Imanza is an Islamic companion app — prayer times, the Quran with tafsir, hadith collections, duas, a Qibla compass, a Hijri calendar, a tasbeeh counter, a prayer tracker, a Ramadan hub and a nearby-mosque finder. This policy explains what we collect, why, and how we protect it. By using the app you agree to the practices described here.
Information we collect
We collect only what is needed to provide the app's features.
- Account information — if you create an account: your name, email address and a password (passwords are handled and stored by our authentication provider, Supabase; we never see them in plaintext). If you sign in with Google, we receive your name, email address and profile photo from your Google account.
- Guest mode — you may use the app as an anonymous guest. A guest session has no name, email or password, and nothing is backed up to our servers.
- Location — with your permission, your approximate and/or precise device location is used on-device and sent to prayer-time and mosque services to compute prayer times, the Qibla direction, the automatic calculation method (based on your country) and nearby mosques. If location permission is unavailable we may estimate your city-level location from your IP address as a fallback. For nearby mosques, your coordinates are rounded to a roughly 2 km grid square before our server queries Google Places, and the result is cached per square — not per person.
- Preferences & settings — language, theme, text size, prayer-calculation method and adjustments, notification preferences, reciter and translation, and your chosen location.
- Worship data — prayer log and qada counter, fasting log, tasbeeh history and custom counters, Quran bookmarks and reading position, reading plan, dua favourites. This lives on your device. If you are signed in (not a guest) and hold a Premium subscription with cloud sync enabled, it is also stored in your account so it can be restored on another device.
- Subscription status — if you subscribe to Imanza Premium, Google Play processes the payment and our subscription provider, RevenueCat, tells the app whether your subscription is active. We receive an anonymous subscriber identifier, product identifiers, purchase and expiry dates and country. We never receive your card or bank details.
- Diagnostic logs — a limited error log is stored only on your device to help you troubleshoot. It is never transmitted to us automatically; you may choose to copy and send it.
Imanza contains no advertising, no analytics and no third-party tracking SDKs. We do not collect or sell your data for advertising, and we do not build advertising profiles.
How we use your information
- To authenticate you and keep you signed in.
- To calculate and display prayer times, the Qibla direction, the Hijri calendar and nearby mosques.
- To send the prayer-time, pre-adhan, nafl, Ramadan, adhkar and Islamic-event notifications you have enabled. Notifications are scheduled on your device; we do not run a push server.
- To back up and sync your settings and worship data across devices (Premium, signed-in users who enable it).
- To verify your Premium entitlement and unlock premium features.
- To respond when you contact us.
Third-party services
To provide its features, the app sends limited data to the following services. None of them receive your password, and we do not sell data to any of them.
| Service | Data sent | Purpose |
|---|---|---|
| Supabase | Account details; synced settings and worship data; subscription override flag | Authentication, database, cloud sync, hadith text |
| Google Sign-In | Google account email, name, photo | Optional sign-in |
| Google Play Billing & RevenueCat | Purchase tokens, anonymous subscriber id, product ids | Premium subscription |
| Aladhan API | Location coordinates, date, calculation method | Prayer-time calculation |
| AlQuran Cloud / Islamic Network CDN | None (content requests only) | Quran text, translations & audio |
| jsDelivr CDN (hadith-api, tafsir_api) | None (content requests only) | Hadith fallback and tafsir text |
| Google Places (via our server) | Coordinates rounded to a ~2 km square | Nearby-mosque search |
| Google Places Autocomplete | City text you type | Manual location search |
| OpenStreetMap (Overpass) | Location coordinates | Nearby-mosque search (supplementary) |
| ipinfo.io | Device IP address | City-level location fallback |
| Google Maps SDK | Map tiles for the area shown | Mosque map (Android) |
Each service processes data under its own privacy policy.
Data security
All network communication uses HTTPS encryption. Your authentication session is stored in encrypted form on your device (AES-256), with the encryption key held in the device's secure keystore. API keys for paid services are kept on our server, not in the app. We rely on Supabase's infrastructure security for data stored in your account, and access to it is restricted by row-level security so only you can read your rows.
Data retention
Account data and synced content are retained while your account exists. Subscription records are retained by Google Play and RevenueCat under their policies. Cached content (prayer times, Quran, hadith, tafsir, mosques) and the on-device error log are stored locally and expire or can be cleared at any time. Nearby-mosque results are cached on our server per grid square for up to 30 days and contain no personal data. Guest data is ephemeral and is not backed up.
Your rights & account deletion
You can edit your profile, change your email or password, and delete your account and all backed-up data directly in the app under Settings → Account → Delete account. Deletion is permanent and removes your account and associated data from our systems. Cancelling a subscription is done through Google Play. If you cannot access the app, see our Account & Data Deletion page to request deletion by email. Depending on where you live you may also have rights of access, correction, portability and objection — contact us to exercise them.
Children's privacy
Imanza is a general-audience religious app and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated in the app.
Contact
Questions about this policy or your data: use the contact form or write to support@imanza.app.