Privacy Policy

Last updated: 13 October 2026

This policy explains what happens to your information when you use Mustaqeem: Salah & Deen (“Mustaqeem”, “the app”) on iPhone and this website. Mustaqeem is made by DuaGo Studios Ltd (“we”, “us”), a company registered in England and Wales, company number 16511810, with its registered office as shown on Companies House for company 16511810. We are the controller of the personal data described here. Questions or requests: [email protected].

1. What stays on your phone

The app keeps the following only on your iPhone (in the app's own storage, shared with its widgets). We don't receive any of it:

• the name you give the app, your chosen companion, and your answers during the introduction (for example how many prayers you pray on a normal day);
• your salah log, make-up (qada) list, streaks and milestones;
• adhkar and tasbih progress, your Quran reading place, bookmarks and Quran plan;
• your settings: location or city, Asr and calculation method, reminder times, Hijri adjustment, Lock In choices and audio settings.

Two of the introduction answers are the exception, and only while “Share anonymous usage data” is on: how you heard about us and which struggles you chose from the app's fixed list are included in the anonymous usage statistics (see section 6). Everything here is erased when you use Me › Account › Erase data on this phone or delete the app.

2. Location

If you allow location access, your iPhone uses your coordinates to calculate prayer times and the Qibla direction. The calculation happens on your phone, and your coordinates are never sent to our servers. When you search for your city during set-up, or the app looks up the name of the place you're in, that request goes to Apple's map services (MapKit and Core Location) and is handled under Apple's privacy policy. You can switch location off at any time in iOS Settings and choose a city instead.

3. Lock In and Screen Time

Lock In uses Apple's Screen Time framework (Family Controls). When you choose apps to pause at prayer times, Apple gives the app an encrypted reference to them. We can't see which apps you chose, how you use them or what you browse, and nothing about your app use leaves your phone. You can remove Screen Time access at any time in iOS Settings › Screen Time.

4. Reminders and the Fajr alarm

Prayer reminders and the Fajr alarm are scheduled on your phone. We don't send them from a server and we don't receive anything about them.

5. Quran recitation

The Quran text, translation, adhkar and duas are built into the app. Recitations (Mishary Rashid Alafasy and Mahmoud Khalil al-Husary) are streamed and downloaded from Islamic Network (the free service behind alquran.cloud), an independent service that isn't run by us or for us. When you play an ayah that isn't already on your phone, your iPhone asks Islamic Network's audio server for that file. Like any web server, it sees your IP address, which file was requested and the standard details iOS sends with a web request (the app's name and version, the iOS version and your language). No account, name or identifier from us is sent, and we receive nothing about what you listen to. Islamic Network's own terms are at alquran.cloud/terms-and-conditions. Downloaded surahs and the playback cache stay on your phone until you delete them in Me › Audio › Downloads, use Delete my data, or delete the app.

6. Anonymous usage statistics

To learn which parts of the app help people and where they get stuck, the app sends anonymous usage events to TelemetryDeck GmbH (Germany), which processes them for us in the EU. It is on by default, and you can switch it off at any time in Me › Sources, privacy and terms › “Share anonymous usage data”.

What is sent, and only this:

• introduction steps viewed or completed and the whole seconds spent on them; how you heard about us (from a fixed list); which struggles you chose (from a fixed list, for example “waking for Fajr”);
• paywall events: when it's shown and from where, which plan was tapped, and whether a purchase, trial or restore happened;
• the first time you use Lock In, the Fajr alarm, Learn, gifting or the Ummah tab; and whether you came back 1, 7 and 30 days after first opening the app;
• that the app was opened; that an introduction step was skipped; that a prayer was marked as prayed, with which of the five it was (only its name, never the time, the day or anything else from your log); that the Qibla or Tasbih was opened; that a set of adhkar was finished (morning, evening or after-prayer); that a purchase was started or failed; that a gift was bought or redeemed; that a dua request was posted or something was reported; whether notifications were allowed; and that a test notification was sent from the diagnostics screen;
• with each event: the app version, iPhone model, iOS version, language, accessibility settings (such as text size), light or dark mode, and the date.

What is never sent: your prayer times, the days or times you prayed, your location, city, time zone or region, your name, anything you write, or the time of day. The app overwrites the time zone, region and hour fields before anything is sent. It doesn't use the advertising identifier, never asks to track you, and doesn't combine this data with anyone else's. TelemetryDeck receives a one-way hash of an identifier Apple gives this app on your phone, so it can count returning users without knowing who you are, and it doesn't store IP addresses. The app has no crash-reporting service.

7. Subscriptions

Mustaqeem Premium is bought through Apple's In-App Purchase, under your Apple ID. Apple handles the payment and we never see your card or payment details. To know whether you're subscribed, the app uses RevenueCat, Inc., which receives your purchase history from Apple together with an anonymous app user ID created by the app (not your name, email or Apple ID). While “Share anonymous usage data” is on, RevenueCat also holds how you heard about us (one of the fixed choices); switching it off or using Delete my data removes it.

8. Gifts

If you buy a year of Premium as a gift, our server stores the gift code (only as a keyed one-way hash, to find it, and an encrypted copy, so the app can show you your code again), the App Store transaction ID and purchase date, RevenueCat's anonymous ID for you, the card style, and, if you add them, your first name and a short message. Messages are checked automatically, in the app before you buy and again by our server; a message that fails the checks isn't added to the gift. The recipient can report a message: it's hidden from them straight away, and the message, the reason and reference numbers are emailed to our support inbox, where a person reads it. When the gift is redeemed we also store the recipient's anonymous RevenueCat ID, when it was redeemed and when the year of Premium ends.

Your first name and message are deleted 90 days after the gift is redeemed or refunded. An unredeemed gift keeps them until it's redeemed, because codes don't expire. The rest is kept as a record of the purchase, for refunds, support and our accounts. The gift page on this website (mustaqeemapp.com/gift/…) only shows the code from its own address; it never shows or fetches anything about the person who bought it.

If you enter an email address after buying a gift, we use it once to send you a receipt with the gift code and link, through Resend. We don't store the address; only the fact that a receipt was sent, so it goes out once.

9. The Ummah tab (optional, with an account)

Nothing else in the app needs an account. If you open the Ummah tab and choose to join:

• Consent first. Before anything is sent, the app explains that joining tells us you are Muslim, what we store and how to delete it, and asks you to agree. We record which version of that explanation you agreed to and when. You can withdraw at any time; withdrawing deletes your community account.
• Sign in with Apple. We ask Apple for your first name only, never your email address. Apple gives us an account identifier that isn't your Apple ID. Sign-in runs through Supabase Auth.

What our server stores (in our Supabase database in London, UK):

• your profile: the first name you choose to show, your companion, whether you've confirmed you're 18 or over, and the version and time of your consent;
• your sharing setting, your time zone and today's Fajr time rounded to 15 minutes, used only so nudges aren't delivered between 23:00 and Fajr where you are (your partner can't see these);
• your prayer partnership (who, since when, and a 6-character invite code while an invite is open);
• if you turn “Share my prayers” on: for each of today's five prayers, only whether you marked it prayed, shared with your partner. Not the time, whether it was late, made up, missed or excused. Turning sharing off deletes it;
• nudges you send and receive (which of three pre-written nudges, and when);
• dua requests you post (who they're for and what for, chosen from fixed options, with no free text), and that you made dua for a request, so it's counted once. No one, including the person who asked, can see who made dua, and your name is never shown with your request;
• reports you make and people you block.

Who sees what. Your prayer partner sees your first name, your companion and, only while sharing is on, today's ticks. Other signed-in users see your dua requests without your name. There are no public profiles, no search for people and no direct messages.

We never receive your prayer log or its times, your make-up list, your location, your email address, your contacts or anything about Lock In.

10. Challenges and Ummah totals (anonymous)

Challenges such as “Fajr on time” are worked out on your phone. If you join one, your phone sends a random code for the membership and, on each day you complete it, a different random code for that day. If you switch on “Count me in the Ummah totals”, each prayer you mark sends a random code for that day and which prayer it was. These codes aren't linked to your account, your Apple ID or your device, are stored without your IP address, and day codes are deleted after 2 days. The totals are exact counts of codes; they're never estimated or padded.

11. Emails

We send email through Resend (in the EU). When something is reported, an email goes to our support inbox with the reported text (the request, the gift message, or a reported partner's first name), the reason and reference numbers, so it can be reviewed quickly. It never includes the reporter's identity. Gift buyers who give an email address get their receipt this way (see section 8). If you email us, we use your message and address to reply and keep the conversation as long as we need to help you.

12. Who processes your data

These companies process data for us under written agreements, only on our instructions:

Apple acts as an independent controller for App Store payments, Sign in with Apple, push notification delivery and map searches, under its own privacy policy. Islamic Network (see section 5) is an independent service, not our processor.

13. Our lawful bases

• Contract: to provide what you ask for: your Ummah account and its features, gifts, and the subscriptions you buy.
• Consent: where the app asks for it. Joining the Ummah tab reveals that you're Muslim, which is special category data, so we rely on your explicit consent, which you can withdraw at any time in the app.
• Legitimate interests: anonymous usage statistics to improve the app (with a switch to turn them off), and keeping the community safe (automatic checks, moderation, reports, blocks and records).
• Legal obligation: keeping records of purchases where tax and accounting law requires it, and records of moderation decisions under UK online safety law.

14. How long we keep it

15. Children

Mustaqeem is for all ages, and everything outside the Ummah tab works without an account. Posting a dua request needs a one-time confirmation that you're 18 or over. Under-18s can make dua for others, join challenges and have a prayer partner through a code shared outside the app. For everyone, there are no direct messages between users, no public profiles and no way to search for or discover people, and sharing with a partner is off until you turn it on. Parents and guardians can manage app access and purchases with Apple's Screen Time and Family Sharing.

16. Your rights

Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you have the right to:

• be told how your data is used (this policy);
• get a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we use it;
• receive data you gave us in a portable format;
• object to processing based on legitimate interests, including the usage statistics;
• withdraw consent at any time, without affecting what was done before.

We don't make decisions about you by automated means that have legal or similarly significant effects. To use any of these rights, email [email protected]. We'll reply within one month. Because the Ummah account has no email address, we may ask you to confirm the request from inside the app. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we'd appreciate the chance to put it right first.

17. Deleting your data

• Your community account: Me › Account › Delete account (or Me › Community and account › Withdraw consent and delete account). This deletes your profile, partnership, shared ticks, nudges, dua requests and challenge memberships from our server straight away and revokes Sign in with Apple. Reports you made stay as safety records without your identity.
• Everything on your phone: Me › Account › Erase data on this phone erases your salah log, make-up list, settings, Lock In choices, downloads and everything else the app keeps on this iPhone.
• A copy of your data: Me › Account › Download my data gives you what our server holds about your community account as a file. For anything else (for example a gift), email us.
• Subscriptions: deleting data doesn't cancel a subscription. Manage it in iOS Settings › your name › Subscriptions.

18. This website

mustaqeemapp.com uses no cookies, analytics or tracking scripts, and its fonts are served from this site. Our host, Cloudflare, processes your IP address and request details briefly to deliver the pages and protect against abuse.

19. Changes and contact

If we change this policy, we'll update the date at the top and, for significant changes, tell you in the app.