Privacy Policy

1. Who we are, and what this covers

This policy applies to the Daily Muslim mobile app on iOS and Android (app identifier io.mydeen.app) and to the website at dailymuslim.org, including the public feedback board and roadmap. Together we call these “the Service”. In this policy, “we” and “us” mean Daily Muslim, the team that publishes them.

It replaces the earlier privacy policy published at pi-sys.com/deen/privacy. That policy described an older version of the app and is no longer accurate — the app now offers optional sign-in, a public feedback board, and cloud bookmark sync, none of which existed then.

By installing or using Daily Muslim you agree to what is described here. If you do not agree, please stop using the app and uninstall it.

2. Using Daily Muslim without an account

Most of the app needs no account and no personal information at all. Reading the Qur'an and its translations, prayer times, the Qibla compass, duas, hadith, adhkar, the dhikr counter, the Amal tracker, the Hijri calendar, downloaded books — all of it works signed out, and much of it works with no network connection.

When you are signed out, the app still contacts our servers to download content you ask for (translations, recitations, books) and to show the public feedback board and roadmap. Those requests carry no name, email, or account identifier. As with any web request, our servers see the IP address it came from; we use that only for rate limiting and abuse prevention, and we do not build a profile from it.

3. If you create an account

Signing in is optional and exists for exactly two features: posting, voting, and commenting on the feedback board, and syncing your bookmarks between your own devices. You can sign in with Google or with Sign in with Apple. We never see or store your Google or Apple password.

When you sign in, the provider gives us, and we store:

• a stable identifier for your account with that provider;
• your email address, and whether the provider says it is verified;
• your display name and profile picture URL, when the provider supplies them;
• the language preference the provider reports.

If you use Sign in with Apple and choose to hide your email, Apple gives us a relay address instead of your real one, and that is all we ever have.

We also keep a record of each signed-in session: a hashed session token, whether it came from iOS, Android, or the web, and when it was created and last used. Hashing means that even we cannot read the token back out of our database.

We do not ask for and do not store your phone number, postal address, date of birth, payment details, or any government identifier.

4. What you post publicly

The feedback board at dailymuslim.org/feedback and the roadmap are public pages. Anything you post there — the title and text of your suggestion or bug report, your comments, and the fact that you voted — is visible to anyone on the internet and may be indexed by search engines. Your display name and profile picture from your sign-in provider appear beside your posts.

Please do not put your phone number, home address, email address, or anything else private into a post. When you send feedback from inside the app, we attach the app version and platform (iOS or Android) so a bug report can be tied to a build without asking you to look it up. That is stored with the item but is not shown publicly.

The app also includes a Community feed, which is served today by our earlier backend at pi-sys.com. Posts, comments, and reactions there are public in the same way. The Community feed identifies you only by a nickname you choose, which is stored on your device; the list of authors you have blocked and content you have reported also stays on your device and is never uploaded.

5. What stays on your device

A large part of what the app remembers never leaves your phone. We do not receive any of the following unless you turn on bookmark sync, which is covered below:

• your reading position, last-read surah, and reading settings;
• dhikr and tasbih counts;
• Amal tracker entries and your prayer log;
• downloaded Qur'an translations, recitations, books, and dua databases;
• your chosen calculation method, madhab, theme, fonts, and notification settings;
• your Community nickname, blocked authors, and reported content;
• your last known coordinates, cached so prayer times work offline.

Uninstalling the app removes all of it. On iOS and Android, whether a copy ends up in your own device backup (iCloud or Google) is controlled by your operating system settings, not by us.

6. Bookmark sync

If you are signed in, the app can sync your Qur'an and dua bookmarks so they appear on your other devices. We store the bookmark records themselves — which ayah or dua, which folder, the folder name, icon, and colour you chose, and when each was last changed. Deleted bookmarks are kept as a small “deleted” marker so that removing one on your phone also removes it on your tablet rather than having it reappear.

Your bookmarks are private to your account. They are not shown to other users, not used for recommendations, and not analysed.

7. Location — how it is used, and where it goes

Daily Muslim asks for location permission so it can calculate prayer times for where you are, point the Qibla compass, and find nearby mosques. Location is optional: you can refuse the permission and set your city by hand instead.

Your coordinates are never sent to, or stored on, Daily Muslim's servers. Prayer times and the Qibla direction are computed entirely on your phone. There are three cases where location touches something outside the app, and we want to be exact about them:

• Turning coordinates into a city name. To show “Dhaka, Bangladesh” instead of a pair of numbers, the app asks your device's own operating-system geocoder. That is Apple or Google software on your phone, governed by their privacy policies, not ours.
• The mosque finder. When you search for nearby mosques, the app sends the coordinates of the area you are looking at to OpenStreetMap's public Nominatim and Overpass services to fetch the mosques there. This happens only when you open that feature and search.
• The fallback when GPS is unavailable. If location permission is refused or a fix cannot be obtained, the app asks ipapi.co for an approximate city derived from your network IP address, so prayer times are roughly right rather than wrong. Like any web request, this reveals your IP address to that service.

You can withdraw location permission at any time in your device settings. The app keeps working; it falls back to your last known or manually chosen location.

8. Usage statistics

To understand whether the app is actually being used and on which devices it needs testing, the app can send a small daily report to our earlier backend at pi-sys.com. The report contains only:

• a random identifier generated when you installed the app — not your advertising ID, not a hardware ID, and not linked to your account;
• when the session started and how many seconds it lasted;
• the app version;
• the platform (iOS or Android) and the device model name, such as “iPhone15,2”.

It contains nothing about what you read, searched for, bookmarked, or where you were. You can turn it off completely in Settings → Privacy → Share anonymous usage statistics; the rest of the app is unaffected.

We use no third-party analytics or attribution SDK — no Firebase Analytics, no Google Analytics in the app, no Mixpanel, Amplitude, Adjust, AppsFlyer, or Meta SDK.

9. Notifications and alarms

Prayer reminders, adhan alerts, Jumu'ah reminders, and daily reflections are scheduled on your device by the operating system. There is no push server: we do not hold a push token for you and cannot send you a message. Turning notifications off in Settings, or in your device settings, stops them entirely.

10. Services the app contacts

These are every outside service the app talks to, and why. Each has its own privacy policy, which governs what it does with the request.

The live-stream screens are the one place where a third party can set cookies through the app, because they open a real web page inside a browser view. If you would rather not, simply do not open those screens.

11. How we use information

• To run the features you asked for — showing your feedback post publicly, keeping your bookmarks in step across your devices, keeping you signed in.
• To answer you — replying to your feedback or a support email.
• To fix and improve the app — knowing which app version and device a bug report came from, and roughly how much the app is used.
• To keep the Service safe — rate limiting, blocking spam and abuse.
• To meet legal obligations where the law requires it.

We do not use your information for advertising, behavioural profiling, scoring, training machine-learning models, or any purpose not written in this policy.

12. When we share information

We do not sell, rent, or trade your personal information. We share it only here:

• Publicly, because you chose to post — feedback and community posts, as described in section 4.
• With our infrastructure providers — Cloudflare hosts the website, the database, and the content files, and processes data on our instructions only.
• With the sign-in providers you choose — Google or Apple, for the sign-in itself.
• Where the law requires it — in response to a valid legal order. We will tell you unless we are legally prohibited from doing so.
• To prevent serious harm — the minimum necessary where there is a real and immediate risk to someone's safety.

13. How long we keep things

14. Security

• Every connection between the app, the website, and our servers uses HTTPS with TLS.
• We never store a password, because we never issue one — sign-in is handled by Google and Apple.
• Session tokens are stored hashed, so a copy of our database does not let anyone sign in as you.
• Write endpoints are rate limited, and every submission is validated on the server.
• Access to the database is restricted to the application and to the people who operate it.

No service on the internet can promise perfect security. We use reasonable, current practices, and we will tell affected users promptly if something goes wrong.

15. Your choices and your rights

Wherever you live, you can:

• Use the app without an account, and refuse location and notification permissions, at any time.
• Turn off usage statistics in Settings.
• Ask what we hold about you, and ask for a copy.
• Correct anything that is wrong, including editing or removing something you posted.
• Delete your account and your data — see the next section.
• Object to a use you disagree with, or ask us to restrict it.
• Complain to your local data protection authority if your country has one and you are not satisfied with our answer.

Email dailymuslim.org@gmail.com with the subject “Privacy request”. We reply within 30 days.

16. Deleting your account and your data

Open the app, go to My Account, and choose Delete account. This is immediate and permanent. It erases your display name, your email address, your profile picture, your sessions, your synced bookmarks, and your votes.

One thing is kept: an emptied record holding the anonymous identifier your sign-in provider gave us, so that the deletion is durable rather than something a later sign-in quietly undoes. It contains no name, no email address, and no picture.

Feedback posts and comments you made are kept, because other people have replied to and voted on them, but they lose their attribution — your name and picture are removed and the post shows as an anonymous user. If you want the text of a post removed as well, email us and say which one, and we will delete it.

For Community posts on pi-sys.com, which have no account attached, email us with the text of the post and roughly when you made it and we will remove it. We confirm deletion requests within 14 days.

17. Children

Daily Muslim is suitable for all ages and contains no advertising, no in-app purchases, and no age-restricted material. We do not knowingly collect personal information from children under 13, and posting anywhere in the app requires signing in with a Google or Apple account, which has its own age rules.

Because feedback and community posts are public, we ask parents to supervise younger children using those parts of the app. If you believe a child has posted personal information, email us and we will remove it promptly.

18. Changes to this policy

We will update this page when the app changes or the law requires it. The “last updated” date at the top always reflects the current version, and for anything significant we will say so in the app as well. Continuing to use Daily Muslim after a change means you accept the updated policy.