Privacy Policy

How we handle your data

Sajda is built privacy-first. This page explains exactly what we process, why, and the choices you have.

Last updated 24 August 2026

1 Overview

Sajda is a free Islamic companion app offering prayer times, Qibla direction, the Holy Qur'an with audio recitation, dhikr, du'a, the Islamic calendar, Zakat tools, the 99 Names and an Arabic letters learning section. The app is available in 18 languages.

We follow a privacy-first, offline-first design. Most content ships inside the app or is read from local on-device storage, and sensitive features (location and the Qibla compass) run on the device without sending raw data to our servers.

In short: We do not sell your personal data. We don't run our own ad-tracking servers. Account, progress and purchase data are handled through trusted providers (Google Firebase, RevenueCat, Apple, Google). You can delete your account and data anytime from within the app.

2 Data We Process

The table below lists the categories of data the app may process, the purpose, and where it lives.

Data categoryExamplesPurposeStored where
Account identityEmail, display name, sign-in provider IDCreate and secure your account; sync across devicesFirebase Authentication (cloud)
App progress & contentFavorite ayahs, streaks, prayer logs, dhikr history, preferencesSave your progress and personalize the experienceOn-device + optional cloud sync
Approximate / precise locationGPS coordinates at the moment of calculationCompute prayer times & Qibla directionOn-device only — not sent to us
Purchase informationPurchase status, transaction IDs, pseudonymous app-user IDRemove ads and restore your purchaseRevenueCat + Apple / Google billing
Push tokenPush notification registration tokenPrayer-time & reminder notifications you opt intoFirebase Cloud Messaging
Advertising identifiersDevice ad ID (only with consent)Show ads unless Remove Ads was purchasedGoogle AdMob

We do not collect contacts, photos, health data, browsing history, or biometric identifiers, and we don't run first-party analytics that profile you.

3 Device Permissions

Every permission is requested only when a feature needs it, with a clear in-context explanation. The app stays usable if a permission is declined — the related feature is simply limited.

iOS

PermissionUsed forRequired?
Location (When In Use)Prayer times & Qibla directionOptional
MicrophoneNot used. Declared on iOS only because an audio-playback dependency links the system audio APIs; never requested.Never requested
Motion & OrientationQibla compass sensorOptional
App Tracking (ATT)Optional consent for personalized ads — declining still shows non-personalized adsOptional

Android

PermissionUsed for
Location (fine / coarse)Prayer times & Qibla direction
NotificationsPrayer-time & reminder notifications
Exact alarmsPrecise prayer-time alarms at the correct minute
Run after restartReschedule prayer reminders after the device restarts
Foreground service (media playback)Background Qur'an audio playback & lock-screen controls
Wake lock & vibrationDeliver alarms reliably and provide haptic feedback
Internet & network stateStream audio, sync, and reach online services

4 Third-Party Services

Sajda relies on the following processors. Each operates under its own privacy policy; we share only the minimum data needed for the stated function.

ServiceProvided byFunctionData shared
Firebase AuthenticationGoogleSign-in (email, Google, Apple)Email, name, provider ID
Cloud FirestoreGoogleCross-device sync of your contentApp progress data
Firebase Cloud MessagingGooglePush notificationsDevice push token
RevenueCatRevenueCat, Inc.Purchase managementAnonymous app-user ID, purchase status
App Store / Play BillingApple / GoogleProcess paymentsHandled entirely by the platform
Google AdMobGoogleAds, unless Remove Ads was purchasedAd identifiers (with consent)
EveryAyah CDNEveryAyahStreaming Qur'an audio recitationStandard network request (no account data)
Sign in with Apple is offered on iOS alongside other sign-in options. Apple's private-relay email is fully supported.

5 Location & Sensors

Location is used only while you use the app ("when in use") to calculate accurate prayer times for your area and to orient the Qibla compass toward Makkah. Coordinates are processed on your device and are not sent to, stored on, or shared with our servers. You may instead set your city manually and never grant location access.

The Qibla compass reads the device's motion/orientation sensor on-device only; no sensor data leaves the phone.

6 Microphone

Sajda does not use your microphone. The app does not record audio, does not run speech recognition, and never uploads audio anywhere. There is no voice or recitation-grading feature.

  • On Android, the app does not declare the RECORD_AUDIO permission, so it cannot access the microphone at all.
  • On iOS, a microphone usage description remains in the app because an audio-playback dependency links the system audio APIs. The permission is never requested and no recording takes place.

Qur'an recitation you listen to is audio streamed from the EveryAyah CDN. It is playback only and does not involve your microphone.

7 Purchases & Advertising

Remove Ads

Sajda has one optional in-app purchase, Remove Ads. It is a one-time, non-consumable purchase — there is no subscription, no auto-renewal and no free trial. Payment is processed by the Apple App Store or Google Play and the entitlement is managed through RevenueCat. We never see or store your card details.

To keep your purchase working across your devices, RevenueCat receives a pseudonymous identifier for your account and the store's purchase receipt.

Advertising

Unless you have purchased Remove Ads, you may see ads served by Google AdMob. To deliver ads, Google and its advertising partners may use device identifiers (such as the advertising ID) and similar technologies. You can learn how Google uses information from apps that use its services at policies.google.com/technologies/partner-sites.

On iOS, ads are non-personalized unless you grant App Tracking Transparency (ATT) consent; you can change this anytime in Settings → Privacy & Security → Tracking. On Android, you can reset or delete your advertising ID in your device settings. Ads are never shown while you are reading the Qur'an or during audio playback.

8 Children's Privacy

Sajda contains family-friendly educational content (such as an Arabic-letters learning section) but is a general-audience app and is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children, and the app does not include child profiles or child-specific accounts.

If you believe a child has provided personal information, contact us at hello@excfy.com and we will delete it.

9 Your Rights

Depending on your region (including the EU/EEA under GDPR and California under CCPA/CPRA), you may have the right to:

Access

Request a copy of the personal data linked to your account.

Correction

Update inaccurate account information directly in the app.

Deletion

Delete your account and associated data at any time.

Withdraw consent

Revoke location, microphone, notifications or ad tracking in device settings.

We do not sell personal information and do not use it for cross-context behavioral advertising beyond the consent-based AdMob behavior described above.

10 Account & Data Deletion

In-app path: Settings → Account → Delete account. This permanently removes your authentication record and synced data from our systems.

You can also request deletion by emailing hello@excfy.com from your account email. Local data is removed when you uninstall the app; cloud data is removed within 30 days of a deletion request.

11 Data Retention & Security

  • Retention: Account and synced data are kept while your account is active and deleted on request. On-device data is removed when you uninstall the app.
  • Encryption in transit: All network communication uses HTTPS/TLS.
  • Access control: Cloud data is protected by security rules so a user can only access their own records.
  • Minimization: We request only the data needed for each feature and avoid collecting sensitive identifiers.

12 Changes & Contact

We may update this policy as the app evolves. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, an in-app notice. Continued use after an update constitutes acceptance of the revised policy.

Questions, requests, or privacy concerns: hello@excfy.com

↑ Back to top