Last Updated: July 29th, 2026
Salah ("the App") respects your privacy. This Privacy Policy explains how information is used when you use the App.
Salah does not require account creation. We never collect your name, password, or email address. The only information ever sent off your device is the optional, anonymous analytics described below — and only after you turn it on.
The App may request access to your device's location to calculate prayer times and provide Qibla direction. Location data is used on your device for these features and is not sold — and it is never included in analytics, even when analytics are turned on.
The App may request permission to send prayer reminders and related notifications. You can disable notifications at any time through your device settings.
Prayer records, streaks, goals, statistics, settings, and related data are stored locally on your device. If you turn on analytics, only aggregate counts from a completed check-in (for example, how many prayers were logged) may be included — never which specific prayer, never your prayer times, and never your individual prayer history.
Your selected language, calculation method, reminder settings, and other preferences are stored locally on your device to personalize your experience.
Analytics are off by default. Nothing is sent unless you turn them on — in onboarding, or later in Settings → Privacy — and turning them off again stops everything immediately.
When on, we use PostHog (servers in the United States) to understand how the App is used. There is no account, no name, no email, and no login involved: your device generates a random identifier that is not linked to you.
What may be collected: which screens are opened, which features are used, aggregate check-in counts (see Prayer Data above), purchase and subscription events, app version, device model, operating system version, language, and app settings such as your calculation method.
What is never collected, even with analytics on: your location or coordinates, your city, your prayer times, your individual prayer records, which specific duas you read, the contents of any backup file, or your IP address — IP-based location lookup is disabled, and IP addresses are discarded on receipt rather than stored.
Turning analytics off deletes the random identifier on your device. If you turn analytics back on later, a new, unrelated identifier is generated — it is never reconnected to anything collected before.
Covered by the same analytics toggle above. When on, a crash or error report may include the error message, a technical stack trace, app version, and device model — never the content of your prayers, duas, or backups.
The App may show different versions of a screen (for example, the subscription screen) to different anonymous users, to learn which is clearer. Assignment is random and tied only to the anonymous identifier described above — never to anything that identifies you personally.
When analytics are on, that data is processed on servers in the United States. If you are in the EEA, UK, or another region with its own data protection law, this is a transfer of data outside your region. You can avoid this entirely by leaving analytics off — the App is fully functional either way.
Analytics events, when collected, are retained for a limited period on our analytics provider's systems and then deleted. Data stored on your device (prayer records, settings, backups) is retained until you delete it or uninstall the App. Device integrity signals (see Premium Verification below) are automatically deleted after 30 days; your anonymous subscription identifier and device key are retained for as long as you use premium features, so your subscription can continue to be verified.
The App offers premium features through subscriptions and one-time purchases.
Payments are processed through Google Play Billing. Subscription and purchase management may be provided through RevenueCat.
We do not receive or store your payment card information.
To confirm an active subscription and help prevent tampered or pirated copies of the App from unlocking premium features for free, the App communicates with a small verification server we operate (hosted on Cloudflare). This server receives: the anonymous subscription identifier already generated by RevenueCat (see Subscriptions and Purchases above); a device-specific cryptographic key generated on your device, used to verify requests came from your device and to limit how many devices can share one subscription; and a device integrity signal from Google's Play Integrity API, which reports whether the App appears to be a genuine, untampered installation from Google Play. None of this includes your name, prayer history, duas read, or location. As with any network request, Cloudflare's infrastructure processes your device's IP address to deliver the request, but it is not stored alongside your subscription data.
The App is designed to keep working normally if this verification server is unreachable — for example, while you're offline — by relying on your device's last confirmed subscription status.
The App may use Google Play Services, Google Play Integrity API, Google Play Billing, RevenueCat, Cloudflare (premium verification, see Premium Verification above), PostHog (analytics, only if you turn it on), and device location and notification services. These providers operate under their own privacy policies.
We do not sell, rent, or trade your personal information. Where analytics are on, PostHog processes that data only on our instructions, as a data processor — it does not use it for its own purposes.
Because most app data is stored locally on your device, you are responsible for keeping your device secure. While we take reasonable steps to protect information processed by the App, no method of electronic storage or transmission is completely secure.
The App does not knowingly collect personal information from children, and no analytics profile is built for any child, whether or not analytics are turned on.
Analytics are optional, off by default, and can be turned on or off at any time in Settings → Privacy. No feature of the App is ever gated behind turning analytics on.
You can request that any analytics data already collected about your device be deleted by emailing us at the address below with your approximate device model and the date range you used the App — we do not have a name or account to look up, so this is the only way we can locate it.
This Privacy Policy may be updated from time to time. Updated versions will be posted within the App or on the page where this policy is made available.
Email: lwkzuzistrash@gmail.com