Introduction
Welcome to Sutrah. We are committed to protecting your privacy and handling your personal information with care and transparency. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").
By using Sutrah, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
1. Information We Collect
1.1 Information You Provide Directly
- Account Information: When you create an account or register a mosque, we collect your email address, phone number, and mosque-related information (name, address, prayer times).
- Contact Information: When you contact us through our feedback forms, we collect your email address, subject, message content, and category of inquiry.
- Mosque Profile Data: If you register or manage a mosque profile, we collect the mosque name, address, prayer times, facilities information, and optional images.
- User Preferences: Prayer calculation methods, notification settings, reminder preferences, and Sunnah reminder settings.
1.2 Information Collected Automatically
- Location Data: With your permission, we collect precise geolocation data to:
- Calculate accurate prayer times for your location
- Find nearby mosques
- Determine Qibla direction
- Provide location-based services
You can disable location access through your device settings, but this will limit certain features. - Device Motion & Orientation: With your permission, we access device orientation sensors to provide compass functionality for Qibla direction.
- Usage Data: We collect information about how you interact with the Service, including prayer tracking data, pages viewed, and features used. This data is stored locally on your device.
- Device Information: We collect basic device information such as device type, operating system, and app version for diagnostic and optimization purposes.
1.3 Information from Third-Party Services
- Reverse Geocoding: We use OpenStreetMap's Nominatim API to convert GPS coordinates into human-readable location names (city, town).
- Quran Content: We use alquran.cloud API to provide Quran text, translations, and tafsir. This service may log API requests.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To provide accurate prayer times, mosque information, Qibla direction, and other core features of the Service.
- Personalization: To customize your experience based on your location, preferences, and settings.
- Notifications: To send local notifications for prayer times, reminders, and Sunnah practices based on your preferences.
- Account Management: To create and manage user accounts, authenticate users, and manage mosque profiles.
- Communication: To respond to your inquiries, feedback, and support requests.
- Improvement: To analyze usage patterns and improve the functionality, performance, and user experience of the Service.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
3. How We Store and Secure Your Information
3.1 Data Storage
- Cloud Storage: User accounts, mosque data, and contact messages are stored securely on Supabase (a third-party cloud database provider) with encryption in transit and at rest.
- Local Storage: Prayer settings, preferences, Quran bookmarks, and usage data are stored locally on your device and are not transmitted to our servers unless you create an account.
- Image Storage: Mosque images are stored in Supabase Cloud Storage with public access URLs.
3.2 Security Measures
We implement industry-standard security measures to protect your personal information, including:
- Encryption of data in transit using HTTPS/TLS
- Encryption of sensitive data at rest
- Secure authentication using industry-standard protocols
- Row-level security policies on database access
- Regular security audits and updates
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
4.1 Service Providers
- Supabase: Our backend infrastructure provider that stores user data, mosque information, and handles authentication.
- OpenStreetMap Nominatim: For reverse geocoding services to convert coordinates to location names.
- alquran.cloud: For Quran text, translations, and tafsir content.
4.2 Public Information
Mosque profiles marked as "completed" are publicly visible to all users of the Service, including mosque name, location, prayer times, facilities, and uploaded images.
4.3 Legal Requirements
We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to:
- Comply with legal obligations
- Protect our rights, property, or safety
- Protect the rights, property, or safety of our users or the public
- Prevent fraud or abuse of the Service
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice within the Service of any such change in ownership.
5. Your Rights and Choices
5.1 Access and Control
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Update or correct inaccurate personal information through your account settings or by contacting us.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Export: Request a copy of your data in a portable format.
5.2 Location Permissions
You can control location access through your device settings. Disabling location services will prevent accurate prayer times, nearby mosque discovery, and Qibla direction features.
5.3 Notification Preferences
You can manage notification preferences within the app's Settings page, including:
- Prayer time notifications (per prayer)
- Adhan sound settings
- Reminder times (5, 15, or 30 minutes before prayer)
- Sunnah reminders
5.4 Account Deletion
To delete your account, please contact us at the email address provided below. Account deletion will permanently remove your personal information from our servers, subject to legal retention requirements.
6. Children's Privacy
The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately, and we will take steps to delete such information.
7. Data Retention
We retain your personal information for as long as necessary to:
- Provide the Service to you
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law or for legitimate business purposes.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your country. By using the Service, you consent to the transfer of your information to the United Kingdom and other countries where our service providers operate.
We ensure appropriate safeguards are in place to protect your personal information in accordance with this Privacy Policy and applicable data protection laws.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:
- Posting the updated Privacy Policy within the app
- Updating the "Effective Date" at the top of this Privacy Policy
- Sending you a notification via email or in-app notification for significant changes
Your continued use of the Service after the effective date of the updated Privacy Policy constitutes acceptance of the changes.
10. Third-Party Links and Services
The Service may contain links to third-party websites, services, or content that are not owned or controlled by Sutrah. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party services you access.
11. Your UK Data Protection Rights
If you are a resident of the United Kingdom, you have additional rights under UK data protection law, including:
- Right to be informed: About how your data is being used (this Privacy Policy).
- Right of access: Request a copy of your personal data.
- Right to rectification: Correct inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data in certain circumstances.
- Right to restrict processing: Limit how we use your data in certain circumstances.
- Right to data portability: Receive your data in a structured, commonly used format.
- Right to object: Object to processing of your personal data in certain circumstances.
- Rights related to automated decision-making: We do not use automated decision-making or profiling.
To exercise these rights, please contact us using the details provided below.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
We will respond to your inquiry within a reasonable timeframe, typically within 30 days.
13. Acknowledgment
By using the Sutrah Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
