Privacy Policy

Introduction

Hisaab: Prayer & Qada Tracker ("Hisaab" or "the App") is a personal tool for estimating missed (qadāʾ) prayers, building a repayment plan, and tracking daily and make-up prayers. This Privacy Policy explains what information the App stores, how it's used, and the choices you have — based on how the App is actually built, not a generic template.

Information Stored On Your Device

By default, Hisaab works entirely without an account, and everything below is saved only in the App's private storage on your device (using your device operating system's standard app-storage mechanism), never transmitted anywhere unless you create an account or manually export a backup (see the sections below):

• Profile details you enter — gender, current age, the age you became religiously accountable, and your school of thought (madhhab).

• Missed-prayer periods you add, including any duration/date-range details and exclusions or adjustments (such as menstruation or postpartum days) you specify.

• Every make-up prayer you log, and your on-time completion marks for current prayers, each with its date.

• Your repayment plan selection and pace.

• Your chosen prayer-time calculation method and Asr convention.

• A location, if you choose to set one (see "Location" below).

• App preferences: theme (dark/light/system), background style, interface language, and daily-reminder time/on-off setting.

• Whether you've completed the app's one-time setup screens.

Using Hisaab as a Guest

Hisaab does not require an account. If you never create one, none of the information above ever leaves your device — there is nothing to collect, because nothing is sent anywhere.

Account Information

If you choose to create an account, Hisaab uses Supabase, a third-party authentication and database provider, to handle sign-in and cloud storage. When you create an account, we collect the email address and password you provide. Your password is never visible to or stored by the App in plain text — it is handled entirely by Supabase's authentication service using industry-standard hashing; the App never sees or logs it.

Once you're signed in, the local information described above — your profile, missed-prayer records, prayer-completion history, repayment plan, location (if set), and preferences — is copied to a private database record tied to your account, so it can be restored if you sign in on another device or reinstall the App. Database access rules (row-level security) are configured so that each account can only ever read or write its own record — not any other user's.

Location

Hisaab can use your device's location, with your permission, to calculate accurate prayer times and Qibla direction for where you are. Granting location access is entirely optional: you can dismiss the permission prompt and instead manually type in a city, or skip location entirely and use the App's default calculation settings. The permission requested is foreground-only — Hisaab does not access your location in the background or while the App is closed.

If you grant location access or type in a city, your device's own operating system (Apple's or Google's location/geocoding services, depending on your device) is used to resolve that into a place name. The resulting coordinates and place label are then stored the same way as any other setting — locally on your device, and, if you're signed in, as part of your private cloud backup described above. Location is used only to calculate prayer times and Qibla direction, and is not shared with advertisers or used for any other purpose.

Notifications

Hisaab can send an optional daily reminder. This is scheduled entirely on your device using its local notification system — no notification content, delivery confirmation, or related data is sent to us or any third party. Enabling notifications is entirely optional, and the App works fully without them.

Backup Files

The "Export Hisaab Backup" option under Settings → Data & Backup creates a JSON file containing your local App data (the same information listed above) and lets you choose where to send it via your device's native share options. This file is created only when you deliberately choose to export one — it is never generated or sent automatically, and Hisaab does not keep or receive a copy of it.

Third-Party Services

Based on a review of the App's actual code and dependencies, Hisaab uses the following third-party services:

• Supabase — used only if you create an account, to handle authentication and store your cloud backup (see "Account Information" above).

• Your device's platform location services (Apple or Google, depending on your device) — used only if you grant location permission or manually enter a location, to resolve coordinates to a readable place name.

• Sentry — used to receive crash and error reports so we can find and fix bugs. This is limited to technical diagnostic data: error/crash details and standard device and app metadata such as device model, operating system version, and app version. It is configured not to collect your prayer history, qadāʾ or repayment data, profile details, or precise location, and does not include session replay, screenshots, or any recording of what's on your screen. It is not used to identify you personally, to track your activity in the App, or for analytics or advertising.

Hisaab does not use any analytics, advertising, or activity-tracking service, and prayer-time calculations are performed entirely on your device (no external prayer-times API is called). We do not sell or share your information with advertisers.

Data Retention

Information stored locally on your device remains there until you delete the App, use the in-app "Reset all data" option, or clear the App's storage through your device settings. Cloud backup data, for account holders, is retained until you delete your account or otherwise remove it, as described below.

Account and Data Deletion

You can permanently delete your account at any time from Profile & Backup → Delete Account, which removes your account and its cloud backup from our database. Deleting your account does not delete anything already saved on your device — you can continue using Hisaab as a guest with your local data intact, or clear it separately (Settings → Data & Backup → Reset all data). Logging out (rather than deleting your account) will ask whether you want to keep or remove your local data.

Security

We take reasonable steps to protect your information: authentication is handled by Supabase, your session credentials are stored using your device's secure, encrypted storage (not the App's regular, unencrypted local storage), and cloud data access is restricted per-account by database rules. That said, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

Children's Privacy

Hisaab is not directed at children and does not knowingly collect personal information from children under 13 without appropriate consent. If you believe a child has provided us with personal information, please contact us using the information below so it can be removed.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date below. Continued use of Hisaab after changes take effect constitutes acceptance of the revised policy.

Contact

Questions about this Privacy Policy can be directed to Mehmet Ozen at hisaab.support@gmail.com.

Effective Date

Effective date: August 22, 2026. Last updated: August 28, 2026.