system can play them; backups keep only their names), everything in the Quran reader (bookmarks, notes, wird) and the Qibla (calculated from your saved city).

Sharing

We never sell or share your data for advertising or marketing.

If you use the account, backup or leaderboard, that data is stored with Google Firebase (Authentication and Cloud Firestore), which processes it only on our behalf as a service provider.

If you sign in with Facebook, login happens through Meta and we receive only your name, email (if available) and account ID. The app does not use Facebook advertising or app-event tracking.

When you download or preview an adhan, your phone fetches it from the site hosting the recording (such as Wikimedia Commons, Freesound or the Internet Archive); like any download, those sites see your IP address.

Retention

On-phone data: until you delete it or uninstall the app.

Account, backups and leaderboard data: as long as your account exists. We keep only the latest backup and the 3 before it. Deleting your account deletes all of it.

Security

All traffic to Google Firebase is encrypted in transit (HTTPS/TLS), and data stored by Google is encrypted at rest. Security rules only let your own account read or write your backup.

Notifications

All notifications are prepared and shown on your phone. None are pushed from a server.

Account protection

When you sign in, we store a hashed identifier of your phone with your account ID, used only to limit accounts to two per phone. The raw device identifier never leaves the phone, and it is removed when you delete your account.

Usage analytics and crash reports

We use Google Analytics for Firebase to understand how the app is used overall: screens opened, how often each feature is used (such as marking a prayer or opening adhkar or the Quran — no details), the app version, device model and OS, and session length. This is tied to an anonymous app identifier on your phone (Firebase app instance ID), not to your account.

And Firebase Crashlytics for crash reports: technical crash details, the app version and device.

We do not collect the Advertising ID, there is no ad personalisation, and we never send your name, email, account ID, prayer times, any Quran or adhkar text, your family’s data or your city.

You can turn this off at any time: Settings → “Share usage data”. Google keeps this data for a limited time (event-level data 2 months by default, crash reports 90 days).

Deleting your data

In the app: Settings → Account → “Delete account” deletes your account, your backups and your leaderboard entries.

Or request deletion by email — see the “Delete account” page: https://rawaq-011.web.app/en/delete-account

Data on the phone is deleted if you choose “Also delete my data on this phone” when signing out, or when you uninstall the app.

Children

The app is not directed at children under 13, and we don’t knowingly collect their data.

Changes

If we change this policy we’ll update the date above, and tell you in the app if the change matters.

Contact

Questions about your privacy: officialrawaq@gmail.com