Istiqamah
This Privacy Policy applies to the Istiqamah - Muslim Prayer Tracker mobile app and related services operated by Digital Surya Interaktif.
Last updated: August 18, 2026Digital Surya Interaktif is the service provider for the Application. References to the Application include the mobile app and related services used to operate prayer time, deed tracking, account, support, analytics, and reliability features.
The Application may process information you provide and information generated when you use the app. This can include your account email, display name, authentication status, mobile operating system, device and app diagnostics, pages or screens visited, time and date of use, time spent in the app, sync status, and device Internet Protocol address.
Istiqamah is local-first. Prayer logs, deed records, deed preferences, notification preferences, and related settings are stored on your device first. If you sign in, your private account sync data may be stored securely so it can be restored across your devices.
The Application may request approximate or device-derived location to calculate prayer times and show a location label. Location is used for prayer-time functionality and related app reliability. Background location is not part of the current app design. Exact coordinates are not used as analytics properties.
The Application or third-party SDKs may use SDKs, device identifiers, cookies, pixels, or similar technologies to support functionality, analytics, diagnostics, advertising, or service delivery. Where required by applicable law, the Service Provider will request consent before using non-essential tracking technologies.
The Application may use trusted service providers for sign-in, secure account sync, app reliability, analytics, prayer-time data, Google Play features, and optional advertising. These providers may process data according to their own policies.
RevenueCat is planned for future paid features or subscriptions. It is not treated as an active data processor until paid features are integrated and enabled in the Application.
Firebase Analytics and Crashlytics may receive coarse operational events and crash diagnostics. Credentials, tokens, exact coordinates, notification bodies, free-text notes, raw prayer history, sensitive worship payloads, and full dalil text are excluded from analytics.
The Application may include optional advertising features after launch, and ads can be disabled remotely. If paid features are introduced later, purchase and entitlement processing may use RevenueCat or app-store billing providers. Store disclosures and this policy will be updated when those features are enabled.
The Service Provider may disclose information as required by law, to protect rights and safety, to investigate fraud or abuse, to respond to government requests, or to trusted service providers that process information on behalf of the Service Provider and are expected to follow applicable confidentiality and data-protection obligations.
The Service Provider and third-party providers may process personal data in countries outside your country of residence. Where applicable law requires safeguards, the Service Provider will use legally recognized transfer mechanisms such as adequacy decisions, contractual safeguards, or consent where appropriate.
You may request access to, correction of, or deletion of your personal data, and you may withdraw consent where processing is based on consent. You can also deny location or notification permissions, sign out, uninstall the app, and request account deletion from the app settings when signed in.
If you are a California resident, you may have rights to know what personal information is collected, request deletion, opt out of sale or sharing where applicable, and not be discriminated against for exercising your rights. Istiqamah does not sell personal worship records.
User-provided account and sync data is retained while needed to provide the Application and for a reasonable period thereafter unless deletion is requested or longer retention is required by law. Automatically collected diagnostics may be retained for up to 24 months. Aggregated or anonymized data may be retained because it no longer identifies you. Account deletion requests are processed after identity verification, except where retention is required for legal compliance, security, audit, or abuse-prevention purposes.
The Application is not intended for children under 16 years of age, or a higher age where required by applicable law, without required parental or guardian consent. If the Service Provider learns that a child has provided personal data in violation of applicable law, the Service Provider will take steps to delete it.
The Service Provider uses reasonable physical, electronic, and procedural safeguards to protect information processed and maintained by the Application. If a data breach affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements.
This Privacy Policy is effective as of August 18, 2026. The Service Provider may update it from time to time and will post the updated version with an effective date. For privacy questions or requests, contact Digital Surya Interaktif at digitalsuryainteraktif@gmail.com.