Privacy Policy

The short version

There is no account. We collect no name or email for using the App. We run no advertising, and no analytics ever look at your prayer behavior. The most sensitive things — your prayer history, your calendar, your location, and your voice — stay on your device, where we cannot see them. We do use a closed set of anonymous, non-identifying product-usage events (like “app opened” or “paywall viewed”) to understand how the App is used — see “Product analytics” below.

1. No account

You use Kiswah anonymously. We never ask you to sign up, and we do not create or hold an account, profile, name, email address, phone number, or advertising identifier for you.

2. What stays on your device

Your prayer logs and history, your tier and streak data, your chosen settings (madhab, calculation method, notification preferences), your calendar data, your location, and any voice used by the Fajr flow are stored locally on your device(using the system's on-device storage). This data is never transmitted to us. A future update may let you sync across your own devices through your private iCloud, which only you can access.

3. What can leave your device (and what never does)

Your prayer life never leaves your device. Every reminder, nudge and piece of guidance the App shows you is composed on your device from data that stays there.

We never send off your device:

• calendar event titles, attendees, locations, or notes;
• your contacts, or anyone's name;
• your precise location or coordinates;
• your prayer logs or history; or
• your name, email, or advertising identifier.

Two anonymous identifiers doleave your device, because the subscription and analytics services cannot function without them: Apple's per-vendor device identifier, sent to RevenueCat with each subscription check, and a random per-install ID assigned by PostHog. Neither is your advertising identifier, neither is tied to your name, and neither follows you into other apps. Apple resets the per-vendor identifier when you delete the App.

Only three things ever leave your device, each covered in its own section below: your subscription status (handled by Apple and RevenueCat), a closed set of anonymous usage events (PostHog), and any feedback you choose to write and send us. None of them carry anything from the list above.

4. Location

With your permission, the App uses your location to calculate accurate prayer times. This calculation happens on your device; your location is not sent to us or to any third-party prayer-time service. You can revoke location access at any time in your device Settings (you can also choose a city manually instead).

5. Microphone (the Fajr flow)

The optional Fajr flow can listen for a short remembrance using on-device speech recognition. Audio is processed locally and is not recorded, stored, or transmitted. The feature is opt-in.

6. Notifications

Prayer reminders and nudges are scheduled locally on your device. There is no push server, and no notification data is sent to us.

7. Subscriptions & payments

Kiswah Pro ($4.99 / week or $14.99 / month, no annual plan) is sold through Apple's in-app purchase. Payment is handled entirely by Apple; we never see your card or billing details. We use RevenueCat to confirm whether a subscription is active — it receives an app-generated anonymous identifier, Apple's per-vendor device identifier, and Apple's purchase events, never any prayer data.

8. Product analytics

We use PostHog, hosted on its servers in the United States, to understand overall app usage — things like how many people complete onboarding or reach the paywall. The event set is closed and anonymous: examples include app_opened, onboarding_completed, paywall_viewed, purchase_completed, purchase_failed, and feature_opened. These events carry no free-form data.

This analytics is always on and cannot be individually disabled, but it never includes:

• your prayer logs, prayer times, or Fajr-flow behavior;
• your precise location or coordinates;
• your calendar or any event details;
• your name, email, or any other contact information; or
• your device's advertising identifier.

Each event carries a random per-install identifier, so we can tell one anonymous session from another, plus standard technical context PostHog adds automatically: your device model, iOS version, app version, language, and time zone. A time zone names a broad region — for example “Asia/Karachi” — and is not your location.

Events are not linked to your identity and are not used for cross-app or cross-site tracking, consistent with our “no advertising” commitment above.

Because PostHog hosts this data in the United States, these anonymous usage events leave the European Economic Area if you are in the EEA or the UK. That transfer is covered by our data processing agreement with PostHog, which incorporates the European Commission's Standard Contractual Clauses. No prayer data, location or other personal detail is part of this transfer — only the closed, anonymous event set described above.

9. Feedback

If you send us feedback from within the App (a bug report, an idea, or a general note), the message you type — and an optional contact emailif you choose to give one — is emailed directly to us via our email provider (Resend). The message also carries your app version, iOS version and device model, so a bug report is diagnosable without a back-and-forth. It is not stored in any database; the only copy that exists is the email itself, in our inbox. We use it solely to read and, if you gave us a way to reply, respond to what you sent.

10. Services we share data with

We do not sell, rent, or trade your information. Data reaches a third party only as needed to run the App:

11. Guidance, not religious rulings

The App's reminders, suggestions and wording are tools to help you build a consistent prayer habit — they are not religious rulings (fatwā) and are not a substitute for a qualified scholar. Prayer times are calculated estimates; verify against your local mosque or authority.

12. This website

If you join the waitlist on this site, we collect the email address you submit so we can let you know when Kiswah is available. This is the only personal data we hold, it is separate from the App, and we use it for nothing else. Waitlist emails are stored with our infrastructure provider (Supabase) and a transactional email provider (Resend) is used to send the confirmation. Email us to be removed at any time.

13. Children's privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from them.

14. Your control & your rights

Because nearly everything lives on your device, you are in control: you can export or delete all your data from within the App's Settings, and deleting the App removes it. You can revoke location, microphone, calendar, and notification permissions at any time in your device Settings. Depending on where you live, you may have additional rights over any data we hold — contact us to exercise them.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will note material changes by updating the date above and, where appropriate, through an in-app notice.

16. Contact us

Questions about this Privacy Policy? Reach us at hello@kiswah.app.

This policy is governed by the laws of the Islamic Republic of Pakistan.