Privacy Policy

What stays on your device

Everything you track — dhikr and wird progress, custom dhikrs, missed (qaza) prayers, fasts, daily prayers, habits and settings — is stored on your phone and never leaves it unless you turn on sync (below).

• Voice counting. If you count dhikr by voice, the app uses the microphone and your phone's speech recognition. The audio is processed by Apple (on iPhone) or Google (on Android) to turn speech into text, as part of the operating system. We never receive or store your voice or the text.
• App lock. The app-blocking feature on iPhone uses Apple's Screen Time framework. Which apps you choose is kept by iOS; we cannot see it. On Android it uses two permissions you grant in your phone's settings: usage access, to notice when a locked app opens, and display over other apps, to show the dhikr screen in front of it. This check runs on your phone only during a dhikr time you set. Which apps you chose and which apps you open never leave your phone.

What we collect, and why

• A random account ID. On first launch the app creates an anonymous account identified only by a random ID. It lets you take part in the collective (jamaat) dhikrs, where we store how many dhikrs your account contributed to each one. It contains no name, email or phone number.
• Your email address, if you sign in. Signing in with Apple gives us your Apple ID email — or, if you choose “Hide My Email”, a private relay address — and a stable Apple user identifier. We use them only to let you sign in again on a new phone. We do not ask Apple for your name, and we don't send you marketing email.
• Synced progress (premium, signed in only). When you are a premium subscriber and signed in, the app backs up your tracked progress to our server so you can restore it on another phone: your dhikr and wird trackers and their daily counts and targets, custom dhikrs and wirds you created, missed prayers and fasts, and daily prayers. If your subscription ends, syncing stops but nothing is deleted, so it's still there if you subscribe again.
• Subscription status. Purchases are made through the App Store or Google Play; we never see your card or payment details. We receive the subscription's product, status, dates and store transaction ID, so we know whether your account can sync and can restore premium after a reinstall.
• Payment by transfer (Kazakhstan, Russia). If you choose to pay by Kaspi or Beeline transfer (on zikrapp.me/pay) instead of the App Store or Google Play, you send us the receipt on WhatsApp together with your in-app ID, and we use them only to activate your subscription.
• Notifications. If notifications are on, the app registers a push token (an address for this phone's notifications) with your app version, app language, time zone, and your country — from your phone's region settings on iPhone, from your SIM card on Android — not your location. We use these to send reminders at the right local time, in your language, and on the right date for Islamic occasions, which can differ by country. You can turn notifications off in your phone's settings at any time.
• Usage analytics. We record which screens and features are used — for example that a paywall was shown or a dhikr was completed — together with your device model, operating system, app version, language and approximate location (city and country, derived from your IP address). This helps us decide what to improve. It is not used for advertising.
• Crash reports. When the app crashes we receive a crash report with the technical state of the app and your device model and operating system, so we can fix the problem.

Who processes it for us

These companies store or process data on our behalf, only to provide the parts of the service named here:

• Supabase. our database and sign-in: the account ID, email, synced progress, jamaat contributions, subscription status and push tokens. Hosted in Frankfurt, Germany.
• Apple. Sign in with Apple, App Store purchases, push delivery on iPhone, speech recognition.
• Google Firebase. push notification delivery (Cloud Messaging), crash reports (Crashlytics) and app configuration (Remote Config).
• Qonversion. subscription management and purchase validation.
• Amplitude. usage analytics.
• Vercel. hosting of this website.

Some of these providers are located outside your country, including in the United States and the European Union. We do not sell or rent personal data, and we share it with no one else except where the law requires us to.

How long we keep it

• Account data and synced progress: for as long as your account exists.
• Accounts inactive for more than a year may be deleted. We will not delete the history of an account that is still in use, including after a subscription lapses.
• Push tokens: until the app is uninstalled or the token stops working, then removed.
• Analytics and crash reports: kept by Amplitude and Firebase under their own retention periods.

Deleting your data

In the app, open Settings → your account → Delete account. This permanently deletes your account and everything linked to it on our server — email, synced progress, jamaat contributions and push tokens — and, for Apple accounts, revokes the app's access to your Apple ID. It cannot be undone. Progress stored on your phone stays there until you delete the app.

Without the app, request deletion at zikrapp.me/delete-account.

Deleting your account does not cancel a subscription, which is billed by Apple or Google — cancel it in your App Store or Google Play subscription settings.

You can also email era_jas_95@mail.ru to ask for a copy of your data, a correction, or deletion. Please include your in-app ID (you can copy it in Settings) so we can find your account.

Security

Data is sent over encrypted connections (HTTPS). On our server, each account can read and change only its own data. Sign-in sessions on your phone are kept in the iPhone Keychain or Android's encrypted storage. No system is perfectly secure, but we take reasonable measures to protect your information.

Children

ZikrApp is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

Changes

If this policy changes, we will update it on this page and change the effective date above. If a change affects how existing data is used, we will also tell you in the app.

Contact

Questions about privacy: era_jas_95@mail.ru