ATHAN FOR ALL · APP & WEBSITE
Privacy, in plain words.
One privacy policy for the Athan for All app, its companion features, and athanforall.com.
Draft updated 3 November 2026
Prepared for the app and website. Publication checks remain for crash-reporting settings, data retention and provider safeguards. This draft is not yet ready for App Store submission.
Who is responsible
Athan for All is a free personal project operated by Mohammed Moqbel, based in France. Mohammed Moqbel is responsible for the personal-data processing described here. Contact: mqlabscontact@gmail.com.
This policy covers the iOS and Android apps, their widgets and companion watch apps, and athanforall.com. No account, subscription or payment is required. We do not include advertising, sell personal data or use advertising trackers. Limited technical processing still occurs to deliver the website, diagnose app failures and answer messages.
What stays on your devices
The app saves your selected location, prayer and reminder settings, optional prayer journal, Quran bookmarks and reading position, and adhkar favourites and progress locally. We do not operate an account service or a server that receives these records. You can clear your prayer journal in Settings.
Prayer times are calculated on your device. The Arabic Quran pages and text, bundled adhkar and city-search data are included in the app. They do not require a content-download service after installation. Your Apple or Google device backups may include local app data according to your backup settings; we do not control those backups.
App location and Qibla
You can choose a city manually without giving location permission. If you allow access, the phone obtains a position while in use for prayer times and Qibla, and saves the selected coordinates, place name and timezone locally. It may refresh the position when you return to the app. It does not keep a movement history or request background location tracking.
The phone uses the operating system’s reverse-geocoding service to find a place name. Apple, Google or another device location-service provider may process coordinates under its own privacy terms. Local prayer calculation does not mean those operating-system services never communicate over the network. You can revoke permission in device settings and select a city instead.
Reminders, widgets and watches
Prayer reminders are scheduled locally through your device’s notification system. We do not use remote push notifications to deliver them. You control permission, sounds and reminder settings. Notifications and widgets can show prayer information to anyone who can see your device.
Widgets and paired watch apps receive saved prayer schedules, place names, timezones, Qibla bearings and display preferences through platform companion services. The shared schedule does not contain your journal, reading history or the phone’s raw latitude and longitude. The Apple Watch compass can separately request the watch’s location and heading while that screen is active to calculate Qibla and true north.
Website location and city search
Website location access is optional. Selecting Use my location requests browser permission. If you previously granted permission, the homepage may obtain an updated position automatically. Coordinates are held in page memory and used locally for prayer calculations and timezone lookup. Our website code does not send device coordinates to a geocoding or analytics service or save them in browser local storage.
Your browser or operating system may use its own location services to obtain the position. You can revoke permission or choose a city manually. City-search text is matched locally against downloaded parts of a GeoNames-based index, rather than sent to a search API.
Choosing a city outside the featured directory creates a timetable URL containing its public city-centre coordinates and name, not your precise device position. That URL can appear in browser history, shared links and hosting records.
Website hosting and cookies
The website uses Vercel hosting. Delivering and securing pages involves technical information such as IP addresses, requested URLs, timestamps and browser or device information. Vercel may derive an approximate location from an IP address; this is separate from the optional device location used for prayer calculations.
Our website code does not add analytics, advertising trackers or non-essential cookies. Fonts, artwork and city-search files are served with the website. Hosting and security infrastructure may perform its own technical processing, so we do not claim that a visit creates no technical records.
App crash reports: Sentry
Release builds of the phone app send technical error and crash reports to Sentry to help fix failures. Reports can include error messages, stack traces, app version, operating-system and device context, timestamps and diagnostic identifiers. Sentry receives the network connection and may process an IP address or approximate network-derived location. Reports should not be treated as necessarily anonymous.
The app disables default personal-information collection, screenshots, view-hierarchy attachments, logs and automatic session tracking. Its JavaScript report filter removes user, request, extra-data and breadcrumb fields. Application code does not intentionally attach your coordinates, prayer journal or reading records. These controls reduce data; they do not prove that every native crash report contains no personal information.
The configured reporting endpoint is in Sentry’s German region. This does not guarantee that all support or subprocessor operations stay in the EU. The current app sends reports automatically and has no in-app off switch. Contact us about an objection to this processing; contacting us does not itself stop the SDK on your device.
Support messages
If you email mqlabscontact@gmail.com, we receive your email address and the message and attachments you choose to send. This mailbox uses Gmail. Google processes correspondence under the terms applicable to that service. We use messages to answer questions and resolve problems, not to add you to a marketing list.
Please avoid sending journals, precise locations or sensitive information unless necessary for your request. We cannot retrieve your local journal or reading records remotely.
Legal grounds and retention
Location and notification features are optional and controlled by device permissions. Permission to use a device feature is separate from the legal basis for processing data outside your device. Before publication, the lawful basis and any applicable consent requirements for automatic crash diagnostics must be confirmed, alongside the legal grounds for hosting/security records and support correspondence. A privacy notice alone does not provide consent.
Local app records remain until changed or removed, or the app’s stored data is removed. Revoking location permission does not delete the previously saved position. Paired-device copies and operating-system backups must be managed separately. Website device coordinates remain only for the lifetime of the page.
Publication check: the Sentry account’s event-retention period and treatment of issue metadata and backups, Vercel’s relevant log-retention practices, and the support-email deletion schedule must be verified and stated here. We have not substituted an assumed retention period for these settings.
Recipients and international processing
Service providers include Vercel for website delivery and security, Sentry for diagnostics, and Google for support email. Device-platform providers supply location, notifications, backups and companion connectivity. Opening an external link makes a separate request to its operator, whose privacy terms apply.
Some providers operate outside the European Economic Area, including in the United States. Publication check: confirm the applicable provider agreements, processing roles and transfer safeguards, such as an applicable adequacy decision or Standard Contractual Clauses. The final policy must identify the safeguards actually used and how to obtain information about them.
Your choices and rights
You can choose a city manually, revoke location or notification permission, clear the journal, and manage local data and backups. Contact mqlabscontact@gmail.com to request access, correction, deletion, restriction or portability of personal data we process where applicable, or to object to processing. Where consent is the basis, you may withdraw it without affecting the lawfulness of earlier processing.
We may need proportionate information to verify a request. We cannot identify a particular crash report or access device-only records merely from your name or email, and will explain any such limitation. GDPR requests are normally answered within one month. If a permitted extension is necessary, we will explain it within that month. You may complain to the CNIL or another competent data-protection authority.
Children and policy updates
No date of birth, child profile or account is requested. Parents or guardians can manage device permissions and contact us about a child’s information. The release audience and any additional safeguards needed for children remain a publication check; a store age rating alone does not settle those requirements.
Updates will show a revised date. Material changes to data handling will be explained through the app or website as appropriate, with any legally required permission obtained before new processing begins. This draft describes the implementation and the remaining publication checks.
Questions? mqlabscontact@gmail.com