Privacy

OnSalah is the app and this website. We decide how your data is used, which makes us its controller under UK data protection law (the UK GDPR and the Data Protection Act 2018).

You can use the app without an account. Then everything stays on your phone, and only if you agree to it at the start: without that, nothing personal is kept once the app closes.

Some things never leave your phone, even with an account: the name you give the app, whether you said brother or sister, and cycle mode with its dates.

To keep your progress across phones you can sign in with Apple, with Google, or with a code sent to your email. We keep the email address the sign-in gives us (with Apple this can be a private relay address) and an ID for your sign-in. Google also passes on your name and profile picture, which are stored with your sign-in but not used. With Apple we also keep a sign-in token, encrypted, so that deleting your account signs you out on Apple's side too.

Your salah log (on time, late, missed or exempt), your starting point from onboarding, the struggles you picked, your worship tasks and your plans. Plan titles, notes and task names are encrypted in our database. We also keep your settings: your city or area, its country and whether you picked it or used your location, your time zone, your calculation method and Asr time, whether travel mode and automatic Ramadan mode are on, and which reminders are on.

We also note when you open the Fajr reminder (to learn which messages help) and when you last used the app (so we can remove accounts that are no longer used, below).

All of this is stored under a random number, not your email. The link between the two is kept apart, and only our own systems can use it.

Using a salah app shows that you're Muslim, which UK law treats as special category data and which needs your clear permission. Cycle mode does too: a salah marked exempt is kept in your log, and that can show when you had a period. So we only keep any of this after you agree to it at the start of the app, and you can take that back by deleting your account.

Your account email and your subscription are kept to provide the service you've asked for. A record of what you agreed to, and when, is kept so we can show it, as the law asks.

We may share totals across everyone who agreed, such as how much on-time Fajr improved in eight weeks. They're only ever worked out for groups of at least 50 people, and never show anything about one person.

Your location sets your salah times and the qibla. If you use your phone's location, it's asked for when you tap it, rounded to about 10 km before it's kept, and never stored exactly. You can pick a city instead.

Reminders are scheduled on your phone. We don't send them from a server, and we don't keep a notification token.

The full plan is bought through the App Store or Google Play, who handle your payment details; we never see them. RevenueCat, which manages subscriptions for us, tells us whether your plan is active, which plan it is and when it renews.

The app has no analytics or advertising trackers. If we add analytics, it will be off unless you turn it on, and it will never include your salah, plans, struggles, cycle mode or location.

A few companies run parts of the service for us, under contracts that only let them use your data to do so: Supabase (our database and sign-in), RevenueCat (subscription status), Apple and Google (sign-in and payments), our email provider (sign-in codes and account notices) and Netlify (this website). We never sell your data or share it for advertising.

Some of them may handle data outside the UK. When they do, it's protected the way UK law requires, for example by the UK's adequacy regulations or the contract clauses it approves.

Your data is kept while you have an account. Delete your account in the app (Privacy, then Delete my account) and your account and everything stored with it is deleted straight away, and your Apple sign-in is revoked. The App Store or Google Play, and RevenueCat, keep their own record of any purchase, as they need to for payments and refunds.

If an account isn't used for three years, we email to say it will be deleted, and delete it 30 days later unless you sign in.

You can ask for a copy of your data (Export my data in the app gives you it straight away), have it corrected or deleted, limit or object to how we use it, and take it elsewhere. You can withdraw your permission at any time by deleting your account.

If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office (ico.org.uk).

The app is for people aged 13 and over.

If you leave your email on this site, we store that address, the date you joined and the version of this notice you agreed to. We use it for one thing: to email you when the app launches, with your founding-member price. We don’t share it, we don’t add you to anything else, and we delete the whole list three months after that launch email goes out.

Reply to the launch email, or contact us from the address you signed up with, and we’ll delete it.

No ads, no advertising trackers and no data sold. We don’t ask for your location here: the city pages and calendar feeds are worked out for the city you pick. To show prices in your currency and your own country's cities first, the site reads which country your connection comes from (from our host, as part of the request), and keeps one small cookie with your country's name, worked out from your device's time zone. Nothing else is stored, and nothing about you is sent anywhere.

If this notice changes, the version below changes with it, and anything important is shown in the app before it applies.