Privacy Policy

Overview

Al-Salah helps you calculate prayer times, track prayers, manage Qaza, use widgets, receive reminders, and optionally back up your data with an Al-Salah account. Core prayer features work on your device without requiring an account.

Data stored on your device

• Name or display name used in the app.
• Prayer location coordinates, timezone, and whether the location came from device GPS or manual entry.
• Prayer calculation settings, Asr method, Isha end-time setting, Jummah settings, caution-time visibility, time format, theme, and widget preferences.
• Prayer tracker history, completion status, processed missed-prayer markers, Qaza counts, and Isha Fardh/Witr split state.
• Notification, Adhan, Qaza reminder, alarm-style prayer reminder, snooze, vibration, and sound preferences.
• AOD widget placement settings and local backup/sync metadata.

Location

Location is used to calculate prayer times and Qibla direction. You can use device location or enter coordinates manually. Manual coordinates stay under your control but will not update automatically. If you grant while-using location access, Al-Salah may refresh prayer times when you open the app. If you grant always location access, Android background work may refresh location only when your stored location is device-based and the movement is significant enough to change prayer windows.

Your location coordinates are used for local calculation. Cloud backup does not store your prayer location, so a new device asks you to set location again after login.

Account and cloud backup

Creating an account lets Al-Salah sync and restore supported app data through the Al-Salah backend. Synced data can include prayer settings, tracker logs, Qaza counts, processed missed-prayer markers, notification preferences, sound preferences, and backup metadata. Location coordinates are excluded from cloud backup.

If both your phone and cloud account have backup data, Al-Salah asks whether to keep server data, keep mobile data, or merge supported records. Settings cannot be safely merged, so merge asks which settings side should be kept.

Authentication and email

When you sign up or log in, the backend stores your email, display name, hashed password, and refresh sessions. Password reset emails use single-use reset tokens. The backend stores only hashed reset tokens and expires them automatically.

Notifications, alarms, and widgets

Al-Salah can schedule local notifications and alarm-style prayer reminders on your device. Notification content may include prayer names, reminder text, Qaza prompts, and daily review prompts. Android widgets show prayer status, countdowns, caution times, and selected theme or placement preferences.

Network use

Al-Salah contacts the backend for account login, signup, token refresh, startup status checks, password reset, and backup sync. Startup checks may return maintenance, app block, or minimum version information. Prayer times are calculated locally instead of fetched from an external prayer-time API.

Your controls

You can update prayer settings, location, notification preferences, reminder sounds, widget options, and Qaza counts inside the app. You can log out, delete your account from the Profile screen, clear app storage, or uninstall the app. Deleting your account removes your account and cloud backup data from the Al-Salah backend.

Security and limits

Al-Salah uses hashed passwords, bearer access tokens, rotating refresh tokens, and server-side token revocation. No app can guarantee perfect security, so you should use a unique password and keep your device protected.

Changes

This policy may be updated as Al-Salah changes. Continued use of the app after an update means the updated policy applies.