Privacy Policy

1The short version

• Arqaan keeps a record of the worship you log, prayers, dhikr, deeds, lessons and the garden that grows from them, so your progress survives a reinstall and follows you to any device you sign in on.
• We do not sell your data, we do not show ads, and we never see card or bank details, because Arqaan has nothing to buy.
• Your location is used on your phone to work out prayer times and the direction of the qibla. Your coordinates are never uploaded to our servers, and you can pick a city by hand instead.
• You can hide yourself from leaderboards with one toggle, and you can delete your account and everything in it from inside the app.

The rest of this page explains each of those in full.

2Who we are, and how to reach us

Arqaan is an Islamic worship-habit app for Android and iPhone, identified on both as com.hajify.arkaan. We are the small team that builds and runs it, and we decide what happens to the data described on this page.

Write to contact@hajify.com with any question about this policy, to ask for a copy of your data, or to complain about how we have handled it. A person reads that mailbox.

3What we collect, and why

Your account

An account needs an email address and a password, a Google sign-in, or Sign in with Apple. With Google sign-in we receive the email address on that Google account; we never see your Google password. With Sign in with Apple, offered on iPhone, we receive either the email address on your Apple Account or, if you choose Hide My Email, the private relay address Apple creates for Arqaan, which forwards to you without telling us your real one. Apple also passes your full name once, on the very first sign-in and never again, which we use to fill in your display name; we never see your Apple password.

Alongside whichever of those you used we store a display name, an optional handle, an avatar image reference, and a friend code so other people can add you. Sign-in and account recovery are handled by Supabase Auth.

Worship and progress

This is the record the app exists to keep, and it is stored with your account:

• Prayer logs, which of the five prayers you marked, whether it was on time, and the date.
• Deed completions from the daily deeds board.
• Dhikr counts from the tasbih.
• Your garden, which trees are planted and which skins you chose.
• Lesson and gate completion from the learning path.
• Your level, your streak, and your lifetime Noor.
• Which weekly league bracket you are in, and the Noor you earned in the current week.

We use it to draw your garden, your streak and your standing, to keep them consistent across devices, and to restore them if you reinstall.

Social features, only if you use them

• Your friends list, built from friend codes people exchange.
• Your leaderboard row for the week.
• Reports you send about another member: who reported, who was reported, and the reason you typed. We use these to moderate.

Things that stay on your phone

Your chosen city or last known position, your reminder settings, an unfinished tasbih count, and cached lesson and price data are kept in Arqaan's own storage on the device. They are not uploaded, and uninstalling the app removes them.

Diagnostics and reminders

If Arqaan crashes, Firebase Crashlytics sends us a crash report, the device model, the operating system version and the technical trace of the fault. We read those to fix bugs. Firebase Cloud Messaging issues a notification token for your install so reminders can be delivered.

4Device permissions

Arqaan asks for a permission at the moment the feature needs it, and every one of them can be refused or revoked later in your phone's settings. The app keeps working without them; the feature that needed it simply says so.

Notifications

Prayer reminders, the daily nudge, and a note if you have been away. Refuse it and Arqaan stays silent.

Location, approximate or precise

Prayer times and the qibla direction. Choosing a city by hand does the same job without the permission.

Physical activity, called Motion & Fitness on iPhone

Counting steps in the step tool. Only used while that tool is open.

Microphone, and speech recognition on iPhone

Optional voice input to Hadi, the in-app assistant. Only while you are actually speaking to it.

Run at startup (Android only)

Re-schedules your reminders after the phone restarts, so they do not quietly stop. Nothing leaves the device.

5Location, prayer times and qibla

Prayer times and the qibla are calculated on your phone from a latitude and longitude. You can give Arqaan that position in one of two ways: grant the location permission, or pick your city from the list in the app. A coarse position is enough, prayer times shift by about a minute across a city, so you never have to share a precise one.

Either way, that position is saved only in Arqaan's storage on your device. It is not sent to our servers and it is not attached to your account. Turning coordinates into a readable city name uses your operating system's own geocoding service, provided by Google on most Android phones, and by Apple on iPhone.

6Hadi, the in-app assistant

When you send Hadi a message, the text of that message and enough of the current conversation to answer it are passed through our own server function to Groq, which generates the reply. We do not store those conversations on our servers, and Arqaan does not keep the thread on your device after you close it. Please do not type anything into Hadi that you would not want processed by a third party, and remember that it is a study aid, not a source of religious rulings.

If you use the microphone button, your speech is transcribed by your device's own speech recognition service, a Google service on most Android phones, and Apple's speech recognition on iPhone. Either way it is governed by that company's terms rather than ours, and it may transcribe on their servers rather than on the phone. Arqaan receives only the resulting text.

7Who else handles your data

These are the companies and services involved, and what each one does:

Supabase

Authentication, the database that holds your account and your worship record, and the API the app talks to. Your rows are stored in an EU region (eu-central-1).

Google Firebase

Crashlytics for crash reports, Cloud Messaging to deliver reminders, and Hosting for this website.

Apple

Sign in with Apple, if you use it: Apple checks who you are and hands us the email address on your Apple Account, or the private relay address if you chose Hide My Email, plus your name on the first sign-in only. Apple also distributes the iPhone app and its test builds.

Groq

Generates Hadi's replies from the messages you send it.

Your device's speech service

Transcribes voice input when you use it, Google's on Android, Apple's on iPhone.

Public content sources

Recitation audio is streamed from everyayah.com and tafsir text is fetched from qul.tarteel.ai when you open those features. Like any website, they see the ordinary request information, including your IP address. Nothing about your account is sent to them.

A public gold and silver price source

The Zakat calculator needs a current nisab. Our server fetches metal prices and exchange rates from public price services and caches them; your device never contacts them, and nothing about you is sent with that request.

Google Fonts

This website loads its typefaces from Google Fonts. The app itself bundles its fonts and does not.

We do not sell your data, and we do not share it with advertisers or data brokers.

8What other people can see

The weekly leaderboard. Arqaan puts you in a bracket with other members each week. While you are visible, which is the default, the others in your bracket can see your display name, your handle, your avatar, your level, your streak, the Noor you earned that week and your lifetime Noor. They do not see your email address, your prayer log or your location. Turn Show me on leaderboards off in Settings or on your Profile and your row disappears from every leaderboard.

Friends. Friend codes are exchanged by you. Someone who has your code can send you a friend request. Once you have accepted, that friend sees your display name, your friend code, your level, your streak, your lifetime Noor, and how many trees you have planted, lessons you have finished and pillars you have mastered , the figures on your garden card. Not your email address, and not your prayer log.

Reports. If you report another member, we receive the report so we can act on it. If someone reports you, we may look at your account to decide what to do.

9Where your data is stored

Your account and your worship record live in a Supabase database in an EU region (eu-central-1). If you use Arqaan from outside the EU, your data is transferred there and stored there. Crash reports and notification tokens are processed by Google Firebase on its own infrastructure, and Hadi messages are processed by Groq on its own, both of which may be outside the EU.

10Keeping, exporting and deleting it

We keep your worship record for as long as your account exists, a streak that quietly expired would defeat the point of it.

Deleting your account

Open Settings → Account → Delete account in the app. That starts a 30-day grace period. Sign back in during those 30 days and Arqaan offers to keep the account: tap Keep my account and the deletion is cancelled with nothing lost. That tap is the only thing that cancels it, signing in alone does not, and closing that prompt without tapping leaves the deletion scheduled, though Arqaan asks again the next time you sign in. After 30 days a scheduled job permanently deletes your account and every row attached to it, prayer logs, deeds, garden, lessons, friends and leaderboard history. That step cannot be undone.

Uninstalling the app is not the same as deleting the account: it clears what was on the device, but the account remains until you delete it.

Getting a copy of your data

Open Settings → Account → Download my data in the app. Arqaan asks our server for your own rows, your profile, your progress, your prayer, deed and dhikr logs, your garden, your lessons and your league history, writes them to a JSON file and hands it to your phone's share sheet, so you choose where the copy goes. If you would rather we sent it, email contact@hajify.com from the address on the account. You can also ask us to correct anything that is wrong.

Crash reports are kept by Firebase Crashlytics under Google's own retention schedule and are not part of your worship record.

11Children and families

There is nothing in Arqaan that is unsuitable for a child, and families are very much who it is for. It is not, however, built as a children's app: an account needs an email address, and the social parts, friend codes, leaderboards, the assistant, assume an account holder who understands them.

If a child is going to use Arqaan, a parent or guardian should set the account up and look after it. We do not knowingly collect data from a child who created an account without one. If you believe that has happened, write to us and we will delete the account.

12Security, payments and advertising

Every table in our database is protected by row-level security: the database itself checks that each request belongs to the account making it, so one account cannot read another's rows even if the app asked it to. Traffic between the app and our servers is encrypted in transit, and access to the production database is limited to the people who maintain it.

Arqaan has no billing today. There is nothing to buy, no subscription running, and no card, bank or payment detail of any kind reaches us. If that ever changes, a payment provider will handle it and this page will say so before it does.

No part of Arqaan shows advertising, and no advertising or analytics network profiles you through it.

13Changes to this policy

When this policy changes we update this page and change the date at the top. If a change materially affects what we do with your data, we will tell you in the app before it takes effect.