Last updated: August 5, 2026
This Privacy Policy explains how Hidayah ("we," "us," or "our") collects, uses, stores, and discloses information when you use the Hidayah iOS application. It does not replace the privacy notices of Apple or the third-party providers identified below.
Information we collect
Hidayah collects or processes the following categories of information, depending on the features you use:
- Anonymous account and profile data: Hidayah creates an anonymous account identifier through Supabase. If you complete onboarding, we may store the name, gender, selected school of jurisprudence, usage purposes, and worship-goal settings that you provide.
- Chat content: the messages, questions, and conversation context you send to Hidayah AI, together with the AI responses returned to you.
- On-device activity data: chat history, daily worship progress, prayer completions, Quran-reading progress, dhikr counts, streaks, custom dhikr text, and app preferences are stored on your device.
- Location data: if you grant location permission, the app accesses precise location coordinates, compass heading, and a reverse-geocoded place name to calculate prayer times and qibla direction. Coordinates and prayer-time details are retained locally, including in the app's widget storage.
- Notification preferences: whether notifications are allowed and settings used to schedule prayer, daily, and streak reminders locally on your device.
- Usage and device information: Firebase Analytics receives app interaction data, such as screen views, onboarding progress, permission choices, chat-message and response lengths, feature use, paywall and purchase events, install date, app/device dimensions, locale, and a persistent app user identifier. Hidayah does not intentionally include your full chat text in Firebase Analytics events.
- Subscription and attribution data: RevenueCat processes your app user identifier, subscription entitlement and product status, and purchase-related information. For attribution, it may receive device identifiers, IP address, an Apple Search Ads attribution token, and Meta's anonymous identifier. The IDFA is collected only when you authorize tracking through Apple's App Tracking Transparency prompt.
- Support communications: if you contact us, we process the information you include in your email, such as your email address, device information, and the details of your request.
How we use information
- Operate the app, create and secure anonymous sessions, enforce chat limits, and provide the features you request.
- Generate AI responses and, where selected, tailor them to your chosen school of jurisprudence and app language.
- Calculate prayer times and qibla direction, save relevant information for widgets, and schedule local reminders.
- Provide subscriptions, restore purchases, detect subscription status, and prevent misuse of paid features.
- Measure app performance, understand aggregate feature use, diagnose errors, and improve the app.
- Measure advertising attribution and subscription conversions where you permit tracking or where platform-provided attribution is available.
- Respond to support requests, comply with law, and protect the app, our users, and our rights.
When information is shared
We use service providers to operate Hidayah. They process information under their own terms and privacy notices:
- Supabase: anonymous authentication, profile data, server-side chat limits, and subscription-entitlement records.
- OpenAI and Cloudflare: chat messages and conversation context are sent through our server-side chat service to generate AI responses.
- AlAdhan: latitude and longitude are sent to obtain prayer-time calculations.
- Google Firebase: analytics and app/device interaction data described above.
- RevenueCat and Apple: subscription management, purchase restoration, entitlement verification, and Apple Search Ads attribution.
- Meta: app-install, session, onboarding, paywall, trial, purchase, renewal, and cancellation events for advertising measurement. Meta receives its anonymous identifier and, only with your ATT authorization, may receive the IDFA for advertising attribution.
We may also disclose information when required by law or when reasonably necessary to protect rights, safety, security, or prevent fraud. We do not sell personal information for money. Advertising and attribution disclosures described above may be treated as "sharing" under some privacy laws.
Location, notifications, and tracking choices
Location, notifications, and App Tracking Transparency are optional system permissions. You can decline or later change them in iOS Settings. Without location permission, prayer times, qibla direction, and location-based reminders may not work correctly. Without notification permission, the app cannot display reminders. Declining tracking limits the use of the IDFA; it does not stop essential subscription processing, analytics, or all platform attribution.
Data retention and deletion
Chat history, worship data, custom dhikr, preferences, and saved location data remain on your device until you delete the relevant content in the app or remove the app, subject to your iOS backup settings. Signing out does not by itself erase on-device data.
We retain server-side account, profile, entitlement, and chat-usage records only for as long as needed to operate the service, meet legal obligations, resolve disputes, and enforce our agreements. To request access, correction, or deletion of server-side data associated with your anonymous account, email [email protected]. We may need information to verify the request. Provider systems may retain data under their own retention practices.
International processing
Our service providers may process information in countries other than the country where you live. Those countries may have data-protection laws different from your local laws.
Security
We use reasonable technical and organizational measures designed to protect information. No method of electronic storage or transmission is completely secure, so we cannot guarantee absolute security.
Changes to this policy
We may update this policy when the app or our processing practices change. The updated version will be posted on this page with a revised "Last updated" date.
Contact
For privacy questions or requests, contact [email protected].