Principles, privacy and terms

They follow the aims of the Sharia (maqāṣid): protecting faith, life, mind, family and wealth. Your data is an amāna, a trust.

1. Worship stays between you and Allah. Prayers, Qur'an, fasting and giving are never scored, ranked, compared or shown to anyone, and never sent to a cloud AI.
2. Your data is yours. It is kept to serve you, not to profile you. You can download all of it at any time.
3. No ads, no selling. Your data is never sold, rented, traded or used for advertising.
4. No dark patterns. No streaks, guilt, fake urgency or pressure. Reminders are opt-in, gentle and easy to turn off.
5. Halal and honest. No features built on interest, gambling or deception. Tools such as the zakat calculator help you; they do not replace a scholar.
6. AI is your choice. Nothing goes to an AI unless you connect it and tick what it may see. You can revoke it in one click.
7. Open to scrutiny. The code is meant to be open source, so anyone can check that these words match what it does.

To work (your daily plan, reminders, Telegram, AI connections), the app has to read your data on the server. That means whoever runs this instance can technically read it too. True end-to-end encryption would switch those features off, so we rely on a firm commitment instead:

• We do not read your entries, worship records or amounts.
• We look at your data only to fix a problem you report, only with your permission, and only what the fix needs.
• Database keys are kept in a password manager, rotated after any suspected leak, and never shared.
• If this ever changes, this page changes first and you are told before it applies.

• Database (Supabase): your fronts, tasks, journal, decisions, prayers, Qur'an and hifz, fasting, giving and settings. Every row is tied to your account and the database refuses other accounts.
• App hosting (Vercel): runs the app; keeps short technical logs (time, page, errors) to keep it working.
• Google (only if you connect it): sign-in, and on your own instance Calendar and Gmail. Drive only sees the files you pick (their name and link, never their content). The Google token is never exported or shown.
• Telegram (only if you use the bot): the messages you send it and its replies pass through Telegram.
• AI apps (only what you tick): read through the key you create; their keys are stored only as fingerprints.
• Email (only for reminders you turn on, suggestions you send, and sign-in codes): sent through an email service (Resend) to your inbox. A reminder can name prayers not logged yet or tasks that are due, so untick any topic you prefer to keep out of email. A suggestion carries only what you type, plus your sign-in email.
• Your device: appearance choices, your background photo and whether amounts are shown stay in your browser.

Connect only services you trust. Whatever you connect receives that data under its own terms, which we do not control.

• AI apps (Claude, ChatGPT and others) see what the key allows and may keep it according to their own policies. Prefer read-only keys, and use a model on your own computer for anything private.
• Google tools give TOP access to your calendar and mail on your own instance; Google itself holds that data under its terms. You can disconnect in your Google account at any time.
• Telegram chats are not end-to-end encrypted with bots. Avoid sending anything there you would not want stored by Telegram.

• Not a fatwa. The zakat calculator, fasting hints and Hijri dates are aids; ask a scholar you trust about your own situation.
• Not financial, medical or legal advice.
• Prayer times are calculated estimates; follow your local mosque.
• Hijri dates follow the Umm al-Qura calendar and may differ from the local moon sighting; you can adjust them.

• Download all your data: Settings → Backup.
• Correct anything: every entry can be edited in the app.
• Delete your account and all its data: ask the operator; it is done within 30 days. A delete button is planned.
• Withdraw any connection: revoke AI keys in Settings, disconnect Google in your Google account, stop the bot in Telegram.